Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa
File: 709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa (raw, json)
Hash identifier: y0+4yja7/XzW3f6NtRcC+7H633iZWB/MilR1sFt2ikE=
Subject key identifier: B0:42:3D:6F:6B:33:E3:E6:0A:22:49:3B:D7:F4:2B:6E:85:35:B0:EC
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F432858496B7ED5EB8DA2DE789F76B9C0
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa
Signing time: Sat 05 Apr 2025 01:00:47 +0000
ROA not before: Sat 05 Apr 2025 01:00:47 +0000
ROA not after: Fri 04 Jul 2025 01:00:47 +0000
asID: 22359
IP address blocks: 208.52.177.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6b:7e:d5:eb:8d:a2:de:78:9f:76:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Apr 5 01:00:47 2025 GMT
Not After : Jul 4 01:00:47 2025 GMT
Subject: CN=3b4e1778-a858-401b-963e-bab536244b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:9f:4d:dc:fc:a4:af:ff:d0:d9:99:41:d9:
65:49:9b:03:be:0a:1a:52:67:70:ff:f1:eb:b9:0d:
5d:ea:bb:1b:da:a9:cd:a4:85:e5:84:27:de:ef:4c:
36:cd:94:c2:20:ec:a0:96:89:d6:ba:02:2b:56:23:
c6:66:b2:ef:9a:a3:8e:2a:bd:ba:c5:5c:90:e6:9b:
2e:39:af:26:8b:6c:f6:47:28:ed:1b:56:93:76:c9:
10:5a:ee:d4:80:2d:39:af:22:18:f4:0d:da:3a:18:
e3:f9:9b:4c:b1:e9:67:9d:6c:e5:67:35:e0:ab:0e:
32:57:01:81:78:14:50:6a:6a:91:56:11:2f:39:b2:
3c:83:ad:56:00:a9:3e:37:f1:89:29:62:1b:e2:ab:
cf:ea:c9:e3:6e:2a:b4:32:d3:34:b5:6d:41:a6:61:
4d:fb:9f:d9:dd:58:11:b4:d3:1e:d0:2c:f1:12:5c:
2d:db:34:50:fb:15:11:86:cf:a2:a5:f5:60:3b:00:
db:89:d2:32:2c:5a:9e:e9:a5:2d:d0:9c:9f:db:1c:
d3:90:73:06:66:07:4d:ee:70:1d:5f:50:da:f3:0b:
f2:94:35:bd:26:5d:24:83:93:f0:cf:28:be:4b:94:
ee:c3:09:64:7d:d6:00:3d:fd:37:56:2a:15:1b:b8:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:3D:6F:6B:33:E3:E6:0A:22:49:3B:D7:F4:2B:6E:85:35:B0:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:9e:7f:0e:1e:09:da:ed:3a:2c:04:d7:03:6a:ae:3b:33:33:
f9:68:23:f5:d1:b6:e4:e6:8b:ad:3b:0a:0d:2d:79:94:f8:c8:
7a:36:ef:79:ed:c7:4c:dc:5c:6e:9a:a0:0b:7b:b1:ed:2c:81:
7b:f3:41:8c:df:97:85:b0:17:33:38:bb:37:4d:0f:da:55:74:
af:24:29:06:d9:5b:34:51:8b:c8:15:e6:43:fe:f9:bb:9e:59:
74:e1:28:be:c0:76:21:57:78:5d:98:7e:fe:46:fc:68:c0:58:
94:8a:ef:bf:61:b4:f7:43:d9:78:a4:43:ee:fb:84:d1:da:82:
4d:eb:f0:32:df:44:ed:a7:33:ab:bd:88:0a:fc:ae:d9:71:33:
34:50:f3:d9:ac:9f:08:80:66:63:32:34:98:3f:35:7d:ea:68:
b9:29:e2:90:6b:e5:b5:24:01:83:01:60:ae:aa:88:74:62:3a:
46:2c:91:37:29:03:f1:cb:93:aa:a7:fb:38:3e:04:b0:40:b8:
5a:23:48:5e:fa:14:5f:ee:4f:09:5e:55:14:20:b0:30:6a:bc:
27:f9:4b:2a:fd:b3:43:67:be:17:b9:61:df:38:45:bd:07:ef:
aa:1c:34:8d:04:ee:c4:1e:34:b0:d6:9f:6e:21:ec:4b:04:87:
07:4d:9a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:05 2025 by rpki-client on console.sobornost.net