Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
File: b6a532df-da9c-3734-8cc8-975860ee4905.roa (raw, json)
Hash identifier: lQpMSh0KRnm0CDDc/oII5wq+pUc8WNCiK32hkCYJmEU=
Subject key identifier: D9:96:14:82:89:65:8F:A6:94:06:EC:10:2F:53:45:AF:99:5D:B5:6E
Certificate issuer: /CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Certificate serial: 010D0C9F432858495D896471A891E49D061E1980
Authority key identifier: 8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 203020
IP address blocks: 142.202.252.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:64:71:a8:91:e4:9d:06:1e:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=7731b02b-b18f-4b50-a4bc-30ed5b8c4890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:32:b1:8c:a3:0e:21:c4:43:c9:18:26:10:26:
92:46:29:ab:9d:76:d0:90:a8:88:47:5c:1d:1d:ac:
ce:e3:1c:30:96:08:19:40:18:3f:e2:f8:54:c0:72:
02:b0:22:f4:99:ef:68:1c:75:20:5a:90:69:54:04:
68:ed:8c:13:83:ef:8e:55:99:b0:72:09:63:83:b9:
ad:58:64:64:1f:7f:7f:7f:ab:86:6e:a0:71:0c:dc:
26:e4:f5:25:45:54:02:d8:42:c3:b6:4e:ad:45:11:
70:1a:fe:c0:8c:d7:a0:09:db:fd:4e:f7:b3:71:c4:
6c:7b:9a:f6:0e:d5:8b:ed:ec:32:76:6d:9b:ab:d2:
74:99:9f:73:37:c7:75:02:0e:2c:ac:5d:be:f1:de:
a8:52:58:72:4d:31:ca:d7:42:e6:4c:10:19:51:32:
a2:5d:15:1c:20:bf:6a:e5:d6:c7:2f:39:1e:39:ab:
fe:bb:8c:40:6e:99:9d:27:cb:e6:e7:78:2a:97:31:
c3:fe:94:e1:72:7d:b8:48:a2:56:52:42:3c:e3:6a:
66:27:51:a6:f6:a2:ba:82:1d:26:1c:93:2b:88:31:
0a:12:80:63:05:e0:64:c1:a3:79:c1:46:1a:36:2c:
c4:e2:2b:8b:9b:e1:1c:47:b9:12:f6:f7:ab:9e:0c:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:96:14:82:89:65:8F:A6:94:06:EC:10:2F:53:45:AF:99:5D:B5:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl
X509v3 Authority Key Identifier:
keyid:8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:83:4b:2c:59:66:64:95:2d:ce:39:89:ee:8a:19:04:3a:12:
4a:76:14:78:88:e5:5d:1c:ac:d3:80:5b:77:38:9b:ed:bd:66:
bc:aa:8f:81:e5:58:ff:2e:57:34:2f:19:cd:71:89:68:ae:ab:
2a:ae:d5:e6:3c:67:f1:49:04:5f:fb:89:17:d7:5a:a7:b3:43:
43:b0:62:62:e0:58:17:01:cf:35:65:ab:ff:b1:01:4c:92:f5:
fa:d3:65:12:8f:c9:84:f0:a3:97:d9:95:40:f9:b5:24:dc:b2:
62:c2:e1:33:7a:1d:4a:aa:fd:dd:23:13:d3:65:2d:5e:52:a7:
31:4f:38:54:69:0c:ec:62:ef:9e:16:7d:a2:f2:51:fd:b5:09:
d4:f9:7e:08:09:00:85:52:19:c0:85:e4:b9:00:1e:62:42:03:
2b:bd:f4:07:1b:b0:de:3c:08:75:60:41:82:38:ed:e0:4f:fa:
90:06:68:b2:bf:83:9f:38:78:ad:56:ad:89:69:c9:48:79:be:
ac:55:43:43:cd:ce:92:f9:95:b0:e1:6c:6a:a0:53:52:b5:47:
23:01:b4:1a:79:e5:19:a1:7c:bd:33:d8:6e:a9:92:b1:86:fe:
53:83:79:ba:23:76:6d:d2:55:5a:e7:6d:8f:a6:da:e9:9f:ed:
47:3a:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net