Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa
File: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (raw, json)
Hash identifier: XEy4/Ywp3fHDdT/ROl0v2nYQ0XEE47SHTUG0K2Ro4RA=
Subject key identifier: C1:75:56:53:67:02:83:D2:29:5D:16:06:9E:F7:6C:65:ED:21:E0:8D
Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e
Certificate serial: 010D0C9F43285849806F214B8422B2BD8D065900
Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa
Signing time: Sat 12 Apr 2025 13:01:01 +0000
ROA not before: Sat 12 Apr 2025 13:01:01 +0000
ROA not after: Fri 11 Jul 2025 13:01:01 +0000
asID: 49585
IP address blocks: 23.149.40.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:80:6f:21:4b:84:22:b2:bd:8d:06:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e
Validity
Not Before: Apr 12 13:01:01 2025 GMT
Not After : Jul 11 13:01:01 2025 GMT
Subject: CN=2988c3de-fd52-4968-bf88-4552690146b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:4c:d7:fe:d7:c9:7d:66:a9:be:16:0e:b0:
fe:68:2f:e2:7d:33:56:14:a0:07:e5:68:56:67:a7:
b8:9a:fe:0a:71:f3:10:3a:cc:47:46:cd:15:41:60:
6f:d8:08:6b:0a:f6:49:42:2d:ed:66:a8:65:93:a4:
6c:22:2a:e6:5f:fa:b6:e1:e8:d2:b5:b1:18:b6:2b:
92:95:ac:38:80:01:fc:c1:c9:59:40:34:fa:3d:2a:
e2:3d:13:1d:16:d0:68:76:5b:cf:d0:de:c1:fe:49:
e5:96:1b:37:48:ea:4d:df:10:f5:a2:f0:35:fd:26:
7c:68:30:59:19:0f:15:c9:2f:48:0e:37:e8:16:38:
18:a3:5c:7c:30:98:02:f9:e1:06:95:18:b8:7b:79:
92:a2:91:a6:cb:27:80:9a:29:ee:05:6c:5a:c3:eb:
60:59:38:e9:b1:d0:01:2f:f6:85:d1:ab:e2:73:a1:
07:c1:f3:98:8e:1d:e0:18:88:73:13:24:cf:e2:e2:
e9:1d:71:61:8d:30:33:02:e5:ef:c7:5e:bd:9d:82:
11:f7:82:30:c5:c9:09:c4:c6:ed:48:78:fb:8f:9d:
7f:78:69:41:cc:ad:f4:95:bc:f3:b5:72:a8:50:85:
1c:f7:1d:74:af:22:13:a3:2f:42:f8:b5:85:e1:2c:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:75:56:53:67:02:83:D2:29:5D:16:06:9E:F7:6C:65:ED:21:E0:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl
X509v3 Authority Key Identifier:
keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:05:e1:4d:46:f0:07:3d:78:1e:cc:63:c4:8b:57:35:a5:fe:
29:67:45:36:18:bd:07:93:f5:1e:9f:0d:6b:7a:b4:17:b3:4f:
61:78:78:46:25:36:d6:53:ab:60:f5:8e:23:87:68:b2:6b:c7:
6a:28:54:e0:84:6c:61:ee:c3:01:f2:1b:e7:e9:22:e1:5e:a4:
1c:cf:ed:fa:4d:fd:79:8f:df:ac:dd:78:ff:71:24:43:7b:84:
66:a6:b6:77:ac:1a:75:f3:73:c1:88:fa:32:9a:f0:19:e8:18:
a6:53:46:9e:59:b8:d1:c6:f6:6c:37:98:05:f6:cb:17:53:9e:
fe:1e:5a:3d:99:d4:6e:5c:56:41:5c:87:2c:ff:2a:0b:dd:ca:
a5:03:bf:a8:22:95:a4:0a:d3:fa:7b:7b:99:7e:f0:47:ec:66:
5d:40:5f:ba:38:8e:05:72:fc:a6:09:06:08:29:09:9f:5d:e1:
b5:21:8e:1a:54:62:39:eb:25:91:d1:19:e7:45:67:ba:dc:65:
66:49:be:3f:76:a4:d7:f5:d8:1a:9a:8d:ed:1f:55:9f:12:66:
47:cf:68:29:8e:f5:47:58:1d:f0:90:1d:25:fb:f6:fa:1d:97:
e3:a0:36:bf:f7:6d:ff:fa:3c:cb:ba:e0:14:b0:8f:e5:a7:98:
c0:5d:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net