Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa
File: 785cfc03-649d-355d-9203-8d59836186e2.roa (raw, json)
Hash identifier: GKVflGP6QuwfBLERKbjDTih7CbDY2mn+iQtP2fBSZOE=
Subject key identifier: E1:55:76:AB:CF:E0:BA:E0:F7:B2:5C:C3:4D:8F:7A:11:64:95:54:6D
Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Certificate serial: 010D0C9F43285849350E9572E808818177A3ED00
Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 31799
IP address blocks: 216.39.244.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:95:72:e8:08:81:81:77:a3:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=08d5d9b9-526c-4d2a-8124-6a7144ee203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:45:3e:07:9f:69:6a:0f:e4:02:74:f1:75:
c6:f7:19:49:62:9b:13:ee:a5:27:47:fd:88:73:ee:
8d:3f:30:1d:7f:97:e9:b2:d5:bf:fa:1a:fc:84:dd:
c2:64:64:fb:b1:b9:0d:be:64:71:ad:f7:b0:88:71:
60:2d:c0:fc:2e:33:db:b0:03:04:9a:f9:81:a6:a8:
d6:bb:ef:59:ca:c6:0f:a5:f3:74:87:4d:86:9d:df:
e8:5c:72:44:41:47:06:b9:03:e8:a0:9f:56:29:b9:
c0:ac:59:e1:bb:2f:ba:fe:8e:4e:0c:29:eb:fc:36:
05:d6:c1:73:a3:96:e2:56:fc:bb:be:f4:ac:25:92:
b4:80:e0:ac:49:4e:79:c7:56:c8:c1:27:6e:00:6c:
f7:dc:2a:9d:fa:b7:ec:60:2a:d0:95:45:7e:9e:d9:
38:39:64:ad:91:10:65:8c:1e:04:51:f7:35:20:01:
00:ad:8e:74:b9:7b:a4:5d:4e:b4:25:4b:4b:87:4a:
20:42:88:2d:77:f1:75:93:e6:de:92:78:35:ea:a2:
5a:d3:99:af:a0:20:e6:f4:4a:b3:e7:d3:8c:8b:66:
ce:6e:23:ee:57:66:7e:26:71:e1:79:0b:98:52:48:
4e:54:68:73:56:e4:c2:ac:f0:5d:fb:72:fc:d1:7f:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:76:AB:CF:E0:BA:E0:F7:B2:5C:C3:4D:8F:7A:11:64:95:54:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl
X509v3 Authority Key Identifier:
keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.39.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:a0:2c:7b:44:d3:a4:96:ba:c9:0f:cb:46:2d:72:82:e4:8a:
76:a8:98:82:ec:08:83:29:bc:e6:33:88:7b:f3:6d:69:05:fa:
10:96:d5:17:44:2d:16:e2:93:b7:ba:93:99:37:6f:ab:be:2c:
37:f1:e9:b2:c3:47:b6:ea:78:60:1c:95:ef:93:22:35:53:87:
96:8a:3e:28:1b:96:ef:de:b7:3b:a3:47:e7:bc:35:71:47:ed:
70:1f:1a:85:60:29:cd:36:f9:62:e7:08:90:c4:0c:bc:dc:df:
f1:12:ab:00:8c:e1:a5:8a:14:c4:a8:ee:b8:06:ea:de:3f:24:
a7:a0:15:cb:6c:14:76:f8:f6:89:a4:9a:dc:65:36:c9:ab:69:
8c:6f:c8:33:87:61:21:38:ca:e7:fc:21:9b:d1:25:b6:b2:b8:
c5:74:57:ba:07:3f:a9:65:c4:f6:a5:f9:b5:e4:62:af:a2:71:
59:70:cf:63:3f:d8:e2:d4:2f:9f:4d:9f:d3:64:12:66:f0:1f:
8a:c4:f8:cf:f6:1e:3b:e9:57:4b:89:fc:53:4f:43:ac:be:e5:
55:21:a1:26:49:77:e0:93:01:16:88:f9:59:27:e3:51:e9:ac:
21:0d:2e:3a:f3:4d:6f:ea:c8:80:b5:33:c8:80:dc:58:e6:21:
42:1e:d4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:28 2025 by rpki-client on console.sobornost.net