Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa
File: fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa (raw, json)
Hash identifier: mWHDkgC4/jinYFdSRDNgWD5WFNNpjRziWF6li4epgYk=
Subject key identifier: C6:67:D0:86:DC:3C:15:D7:40:05:AA:2C:6F:B0:D3:96:E3:C6:1D:EB
Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial: 010D0C9F43285848B1F62B9708096CD57DF45800
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 3738
IP address blocks: 192.250.152.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:2b:97:08:09:6c:d5:7d:f4:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=4ba793af-dccb-4f80-9cfe-e5f1daf302f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:5b:ba:f6:a9:e5:12:4b:db:a6:42:d9:02:
94:b7:34:e3:ef:83:50:33:95:93:c1:a8:04:94:8d:
67:47:58:6b:a6:50:d1:88:63:0d:67:23:f5:11:ce:
4c:dd:d5:d8:61:50:a3:9d:ca:13:23:f2:37:c6:20:
6c:cf:85:1d:46:53:d3:17:89:9a:68:f7:f8:97:c1:
a4:44:4b:f1:fe:06:18:f1:0c:6a:4e:27:b2:eb:ce:
1b:d6:27:12:b6:e5:10:bc:46:05:99:83:7f:da:6b:
6d:7e:f7:60:82:b4:44:dd:6e:f6:a3:eb:ae:b3:d8:
72:cb:a5:d8:ce:d5:99:30:86:8c:16:13:4c:c4:5b:
f6:15:0b:46:4c:57:3b:92:82:66:7f:f8:6e:96:40:
5d:f1:ba:cb:2c:0d:28:36:87:c7:16:b9:f6:1e:1c:
f9:1a:1b:dd:2c:80:32:b5:1b:41:a6:39:78:9d:e2:
1b:88:bd:37:b0:f9:8c:94:10:f9:e0:74:9c:de:26:
71:22:94:6a:ac:6a:bc:de:0a:10:86:70:7f:75:47:
11:55:c1:7a:cb:50:ce:25:9e:1b:64:4f:f1:f3:2d:
4d:f3:91:e8:9b:9b:c0:00:71:a5:90:bd:ed:dc:4e:
52:b9:f2:eb:d2:c7:54:80:98:f8:51:74:33:dc:f5:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:67:D0:86:DC:3C:15:D7:40:05:AA:2C:6F:B0:D3:96:E3:C6:1D:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
X509v3 Authority Key Identifier:
keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
sbgp-ipAddrBlock: critical
IPv4:
192.250.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:b3:05:7f:f8:01:7c:49:3a:74:20:2b:d1:b5:fa:df:e5:5a:
f8:4f:ef:43:14:1d:6d:1f:dc:cd:64:45:00:ad:51:0e:7a:33:
36:2a:ce:57:15:3d:4e:90:dc:d6:29:8d:7e:4d:c7:4c:34:50:
0c:d8:a9:e0:84:45:b4:4c:70:01:44:7f:80:1f:eb:8f:a7:ed:
b0:0b:00:be:bf:46:f7:0f:d9:df:23:3a:7d:23:49:15:a6:7d:
7c:2f:47:35:a8:8e:39:51:d4:86:74:cf:c1:f2:01:ae:15:22:
07:8e:54:e7:c9:f6:7a:1d:8b:34:4a:82:7b:2d:16:bd:0a:19:
e0:aa:26:e2:1c:0a:3c:75:26:bb:26:2d:95:39:cd:ba:1d:7e:
dd:ea:3e:eb:d0:0f:a1:df:c8:65:49:7b:40:08:d6:55:b5:55:
42:19:74:39:7a:98:11:07:64:6b:18:3e:8b:2c:3a:ba:92:dc:
25:b7:00:34:fe:7b:56:ea:da:47:c3:86:fe:41:f0:74:fe:fe:
2e:34:85:70:75:82:93:7d:6a:84:c0:5f:f1:70:08:ed:d0:fd:
a2:6c:78:ea:fd:2f:d0:b4:7d:1b:57:53:b6:f6:b7:b1:e4:c9:
3e:7f:d6:2a:79:4b:6c:52:cd:6a:53:37:f8:ab:ef:72:eb:44:
19:0f:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net