Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa
File: 3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa (raw, json)
Hash identifier: hIFQ/x3FOrMz7mTrOol+rJWvGsC5dCQGGYsFStNImqE=
Subject key identifier: 71:46:9B:65:81:96:34:45:FC:03:5F:DC:BE:AE:AA:E7:43:2A:F9:31
Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial: 010D0C9F4328584973DEE97B214AA193259CFA80
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa
Signing time: Tue 08 Apr 2025 01:00:47 +0000
ROA not before: Tue 08 Apr 2025 01:00:47 +0000
ROA not after: Mon 07 Jul 2025 01:00:47 +0000
asID: 40342
IP address blocks: 199.47.137.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:73:de:e9:7b:21:4a:a1:93:25:9c:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Validity
Not Before: Apr 8 01:00:47 2025 GMT
Not After : Jul 7 01:00:47 2025 GMT
Subject: CN=fd412424-810d-43f2-b2bc-d796b8d6cce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3f:bf:3e:ad:66:0f:91:a0:ee:a8:cd:62:a3:
a7:9b:aa:e7:60:11:8c:0c:c4:b9:e6:d4:9b:0c:1a:
a1:96:c6:fb:06:3e:60:86:2b:7d:c7:24:b4:ad:9f:
ce:ec:1b:ae:c1:92:98:b3:39:f4:a9:9b:18:3f:93:
ea:fd:de:85:fc:e1:79:5b:0e:5e:84:d8:96:b9:b6:
5a:4d:ab:3f:26:6b:f2:cd:9f:da:94:19:d6:03:67:
6f:12:8c:89:60:ca:72:f3:7f:c2:a7:6e:0c:b3:dc:
3c:4d:2c:96:ae:27:1d:c7:c0:33:29:4d:47:c0:81:
3d:f5:5f:e3:47:74:2b:64:cb:35:c3:64:1d:ad:7f:
9b:e2:e3:f3:06:9b:b6:6b:44:62:e9:22:a3:25:ff:
3a:e9:1c:75:32:f5:36:46:1c:d5:36:2a:95:de:65:
20:75:3f:00:79:a7:4b:32:b0:10:78:2d:88:60:39:
94:40:ec:49:a0:3e:5c:c9:2c:9b:45:84:26:e4:45:
93:2b:53:c2:65:08:71:41:a0:62:70:82:dd:74:34:
26:cd:af:ff:e0:89:f2:94:37:5f:24:2d:07:3c:ca:
af:5a:3e:41:74:57:7d:65:dd:a3:68:a1:4b:97:f2:
27:d9:40:db:c8:ba:fe:45:ce:c6:fc:3e:93:56:f4:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:9B:65:81:96:34:45:FC:03:5F:DC:BE:AE:AA:E7:43:2A:F9:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
X509v3 Authority Key Identifier:
keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ec:cc:b1:2c:33:02:2c:dc:80:34:4c:a7:8d:02:d8:62:51:
77:45:2f:94:56:ce:0b:f9:bb:c5:04:65:64:67:9e:d8:9d:e1:
9e:13:67:a0:47:61:42:e4:67:c8:5f:97:61:76:61:8d:2b:3e:
d4:0e:84:8d:bf:23:9a:0c:b0:8e:6d:b2:df:96:67:0a:55:ef:
dd:92:df:4e:bf:e2:3b:d6:f0:f7:ec:2c:b3:4b:77:76:e7:cf:
67:29:48:e6:bb:21:28:ab:ba:70:8f:fd:d1:5a:d7:19:82:78:
b9:28:29:12:01:d7:f9:08:40:d3:14:77:b1:78:da:ef:7f:1a:
19:5a:16:bc:b3:25:bb:41:bf:bc:b6:f5:d0:59:ea:f3:85:46:
0a:bc:9a:38:96:7f:d8:8c:ed:92:0a:95:9e:48:07:4c:9f:04:
34:b5:57:c2:ed:c6:f5:99:21:e1:7e:9f:0f:0c:08:47:13:d2:
3c:d9:42:00:ce:9a:7f:f9:75:0f:21:5f:cc:e1:a8:70:b2:a5:
be:b1:eb:44:2f:06:8c:db:a5:37:98:c3:24:c2:d2:03:ee:67:
fb:e8:93:48:42:fd:b3:d1:54:da:2f:a9:b7:e0:52:aa:a0:70:
27:db:38:72:05:64:ba:02:dd:8b:d5:ba:da:33:8c:a2:ab:40:
d5:d3:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:05 2025 by rpki-client on console.sobornost.net