Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa
File: c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa (raw, json)
Hash identifier: DVzvxnN11F408xTWZADfiTKb9haUh/JuqdPHa3z7ciQ=
Subject key identifier: 43:CE:BD:A1:6A:C0:66:D3:17:14:65:2B:17:65:BE:08:43:7C:65:0D
Certificate issuer: /CN=16ef2847-f477-40df-9a9e-50bd5864acb7
Certificate serial: 010D0C9F432858496484468172A5A41A94D62980
Authority key identifier: 7E:83:15:D8:9C:3F:F4:DE:0F:35:34:4F:AF:E7:29:43:2B:31:30:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 399034
IP address blocks: 134.195.169.0/24 maxlen: 24
172.98.30.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:46:81:72:a5:a4:1a:94:d6:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ef2847-f477-40df-9a9e-50bd5864acb7
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=ae70c5c4-898c-4a8d-b917-db4106da226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:ad:fa:4c:3a:ce:44:af:50:a9:f0:1f:2a:
87:4a:7e:a2:86:03:1b:c6:9b:a3:82:ea:f8:55:46:
2e:40:3a:d6:ef:6e:0e:f5:26:46:86:c6:51:80:d8:
02:97:d6:37:72:33:a4:de:e9:93:d3:6b:38:4e:50:
63:ee:62:a0:76:82:b8:c7:08:3e:a0:3d:cf:0a:1a:
79:d2:75:94:69:a7:97:2f:c1:22:bb:2e:00:5a:5c:
07:f7:44:02:03:53:9d:ca:21:0c:84:c2:bc:29:e0:
47:7a:d4:37:12:5a:06:40:3c:44:78:07:d2:df:c4:
14:cd:ee:63:b9:b5:e0:df:b1:fd:49:28:31:d6:4e:
fa:2a:c8:90:1c:4e:b4:7d:cf:d9:0a:7e:1d:73:f7:
9f:51:67:c0:b1:ec:dd:ad:a8:46:bd:b8:fd:95:7f:
22:9e:a3:5d:e4:ca:91:94:a7:ea:f0:f2:6e:f2:cb:
6c:65:8e:2a:31:25:a5:fc:a1:06:8d:1f:77:16:76:
d9:ae:45:55:67:1e:0c:38:14:e8:cd:e5:01:29:00:
4e:ce:56:2a:75:6d:dd:4c:a8:2b:70:78:fb:2b:08:
54:90:1a:55:fc:c7:c1:0c:0c:f6:22:9a:a3:c9:0a:
90:3d:d4:46:fc:e7:d9:b8:11:52:c6:61:07:55:14:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CE:BD:A1:6A:C0:66:D3:17:14:65:2B:17:65:BE:08:43:7C:65:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/16ef2847-f477-40df-9a9e-50bd5864acb7.crl
X509v3 Authority Key Identifier:
keyid:7E:83:15:D8:9C:3F:F4:DE:0F:35:34:4F:AF:E7:29:43:2B:31:30:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.169.0/24
172.98.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:26:67:19:e2:2f:bd:1e:6f:dc:be:c2:ee:33:90:d4:95:f9:
ad:29:4f:0d:90:d5:ff:60:42:96:90:4f:11:24:49:9e:35:21:
60:c7:46:c0:03:9d:ab:44:be:ad:ce:22:b6:59:48:80:1a:ba:
0c:6a:73:46:12:2e:bd:fd:9e:e9:c7:29:61:1b:3d:d0:5a:6d:
c8:dd:5d:e1:91:f8:7f:10:2e:c1:98:91:e8:96:a9:e6:bb:82:
63:d3:88:a6:5e:e4:fb:a0:b8:fd:56:b3:d9:34:5a:f7:f1:3f:
93:4e:f7:1b:a9:68:47:cc:2e:73:1e:58:13:23:a8:a3:e4:11:
22:e0:f6:a3:ec:7c:27:6d:1f:9d:fc:7e:e2:49:ce:ef:f7:4c:
5f:7c:6c:bc:c4:99:20:40:57:43:eb:41:7b:46:ab:8f:59:24:
d9:69:5b:61:8a:cf:50:05:90:3b:38:15:95:ea:e9:c8:dc:d2:
cb:83:f9:2a:3f:6c:35:46:2b:b0:62:6e:10:98:ab:e6:07:3e:
7c:c8:a2:b5:e8:6f:52:0a:2c:6a:83:5a:92:df:ec:44:7c:de:
87:cf:a8:40:c5:7a:4a:87:0e:38:4d:15:c5:80:72:0a:b1:b2:
69:c5:db:b0:80:d3:78:ad:93:06:9a:bd:fd:68:aa:47:bb:d4:
26:04:a9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:05 2025 by rpki-client on console.sobornost.net