Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa
File: 3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa (raw, json)
Hash identifier: xX0BXPJrNGZbR8lwcTk231zH2hI3Fsd7vWWLAFOgKt4=
Subject key identifier: 70:67:BB:B9:73:26:AF:BE:68:4E:7C:65:20:38:DA:66:B2:5F:D4:FD
Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial: 010D0C9F432858497F09A3DC8CFD857CF2B0A6C0
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa
Signing time: Sat 12 Apr 2025 01:00:48 +0000
ROA not before: Sat 12 Apr 2025 01:00:48 +0000
ROA not after: Fri 11 Jul 2025 01:00:48 +0000
asID: 3738
IP address blocks: 192.250.68.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7f:09:a3:dc:8c:fd:85:7c:f2:b0:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Validity
Not Before: Apr 12 01:00:48 2025 GMT
Not After : Jul 11 01:00:48 2025 GMT
Subject: CN=c7d06446-bd96-4d29-b803-b8178d1ad017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:f1:30:42:49:4e:b7:cb:0a:eb:a2:ee:24:
42:a7:34:2f:ae:ad:3f:2a:a0:60:4a:a9:fa:ad:e8:
74:ab:81:3a:34:4f:a9:7c:57:b9:0e:4e:18:f6:d2:
23:3c:17:52:b7:f1:59:87:a6:0a:9f:d9:95:91:6e:
6f:31:b1:bd:5c:8c:29:d1:05:c0:ec:dc:24:c7:7d:
21:b3:90:e6:6f:97:19:de:6c:45:92:dc:8f:db:db:
94:92:71:af:f2:60:ae:16:17:ea:57:43:6e:2c:f3:
7e:a4:d8:0d:31:0f:78:e3:c0:98:a8:62:09:5c:0c:
c3:7b:a5:0b:0f:dc:ac:94:7d:38:d5:54:d9:a0:86:
c1:e0:40:80:eb:70:0f:e6:ea:0c:8e:02:a9:40:a6:
85:34:a8:65:b4:4f:f6:cb:60:13:75:9d:5e:dd:f8:
29:d3:de:cf:f3:5e:bf:00:ab:9f:9d:45:8a:f9:4d:
40:0c:4d:7e:26:47:e2:a6:a0:d1:f9:a4:55:1e:bc:
c3:f9:cf:2e:81:cc:25:37:3f:7c:27:bf:a6:3e:c8:
2e:5e:8c:cb:46:01:61:79:93:fe:58:1f:73:df:c0:
03:f1:9a:e6:9a:89:a8:56:8a:ed:85:45:19:68:42:
5d:57:45:57:c1:1e:47:3d:b9:c6:f4:ed:5c:3b:17:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:67:BB:B9:73:26:AF:BE:68:4E:7C:65:20:38:DA:66:B2:5F:D4:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
X509v3 Authority Key Identifier:
keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
sbgp-ipAddrBlock: critical
IPv4:
192.250.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:b1:d3:1d:5e:89:46:ac:78:31:b1:61:93:52:f7:c0:d7:2c:
fe:ef:10:06:36:cd:f3:50:db:1f:3b:80:0e:b2:7d:dc:c6:7f:
07:6e:4f:41:75:74:7a:9d:b9:0d:9d:b2:0e:7c:2d:b1:52:53:
bf:71:c2:f6:7a:9a:af:c3:00:70:22:aa:1b:de:1c:6d:ef:1f:
4a:db:08:22:97:bc:fd:00:56:80:3a:1d:61:f3:4b:15:e6:1c:
42:62:c6:d0:94:72:e1:e8:49:c4:99:66:a4:b9:e5:57:e4:7e:
aa:d8:a9:5e:d9:ae:82:35:21:0d:40:f6:d3:54:c2:56:2d:52:
a9:d6:2a:bc:17:37:55:83:cf:55:1e:9b:4c:27:23:50:00:93:
6c:31:63:ad:bd:90:66:1f:f2:1c:74:06:8f:a0:9a:43:93:5c:
94:57:15:ba:26:df:05:24:10:64:f3:65:9a:49:78:a5:88:4c:
97:a4:8a:f4:72:97:e3:a7:14:19:cd:49:58:c6:9d:72:21:8a:
1a:42:a8:59:4d:65:22:dc:9a:ae:75:f9:d2:5c:5d:01:87:0d:
04:a6:fa:cd:18:3a:8f:ef:89:3b:c8:58:49:71:9e:20:d5:f4:
85:33:54:86:db:a6:69:94:8e:f8:2d:83:e5:c6:c2:55:51:70:
4a:24:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net