Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa
File: a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa (raw, json)
Hash identifier: wjqjjLJ/KLUDcws4LremlJXpwlYTH4ImjzRbhiJmrgU=
Subject key identifier: D0:B9:39:CF:68:27:1C:5A:F2:B0:07:F1:21:CE:50:87:40:EA:BF:DC
Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
Certificate serial: 010D0C9F432858493010099FD25EC42DB742F880
Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa
Signing time: Fri 14 Mar 2025 18:04:56 +0000
ROA not before: Fri 14 Mar 2025 18:04:56 +0000
ROA not after: Thu 12 Jun 2025 18:04:56 +0000
asID: 15267
IP address blocks: 138.129.32.0/19 maxlen: 19
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:10:09:9f:d2:5e:c4:2d:b7:42:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
Validity
Not Before: Mar 14 18:04:56 2025 GMT
Not After : Jun 12 18:04:56 2025 GMT
Subject: CN=b36e6d5a-16b0-4f4a-b6b5-d7a2a6506a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:1e:f4:f8:ae:4e:93:2e:a0:e9:c7:ec:d3:
aa:f4:bd:4b:7a:f7:a8:1d:fa:2e:c5:c1:61:d5:82:
30:61:46:67:fd:d9:ec:af:94:06:6b:6a:0d:a1:6c:
52:f0:69:da:17:fb:10:0e:2a:4a:f9:dc:77:ad:9f:
e9:59:c8:6b:17:eb:53:b2:ac:3d:5c:4b:b5:e3:01:
2f:43:d0:f1:2f:82:f7:81:ed:85:ed:ec:09:cd:f9:
2e:86:5a:48:97:30:4d:79:03:9b:3d:5c:86:d3:7b:
fc:32:e6:24:17:06:b7:8f:20:0d:1c:dc:5a:12:32:
0d:b0:38:69:ee:8a:90:bb:a1:08:b3:e1:37:e2:82:
a9:36:97:df:17:46:cb:25:e0:21:51:74:6a:3c:0e:
43:7d:9e:09:7d:86:67:76:41:c7:54:53:a4:82:f3:
21:49:6f:00:91:a9:aa:2b:01:26:40:8c:5f:91:bb:
d4:a6:f4:99:93:c4:f3:f0:ad:65:6d:2e:02:e3:3f:
12:b9:03:3c:6c:55:b7:bf:15:c7:26:46:d5:9a:3d:
ef:d5:be:bb:8e:ea:f4:fb:90:17:52:88:bd:f6:5e:
44:00:36:d8:d3:47:c4:9a:27:46:ff:4e:68:8d:25:
7c:3a:ea:8c:0b:d7:99:0e:ad:b2:83:1c:5e:fd:26:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B9:39:CF:68:27:1C:5A:F2:B0:07:F1:21:CE:50:87:40:EA:BF:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl
X509v3 Authority Key Identifier:
keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
sbgp-ipAddrBlock: critical
IPv4:
138.129.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:db:2f:f2:f3:2e:96:c7:60:f4:a1:07:e7:c1:24:e0:c9:80:
19:3e:aa:be:01:99:25:b7:97:9f:d5:d2:fe:ff:2c:c7:4e:f8:
aa:32:1a:8b:47:99:71:9e:7e:b5:da:1e:2d:3a:5e:50:8c:11:
68:49:7a:b7:19:64:39:5e:4c:96:ed:75:ed:b9:ee:60:8f:17:
33:c6:b5:ad:8d:52:8c:e6:19:e7:1d:53:2c:ed:1a:bd:a7:f8:
fc:57:68:46:2a:bf:cd:14:f5:82:8e:31:36:f2:f1:c8:8d:8c:
da:d4:82:08:d5:c4:38:8b:f1:1b:76:5e:ff:19:db:4b:e4:c6:
e7:cc:ec:44:2d:52:81:72:c0:f9:0c:6e:57:fe:9a:c5:96:65:
ab:38:97:08:fe:1b:71:f0:96:38:ac:11:ac:db:7e:06:94:2b:
9f:5d:f5:b7:c2:38:55:9c:32:a3:fe:53:2a:d2:85:3e:51:48:
5b:eb:ec:32:91:e0:b4:dc:d5:ff:d5:68:d2:fd:27:07:58:00:
68:f9:f3:80:69:26:aa:a1:30:a8:18:9b:17:da:1c:c1:f0:f9:
1f:28:ee:16:65:1b:3b:9e:ed:38:b4:0e:c0:1e:18:3a:2c:a0:
c2:01:b3:46:74:2f:87:32:ae:39:a6:be:c4:e6:e8:5a:41:22:
b6:cb:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:16 2025 by rpki-client on console.sobornost.net