Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa
File: 20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa (raw, json)
Hash identifier: bfy514MA4FQzwfx2l1Q9aAINSyImJILZC60UEtWUEIQ=
Subject key identifier: 10:33:33:69:5E:17:41:9E:69:DA:06:21:3C:37:CC:FC:B9:72:55:85
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F43285848F926AFCB22BAC0E299675780
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 54994
IP address blocks: 157.185.131.0/24 maxlen: 24
157.185.132.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:af:cb:22:ba:c0:e2:99:67:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=151a5859-08ac-4757-841c-7ef422a32abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:8a:26:bd:f0:99:25:02:e3:e1:a2:50:56:
66:c4:83:4d:17:f0:80:96:4b:1a:d4:90:a0:65:f7:
63:72:8c:9c:d0:8f:e1:89:77:94:60:d0:41:71:ce:
d8:8f:d2:6e:a1:ea:4e:58:be:1e:79:40:68:ab:28:
61:8f:59:a1:2c:57:c2:fd:15:e1:cd:15:96:3a:f4:
b1:50:ee:a0:c3:79:01:fa:7d:9b:cf:54:3b:ae:69:
67:99:84:45:05:75:2e:0a:6e:fa:2e:cb:b5:dc:14:
30:e0:73:fd:93:cf:9c:63:14:2c:5f:e9:ed:48:53:
0f:56:d5:53:1d:16:1e:af:11:53:e2:73:72:25:ce:
88:e8:ef:56:8a:f7:73:f9:45:e9:4a:89:fb:9b:e0:
98:ea:63:59:9f:6d:bf:b1:8a:01:95:ac:15:79:00:
1b:66:12:16:77:71:89:3a:9a:3c:4a:98:6c:4a:13:
32:e4:92:bb:98:8e:f7:fa:e3:c1:d9:1b:0d:3c:8b:
52:1b:1a:62:ae:ac:eb:bc:66:37:f2:4f:14:4b:90:
5a:2d:c4:68:64:29:e1:87:d3:a4:fc:35:c8:df:00:
4f:ad:08:be:e0:da:f9:dc:fd:9c:be:c8:3e:cd:b7:
42:80:ba:5f:af:21:c4:3b:fe:f9:a9:35:53:6a:66:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:33:33:69:5E:17:41:9E:69:DA:06:21:3C:37:CC:FC:B9:72:55:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
157.185.131.0-157.185.132.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:d5:09:fb:56:26:60:03:a9:7b:57:92:98:15:7f:11:f9:73:
b5:5f:d4:fb:6c:9f:1f:8e:65:35:5a:64:d4:85:71:88:7b:e4:
da:6f:f3:67:ac:15:e2:89:e1:50:83:7d:ca:1a:64:09:df:52:
57:2d:e8:08:1c:90:16:52:a8:2c:ab:d2:c1:f3:44:30:2d:8f:
f9:3b:77:30:56:3d:07:30:91:95:13:ea:1f:15:61:c9:c4:fd:
6f:3f:14:2d:27:99:70:20:55:6a:52:80:e2:ce:d6:7c:61:c3:
79:75:2a:1f:df:99:99:70:f7:0d:70:1e:d4:88:a5:22:ab:97:
af:a5:5b:e5:1b:31:f8:89:12:ae:b2:d2:92:5e:07:88:62:36:
6f:f0:e7:ff:75:8b:17:42:47:18:ac:a3:91:c7:4c:ab:43:7f:
d1:7f:42:c0:f8:ce:86:c9:ad:49:4f:07:ec:8e:89:f5:41:f7:
e3:64:15:e9:5b:80:f5:ce:62:77:fa:07:46:96:b4:6e:c3:b3:
91:e8:ea:23:5d:2f:fd:b1:f2:af:6b:a9:9e:40:cf:a8:8e:cd:
2c:59:ab:3d:d1:fe:40:a7:bb:d9:12:d8:a8:85:00:3d:57:16:
4a:00:3b:69:95:14:6e:ae:53:10:bf:4a:62:20:08:2a:1a:cd:
b4:a4:b1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:27 2025 by rpki-client on console.sobornost.net