Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa
File: e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa (raw, json)
Hash identifier: rBNaamGD5xodQlcoAFX9xZu+VSsmbBpqIHmnOo8xPac=
Subject key identifier: 38:D0:A5:86:AE:23:B9:36:FE:C6:9A:A8:C3:B4:E2:82:93:CC:0F:F8
Certificate issuer: /CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5
Certificate serial: 010D0C9F4328584964844BDE101A38B52BA59880
Authority key identifier: CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 400458
IP address blocks: 23.148.104.0/24 maxlen: 24
2602:fbc0::/40 maxlen: 40
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:4b:de:10:1a:38:b5:2b:a5:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=c7dd75dc-d45a-480c-a8ab-0abcb6e21480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:60:75:15:71:b4:9a:da:bb:d2:8f:8e:ba:
77:9b:14:51:e7:2c:05:37:2d:61:4f:3e:41:0d:e3:
88:4f:9f:38:37:36:83:a0:de:34:0c:05:f0:98:9f:
6c:d7:a0:26:2f:a2:75:e9:9a:2a:ac:52:c8:b6:58:
de:7e:a4:b4:65:70:bc:ee:72:d7:19:b4:a1:b4:60:
ac:48:fe:e8:54:c1:bf:29:6e:5c:c2:07:50:9e:67:
e1:36:b9:34:26:cb:aa:07:98:be:0a:60:cf:ec:4f:
46:84:f9:79:63:7d:0e:7b:3e:92:1f:36:99:d4:5e:
c5:bf:b2:40:18:48:1e:62:11:3c:1e:f3:dd:82:69:
bb:47:0a:3c:59:4d:ac:c3:b4:66:b4:7d:3d:93:ca:
69:ec:da:a5:13:55:ca:4c:2c:14:2c:6a:ed:75:d2:
6d:d7:d0:a8:5c:eb:87:21:20:8d:f9:02:4c:17:cf:
4b:02:65:69:3f:31:b9:2b:b6:62:e7:6f:69:a9:f5:
38:76:65:93:72:fa:23:0a:a4:60:d4:f7:f5:60:c1:
d6:d2:d5:d1:87:5f:36:9e:47:87:ce:50:17:23:8a:
6a:db:85:36:e8:e4:38:38:57:6b:17:3a:ad:df:b1:
19:cf:1a:28:41:f2:54:b8:fd:48:a6:cc:b0:fe:ba:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:A5:86:AE:23:B9:36:FE:C6:9A:A8:C3:B4:E2:82:93:CC:0F:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl
X509v3 Authority Key Identifier:
keyid:CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.104.0/24
IPv6:
2602:fbc0::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:26:43:7b:aa:6e:8e:52:a4:66:19:a2:43:3e:b8:6d:c7:bb:
f8:3e:fd:12:37:88:90:70:c9:11:a3:fa:f8:35:b8:5e:70:c3:
1d:1f:f2:4d:64:19:64:dc:1c:8d:ed:50:34:b5:a4:a3:30:e1:
87:a0:09:25:3e:f1:19:a1:e6:a0:5e:81:12:44:9c:ed:07:f6:
bf:10:b4:8e:1b:02:42:f9:16:f0:b8:6e:0c:9d:ce:00:c5:61:
49:3e:0c:7a:01:32:a8:ae:13:0e:6e:7f:14:6e:7c:d3:27:7d:
f8:fa:e5:54:24:e6:aa:0d:27:13:66:60:13:30:70:2b:e9:71:
10:97:c5:ad:78:ac:0f:ff:a1:7a:76:08:02:3e:d2:7c:a9:df:
b1:eb:87:d1:09:2a:ed:39:aa:9b:a8:a0:f7:29:4b:a8:94:38:
a3:7f:82:07:90:cd:f8:fe:d8:fa:eb:e3:2e:48:40:b3:e0:34:
19:45:1b:91:32:be:d6:ea:36:4d:c8:82:f6:c3:35:d9:3a:5e:
df:2c:24:49:b5:00:36:af:00:69:61:cd:2d:93:c2:3a:6d:c0:
25:06:e9:b1:ab:13:65:4e:70:e4:98:10:7e:97:6a:ed:fd:6e:
24:15:b3:e1:3c:41:3b:4c:13:17:ba:cf:f5:f2:d3:d5:ef:a9:
4c:12:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:08:49 2025 by rpki-client on console.sobornost.net