Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e1cbafcb-17d6-3f34-a3ab-ce140a904bc6.roa
File: e1cbafcb-17d6-3f34-a3ab-ce140a904bc6.roa (raw, json)
Hash identifier: Fsd7MqW9u7tU1JQPfQgvT13RX8nA7gqbyE2mDAUSm8c=
Subject key identifier: 6A:16:BE:8B:F7:D5:CF:0B:E7:80:D2:C0:3B:49:82:AD:C0:A7:53:B7
Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial: 010D0C9F43285848B1F62FDBEC1511DFB7728100
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e1cbafcb-17d6-3f34-a3ab-ce140a904bc6.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 3738
IP address blocks: 192.250.71.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:2f:db:ec:15:11:df:b7:72:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=df701c57-f7ce-44ab-ad2d-7008dad41c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:65:23:95:b7:c2:09:24:bc:04:90:59:ad:42:
78:f9:37:ad:ba:c6:8b:4c:18:d3:d9:0c:74:da:98:
72:d1:4c:22:5b:18:9b:05:66:13:40:d7:fa:2a:e2:
41:85:d4:04:a1:77:dc:57:96:fa:f0:20:43:16:9b:
32:71:d6:cc:b7:59:31:b0:c4:51:3c:cf:18:58:37:
a2:ac:73:16:cb:3b:ab:3e:98:28:68:a8:bb:ca:f3:
5d:9a:9b:a5:dc:2a:9b:1a:9f:e4:22:24:c5:87:f4:
6a:95:2d:63:e7:ad:64:65:3b:ba:de:0c:5d:58:61:
8a:d8:46:fb:73:8f:58:50:ca:d0:e4:74:28:f5:87:
4a:76:4e:68:92:9c:43:ba:23:0e:df:b5:26:84:0d:
72:91:54:94:42:52:5a:a1:fb:80:69:62:3c:84:08:
a4:9a:74:0d:30:66:e6:81:31:46:5b:18:0c:e3:03:
94:9c:40:1a:83:83:34:4f:8e:5f:04:a8:09:a5:18:
c9:10:f3:92:98:c8:af:1c:55:54:da:12:00:1f:8c:
cc:5d:b2:23:fb:ce:59:e9:f0:a2:73:7b:93:23:a1:
96:e7:1f:12:9e:99:4a:de:89:aa:c4:7b:9d:d1:c0:
91:14:ce:4a:52:8b:3f:29:65:2f:5e:94:f8:76:63:
eb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:BE:8B:F7:D5:CF:0B:E7:80:D2:C0:3B:49:82:AD:C0:A7:53:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e1cbafcb-17d6-3f34-a3ab-ce140a904bc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
X509v3 Authority Key Identifier:
keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
sbgp-ipAddrBlock: critical
IPv4:
192.250.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c0:6b:75:03:67:02:ac:fc:97:52:78:dd:c1:50:17:fe:14:
fe:6b:81:33:e5:8b:1f:af:69:42:01:5c:1b:4f:75:2e:2c:0f:
a7:b6:46:c4:bd:84:25:af:37:61:bd:92:d1:a0:77:55:11:5f:
5b:eb:8c:65:90:2e:3b:e9:76:28:e6:43:65:e6:26:49:45:79:
20:09:89:3a:ca:52:b4:c6:f0:34:12:5c:04:b5:b4:23:68:91:
18:65:b1:95:1a:7f:45:54:63:4b:d0:99:ff:02:ad:5e:95:48:
e7:d9:99:6c:80:f8:f9:61:04:73:4d:b8:d4:0c:56:fd:4e:5e:
ab:90:6a:f2:93:8d:84:7b:54:9f:cb:e4:3c:fb:e7:62:a3:7c:
80:8c:af:30:82:9a:10:3a:49:35:17:11:8b:82:6f:67:78:7e:
9c:4c:2b:da:3b:05:8b:c6:39:b4:32:f2:5a:8c:e8:1d:43:7d:
1f:97:15:2a:44:a1:31:46:52:0a:4b:05:f7:5e:84:9e:3f:bc:
48:00:cd:cd:bf:c4:d9:10:a6:c8:1a:33:22:99:01:c8:b5:84:
c2:63:2e:54:c9:cd:b5:d4:b2:a3:6f:34:b6:51:56:a7:29:bc:
cd:1f:23:f9:19:52:5e:4a:2b:30:00:44:27:a8:1c:1f:e4:ff:
9f:37:b4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net