Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa
File: b6e14efa-29c2-321e-91ea-20c36382b1b0.roa (raw, json)
Hash identifier: /33OFjVN3cIVrZBUr4XGep8jelPTbuV8/mlLZdEWQ7k=
Subject key identifier: C3:A0:B1:34:2A:7B:2C:AF:72:04:D2:88:13:67:11:06:A9:71:34:A1
Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial: 010D0C9F43285848E9CBE41FEC2E04B38C734600
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 46632
IP address blocks: 216.238.0.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e4:1f:ec:2e:04:b3:8c:73:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=9cf596df-d754-4133-87fc-8d9c1ad9cce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:b3:88:87:4e:0f:3a:df:2b:9b:27:b2:c9:
aa:de:52:fb:8b:31:27:37:a3:e6:09:c8:23:2b:18:
48:f7:7a:a6:a5:c7:8f:fa:7f:7e:22:25:e8:a0:98:
ca:0f:90:a2:42:85:78:53:71:a3:f1:a2:9e:ed:f5:
11:9d:02:4d:62:5a:e0:05:d5:5f:07:63:cd:5b:18:
f1:96:1e:35:4c:c5:31:c6:2c:94:6c:dd:08:9d:94:
dc:f4:ee:fc:5a:7a:24:64:f0:c1:98:e3:e5:b7:ad:
bf:bf:f2:94:8d:47:01:8d:90:d6:b2:07:7a:13:5c:
06:b4:ad:c6:b5:75:03:44:a5:c1:97:ed:63:d7:77:
bd:77:e7:83:b6:0d:0f:ea:0e:c8:eb:fe:69:19:da:
46:e3:63:4c:db:1f:0d:41:2a:40:c2:be:ea:0a:a8:
27:f8:39:a4:17:da:ce:c6:f7:b3:91:0b:f9:1c:60:
e7:55:e8:a0:cf:8e:56:59:62:f3:9a:a0:5d:87:6a:
ba:9e:82:d5:a8:80:8f:31:fa:c7:59:89:c8:ea:a5:
ef:2c:78:3d:50:07:3e:14:1c:25:de:9e:94:ab:0a:
40:2a:2b:80:0f:4b:aa:60:79:44:8f:3a:2b:27:b8:
b5:d0:20:7e:1f:1c:06:bb:0e:64:0b:65:81:43:69:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:B1:34:2A:7B:2C:AF:72:04:D2:88:13:67:11:06:A9:71:34:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
X509v3 Authority Key Identifier:
keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.238.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:50:b5:a2:c8:72:5e:31:45:c2:04:ab:bb:72:31:f1:84:61:
fe:f0:37:7f:48:79:33:05:9d:d7:27:b4:48:2c:6c:6b:46:94:
b5:47:e9:c9:e5:90:c5:c4:c7:8b:b5:c7:ef:4f:9d:83:22:39:
47:77:24:5b:bf:82:a2:5d:8e:64:b0:20:fc:40:1b:2a:cc:e9:
2a:9a:88:0d:6d:99:c7:4b:73:7f:ef:f9:00:c6:b3:c9:af:eb:
97:6d:c7:d7:e1:d1:fe:f6:ff:9f:3b:38:a6:61:d5:39:6d:0d:
78:a5:6d:71:5c:9d:e2:74:f9:e4:ec:90:47:6a:33:68:56:51:
5a:21:fc:f3:e5:47:31:ca:50:8d:61:59:e4:93:6f:ed:78:32:
e1:c5:a6:22:5b:7b:b3:43:f6:bd:93:14:f6:54:27:ea:7e:95:
55:65:01:a0:54:30:0e:b5:9d:fe:17:9e:2d:dc:bb:a6:17:a0:
11:69:7c:2c:46:28:93:08:b6:8a:9d:93:df:50:32:ca:87:c8:
e6:50:c6:c2:be:7a:bc:82:fa:3e:80:04:46:c7:9a:af:32:30:
4d:9c:a2:8c:80:0e:f7:3b:39:d8:63:ad:cc:16:bc:64:83:52:
2c:9e:ff:3a:ff:f6:42:43:fa:be:65:b0:27:15:5f:8a:a5:eb:
03:0d:2a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net