Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18d3eb1a-2686-3995-bc81-542d9f93446f.roa
File: 18d3eb1a-2686-3995-bc81-542d9f93446f.roa (raw, json)
Hash identifier: Ytt/TGAYrGj14N700fjgwIK92O7Zl2L5P4sFO/qCRzk=
Subject key identifier: 33:6D:9B:E3:12:CB:C3:ED:63:18:EF:44:77:C1:7D:5C:4B:08:5F:50
Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial: 010D0C9F4328584929F1ACF0C153F9FC04A01000
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18d3eb1a-2686-3995-bc81-542d9f93446f.roa
Signing time: Wed 12 Mar 2025 13:28:55 +0000
ROA not before: Wed 12 Mar 2025 13:28:55 +0000
ROA not after: Tue 10 Jun 2025 13:28:55 +0000
asID: 3738
IP address blocks: 192.250.171.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:f1:ac:f0:c1:53:f9:fc:04:a0:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Validity
Not Before: Mar 12 13:28:55 2025 GMT
Not After : Jun 10 13:28:55 2025 GMT
Subject: CN=4d452f53-4f4e-4811-8cb9-3c806cdf1188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:02:34:85:3f:45:02:e8:a9:fb:06:7e:21:
01:7f:70:25:76:c4:7f:99:e9:2a:d3:67:81:64:ab:
b5:5a:99:9d:ba:a8:9e:ba:07:ed:60:a8:3a:6e:ea:
f7:b6:5c:84:ff:5d:91:8d:19:3a:35:78:25:04:f4:
cf:a7:b3:27:d0:ad:8e:32:c5:ec:66:a3:09:4b:21:
9e:70:12:bb:5a:b5:89:49:93:3d:e6:d7:3a:23:f8:
27:7b:41:46:61:fb:fb:37:99:fd:b1:05:41:55:3f:
6a:d7:b9:03:9d:a5:d7:0c:e9:fa:86:c1:14:41:0f:
e8:e8:2a:6f:4b:a0:3f:ea:17:76:be:0a:b5:7d:ce:
07:9b:25:70:5e:a9:1f:fd:24:eb:e8:d3:a1:3c:0f:
49:c1:bb:7b:13:82:1e:a0:04:24:92:c0:9c:ce:8c:
21:6f:26:4f:47:49:cb:78:c1:66:a7:a3:62:33:4f:
51:a3:3a:73:91:91:7d:cc:44:af:28:09:19:29:68:
5c:bf:80:db:78:f3:02:94:a6:39:59:f2:2f:6e:7a:
30:9b:ce:37:24:fb:9d:7b:4e:46:41:a1:02:d7:cc:
e1:18:5c:44:04:36:a8:17:67:55:32:7b:e5:31:fc:
29:cb:0a:da:92:5f:fc:d6:84:21:32:0e:c4:35:85:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6D:9B:E3:12:CB:C3:ED:63:18:EF:44:77:C1:7D:5C:4B:08:5F:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18d3eb1a-2686-3995-bc81-542d9f93446f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
X509v3 Authority Key Identifier:
keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
sbgp-ipAddrBlock: critical
IPv4:
192.250.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:4c:95:ef:a2:70:78:c3:33:0c:98:68:79:71:31:6a:96:cd:
40:08:02:53:cd:46:17:f4:1d:38:6c:b1:58:7e:3b:00:20:d2:
7b:ef:e1:08:4e:e5:35:ec:2b:e1:89:6b:7c:8a:dd:72:ac:b1:
45:9c:d1:1e:8c:96:90:08:09:32:08:df:81:b7:02:ca:c4:4e:
6b:dc:78:53:d2:fe:0b:e6:35:22:7a:45:44:ad:d5:7e:84:5b:
9b:a5:62:68:ab:09:ae:0c:49:af:51:ec:55:07:a3:d1:70:51:
66:42:20:b8:b0:4d:ce:6c:15:26:a9:dd:f3:5c:9e:50:fa:62:
23:80:d5:52:ba:91:52:87:51:26:1a:86:1a:00:7a:72:13:cb:
f0:d7:d2:70:0f:27:e5:c2:02:7a:a8:22:4f:5e:13:cc:ab:8f:
1a:d1:24:3c:b4:a5:67:ba:78:94:b9:1d:0b:5b:cb:4f:76:1a:
fd:ca:d0:87:50:0e:79:41:a0:6a:77:93:c4:13:a4:ec:4f:ff:
00:1e:46:a3:67:32:59:e3:d7:da:9f:65:16:6d:4b:71:7e:f9:
10:78:a2:95:43:80:88:37:22:a6:9f:ca:dc:91:3d:a2:10:d5:
ef:c5:ac:0f:87:9b:00:41:4d:f5:c8:e3:5d:02:1b:f7:e9:94:
58:af:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net