Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa
File: 51c93d61-da59-3492-9aa3-1e6063528f1f.roa (raw, json)
Hash identifier: Yp+OWFYfaIq8A2ahmxn8SijFB3HPCVPl1I/KlfR8hEw=
Subject key identifier: 58:56:63:67:A0:2D:BE:C7:44:CB:AC:29:C0:3D:AA:0B:5A:19:30:C0
Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Certificate serial: 010D0C9F43285848EF6139963F329DF5DDE0B700
Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 13325
IP address blocks: 148.149.0.0/16 maxlen: 16
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:39:96:3f:32:9d:f5:dd:e0:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=e12ddec0-2b4d-40ec-ab34-ef954ed66279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7e:e4:74:2b:7e:6f:9c:ad:97:a4:fc:dc:57:
84:ab:38:fb:4e:50:ef:2e:22:00:a5:67:4e:b7:75:
55:79:ad:69:94:de:56:28:06:b3:f3:16:fc:a2:5a:
53:08:7b:db:6b:f2:06:0d:94:c4:2e:62:22:48:67:
ac:bb:39:2c:c9:ad:60:a1:e8:08:90:4d:a5:b6:1f:
a7:79:a3:a4:fa:1e:3b:51:f8:39:b6:c8:49:d3:40:
af:e0:14:02:77:83:6f:7b:51:53:fc:54:45:d5:2c:
94:08:f5:eb:28:80:56:d1:f5:25:b9:16:70:96:de:
f7:22:1a:33:b9:52:74:5c:3f:77:8a:d9:ef:5c:8c:
7b:1b:78:81:30:59:ac:c7:99:92:72:3d:f6:e8:03:
5b:ec:6d:53:7e:78:e0:24:8e:1f:3b:06:d8:ec:c8:
24:bb:b5:1c:0e:7f:b8:b3:6e:5a:14:02:26:7f:7f:
9a:9e:1f:51:3c:b9:c8:96:91:af:f0:e9:ee:37:6f:
0a:af:46:1a:f8:d4:bc:91:15:8e:75:95:8f:34:10:
bb:d4:17:ec:c5:7b:19:f7:c0:a7:81:e2:2c:54:9d:
e8:ae:e0:2f:e0:f8:11:17:e7:70:7f:37:6e:f1:86:
24:ab:ea:8f:ab:32:8f:16:59:5e:bb:68:bf:48:96:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:56:63:67:A0:2D:BE:C7:44:CB:AC:29:C0:3D:AA:0B:5A:19:30:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl
X509v3 Authority Key Identifier:
keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:9c:06:40:e6:95:34:1f:b7:06:aa:95:2a:43:8a:df:33:d0:
22:a7:c4:81:ab:67:8e:26:11:d8:cb:b1:07:ce:70:21:ae:54:
6f:9a:56:10:f3:a9:f3:23:85:89:9c:8d:28:93:e9:ba:03:7e:
ad:9b:6e:3d:20:aa:bd:09:04:62:dd:f4:a6:72:14:50:24:b6:
b3:e2:90:53:2b:48:b3:93:6d:01:3b:e2:99:a7:b0:14:28:05:
c3:0e:c8:d1:40:dd:a6:52:19:2e:a3:fd:3a:b4:a4:0c:97:da:
f8:e4:81:05:2b:8c:bd:7f:5b:10:78:a3:0a:ef:18:93:8c:66:
2b:cd:e1:2e:0d:3b:f9:e4:63:b6:c4:cf:5f:35:c1:1a:1c:83:
6c:55:d4:0b:32:36:c4:cb:02:e9:58:4d:e6:04:64:a1:1d:8d:
14:73:75:8d:e0:6e:4b:dc:07:5e:53:d8:f0:ae:ff:9d:69:68:
a1:ae:01:50:1c:9c:0e:4b:3a:84:7d:e0:70:31:15:d4:52:d0:
8f:da:df:b4:96:db:e5:c6:47:42:d6:ff:1f:68:60:bf:a2:c4:
15:75:dc:aa:8b:a8:76:95:90:67:3d:00:f9:e8:18:65:09:45:
78:68:b6:ec:bd:a9:fa:73:08:bc:87:e1:2e:48:01:88:6f:16:
db:a7:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:16 2025 by rpki-client on console.sobornost.net