Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa
File: 3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa (raw, json)
Hash identifier: Q6WyJ1yQoe4ZvEINbDhvx+dHYuksfQcK76+YNbg4Kvs=
Subject key identifier: D3:07:4E:C1:FB:C4:2C:5A:3C:AA:62:3F:45:39:D7:3D:83:3D:5E:5C
Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial: 010D0C9F43285848B1F62F34F2F41443EBA4B8C0
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 3738
IP address blocks: 192.250.140.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:2f:34:f2:f4:14:43:eb:a4:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=d100b205-6cc2-46d3-a7cb-7a4311a04635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:70:e7:be:03:bb:6b:30:1c:a9:57:4e:f3:
5c:40:89:4a:98:65:51:87:92:bd:25:a4:fb:db:4e:
75:95:81:c6:ee:96:23:8d:81:8d:02:2e:24:0a:45:
a1:e2:14:e2:33:b1:d0:55:9d:c3:00:fa:e0:54:be:
db:90:e7:ac:6c:b1:cf:d0:83:5c:aa:72:54:33:ee:
3f:ed:38:4e:2f:91:b0:f2:30:a6:58:65:d9:a7:e3:
40:6a:e3:fd:a8:67:ef:e4:e8:e0:58:e5:62:bf:73:
6c:75:ee:b1:94:88:f2:5f:87:e4:2b:14:d8:76:7f:
e3:33:41:40:bc:83:4a:97:34:e8:4b:22:c5:b1:3f:
1b:d8:83:dd:61:ff:6c:40:01:e1:c7:cb:d2:9f:94:
24:53:e5:51:0e:a0:7e:71:40:89:70:c7:07:af:f3:
a7:65:6e:ed:27:48:e6:a9:24:9a:74:48:d7:b8:21:
f4:bc:88:ca:76:d4:be:28:bc:01:cb:b0:cd:5b:a2:
7a:25:6a:a1:3f:7e:bc:e9:cb:7f:77:81:62:2e:f4:
af:44:15:48:70:33:22:bb:c2:d7:10:0e:a1:0c:3d:
3e:bb:48:bd:8f:40:cd:fb:98:76:35:bd:f7:40:ff:
b4:5f:0f:fb:88:92:a9:e3:f1:de:0b:36:3c:3a:c8:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:07:4E:C1:FB:C4:2C:5A:3C:AA:62:3F:45:39:D7:3D:83:3D:5E:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
X509v3 Authority Key Identifier:
keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
sbgp-ipAddrBlock: critical
IPv4:
192.250.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:56:73:80:86:85:61:c5:33:dc:79:0a:a8:67:9b:2f:27:39:
66:55:83:71:60:ab:75:8a:b1:7b:7c:57:1a:09:cf:19:4d:9a:
c2:77:5f:c1:38:13:b1:af:21:e6:90:c3:6d:7b:ab:04:c8:81:
f8:44:31:28:57:0e:e8:4e:4f:aa:0f:ce:d0:55:9c:0b:a5:59:
d9:c6:9e:fa:eb:f7:3f:52:6a:29:60:24:f3:ec:c8:b4:01:72:
c8:6a:de:60:25:8e:ec:ca:45:96:20:c8:81:03:70:16:01:f8:
e2:96:64:99:d4:0c:99:7b:db:5a:20:9b:fd:45:2a:9c:f4:41:
2f:f9:06:70:48:80:73:34:1f:bc:ee:45:b0:ef:2b:9c:3e:0e:
28:eb:c5:07:cf:bd:2d:69:f5:60:fc:03:cb:81:8d:42:ce:96:
4d:a1:e5:4e:b8:18:74:33:a8:3b:bd:0d:9f:ba:aa:29:50:20:
00:85:f2:1b:5f:73:f6:22:78:b0:71:84:d7:37:1f:56:a2:78:
f7:df:4c:cd:36:de:8d:66:ef:b5:51:6e:2c:4f:82:bc:fc:99:
b6:a2:1b:c5:fc:23:bb:cd:86:2c:95:5c:22:30:8a:bb:d7:bc:
f3:5f:b4:df:e1:8f:6f:33:f7:f6:fd:c9:44:ed:3b:8f:1a:fa:
a1:2c:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net