Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa
File: dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa (raw, json)
Hash identifier: 6TWXLQQiQnZvfeJ1CHts8B2Rx+XVMf2H3DpR0AcIs1s=
Subject key identifier: E8:F3:6C:1F:1D:FC:F6:D4:E3:C6:2B:69:BE:56:0F:3C:47:60:99:9F
Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial: 010D0C9F4328584976A99227DE1F4E9AFB644EE0
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 3738
IP address blocks: 192.250.150.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:92:27:de:1f:4e:9a:fb:64:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=cf1f73ad-ea40-4e08-b5ed-ad26eec53799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:a8:c9:49:02:4f:f2:57:55:74:3c:c8:cd:
e9:03:51:7c:29:aa:e1:96:0b:98:21:fc:02:f8:94:
4b:ab:7a:96:06:b1:ff:c1:df:56:54:09:9e:a6:cc:
d5:18:9e:6c:ca:22:b5:28:b8:45:ac:c0:50:e0:00:
04:07:47:5f:5a:f7:0f:98:aa:2b:bf:e6:46:35:9b:
d0:fd:b8:c7:fb:49:ed:dd:e7:1d:3a:71:aa:f2:47:
05:37:13:0a:02:8b:2a:ea:b7:62:06:18:53:ec:43:
76:4c:ff:d2:7e:0f:19:5e:91:bb:51:77:9e:c7:07:
3b:00:89:cc:4f:31:79:ec:b7:1c:e3:a0:dc:4c:76:
28:46:fe:bf:17:fb:7f:6a:27:f5:85:9e:87:99:e0:
75:f5:9a:54:49:84:54:9f:fd:d5:19:7a:ee:70:72:
ec:2d:eb:35:f1:8c:69:e9:50:1d:a5:96:81:09:48:
c7:56:c2:7d:01:11:45:5f:80:54:4f:ff:ef:95:39:
ce:4b:91:0a:b6:f1:6c:86:e6:bd:ae:c9:fe:01:74:
09:6b:11:4f:2d:14:15:c0:3c:6a:a7:77:17:ab:71:
39:4e:ba:66:c4:26:9c:73:73:90:84:f6:fa:be:98:
57:ae:59:23:8b:64:d3:d3:87:28:36:94:b5:b9:14:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F3:6C:1F:1D:FC:F6:D4:E3:C6:2B:69:BE:56:0F:3C:47:60:99:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
X509v3 Authority Key Identifier:
keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
sbgp-ipAddrBlock: critical
IPv4:
192.250.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:75:43:6c:b8:28:c9:61:9f:16:3f:be:18:7e:f5:d3:01:bc:
cd:2d:08:b2:94:cb:cb:43:c2:de:51:dc:a1:27:59:24:63:4c:
1e:f2:4d:c5:0b:c4:74:76:9e:9c:28:2a:1a:d2:fc:02:4e:f8:
57:17:39:b9:5c:33:63:20:e9:f3:07:5f:9c:0c:3a:45:99:4a:
bb:67:1d:4b:40:3d:37:48:1f:0b:66:6f:8c:4e:bb:38:53:54:
9a:f0:5a:2c:6c:99:89:c4:e4:6b:d6:48:64:c4:a5:7b:61:20:
58:d0:23:d9:38:66:44:79:a5:8f:12:2c:28:ea:3b:20:0b:73:
7a:75:be:f9:82:cc:8a:a9:c8:20:44:64:26:d4:60:6b:18:e2:
ea:2d:ab:9a:2a:8b:ef:30:bb:8b:fe:ab:b3:76:21:32:40:6b:
b3:0f:53:07:81:03:09:64:55:22:26:5a:e3:3b:fb:16:4f:55:
85:20:91:d0:72:e5:31:86:ff:9d:bc:00:1a:7b:97:03:32:3e:
ca:a0:43:6a:59:78:a7:62:b5:39:a1:3e:16:e9:b0:26:e9:cd:
39:b6:1c:67:6c:af:6c:5e:5a:d3:8a:03:dc:43:12:4c:16:2a:
63:ab:50:c1:30:64:95:8d:65:ef:99:33:12:01:27:b8:f7:b5:
b5:2a:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net