Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa
File: 1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa (raw, json)
Hash identifier: qq0/LWVkvc4DyBHksUyRL/70DGVof/Twrjre34TcEbc=
Subject key identifier: A4:FD:B9:90:77:70:98:88:3F:F1:D4:21:E1:25:B2:5A:09:F5:5E:A5
Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Certificate serial: 010D0C9F43285848BE8625859534A872737E96E0
Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 8075
IP address blocks: 208.64.86.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:25:85:95:34:a8:72:73:7e:96:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=0955c838-7e3d-4f9e-b62d-2a87b2d4fe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:b6:94:0f:e5:94:51:c6:20:57:fa:7d:37:
64:98:8a:75:b8:1f:71:96:0d:19:13:6e:0b:54:6f:
53:5f:e4:d2:2a:c0:0e:65:d1:d9:9e:b1:37:4f:fc:
8b:a3:46:e4:37:21:fe:49:a2:2f:0f:fd:c7:e3:af:
59:6a:88:a7:80:81:dc:e5:26:b3:bd:d9:98:6f:28:
c7:a2:b9:34:da:3e:1e:f7:15:84:60:72:3b:00:5a:
23:eb:b0:6a:b3:04:15:8d:17:2e:e3:a0:9f:41:ce:
6d:e9:4d:4b:96:b0:e7:d2:ae:46:c9:ab:6b:43:24:
9b:62:7d:db:ba:eb:12:38:16:93:f4:fc:77:a0:0d:
3a:60:6d:08:66:d0:b0:0b:23:27:4a:91:76:ee:19:
75:5f:42:3b:25:5a:82:22:f5:ad:af:a7:09:31:ea:
d5:0a:c8:08:a4:83:36:0e:62:66:a2:5f:ce:43:c7:
7e:76:82:72:9c:36:e2:20:e5:46:db:20:fd:70:d8:
69:29:1f:69:21:c8:a6:6e:db:96:b6:00:7e:d2:c1:
61:58:88:60:7a:b4:a5:98:2c:63:75:7c:4a:a4:72:
62:33:0e:d0:ac:59:f5:0b:21:ee:9f:a0:46:d3:88:
01:41:58:81:a9:0e:01:31:e7:8e:78:e5:ad:83:f1:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:B9:90:77:70:98:88:3F:F1:D4:21:E1:25:B2:5A:09:F5:5E:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
X509v3 Authority Key Identifier:
keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
sbgp-ipAddrBlock: critical
IPv4:
208.64.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:bc:e5:8b:c0:86:5a:95:95:ea:23:9f:71:7f:b3:21:39:27:
a7:f5:9c:0a:1f:ae:44:7c:9a:49:83:67:d0:5d:de:15:a7:07:
18:e5:32:f9:67:bb:80:4b:0c:46:21:b5:d4:13:7c:fb:e8:50:
3e:8a:ac:49:cf:2b:21:80:5b:1e:2d:bd:62:bc:2a:c3:64:c9:
ea:dd:7b:37:b8:a0:e4:64:58:83:4e:ee:e2:56:c5:5b:13:cf:
1d:a6:1a:9f:47:a6:7b:f8:52:64:03:dc:1d:7c:7a:41:fc:3b:
a4:10:8f:cc:3a:9c:cc:88:a7:7a:e1:77:5d:d7:2f:64:52:98:
bf:78:88:c8:22:aa:70:18:ad:98:03:8c:b8:23:89:d7:4f:7c:
07:4e:ed:cc:e6:f0:56:58:fd:7e:4f:6b:38:3d:8f:78:37:20:
1f:d8:7b:60:9a:20:fc:58:08:af:a6:08:84:dc:e4:17:cc:04:
d5:10:fd:e8:b2:14:35:a5:99:2f:60:60:da:08:72:c1:3c:c4:
35:0b:8c:19:1a:5d:a8:e3:2c:e6:81:eb:b4:45:4a:9e:24:6e:
31:e6:6f:ef:af:bf:ae:81:1e:49:b8:35:f0:3b:f1:a0:03:32:
f3:d2:40:57:a8:e3:50:e4:23:29:a9:f5:25:b5:e0:02:bf:b6:
77:8b:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:27 2025 by rpki-client on console.sobornost.net