Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa
File: 35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa (raw, json)
Hash identifier: aTZZ1O05E/zsYyvPfF+uSX4IiaEU0grrBP0a8nqf30o=
Subject key identifier: 88:50:B0:9F:59:E6:02:37:7D:DD:C0:2D:DB:70:DD:BB:1D:C0:48:D0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858496FAF1A15DE5023DDAA3D08A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 397225
IP address blocks: 199.7.67.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:1a:15:de:50:23:dd:aa:3d:08:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=566ffb2e-c34a-497e-8cc2-56b176b9d3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:70:44:ff:9f:99:ba:c7:e1:0b:06:9f:6e:
57:23:74:08:79:d8:0f:47:c1:6b:93:e8:07:19:1a:
0a:51:6c:fe:23:d8:94:66:97:a6:45:a0:97:b1:2b:
0b:e9:72:33:51:9a:6e:40:21:32:09:0d:e2:a4:ae:
c0:00:10:c6:41:cd:96:4f:05:cf:f7:97:d0:cf:52:
c7:ad:83:80:62:8a:ad:b9:dc:42:cd:ac:8d:22:60:
67:4a:48:02:87:da:7f:fa:f6:82:c7:5b:86:ac:e4:
15:cd:bc:7e:f0:6b:60:56:6e:0c:9a:c6:39:61:d5:
1b:f3:0b:bd:6c:51:bc:52:d0:a0:22:35:2c:1b:c5:
7a:9b:b3:fb:94:f2:b2:dc:16:61:6f:45:67:c4:9a:
f1:f3:7c:23:7f:35:83:19:de:3e:0e:a5:4f:8f:a7:
94:52:9d:3f:6d:b5:41:32:9f:03:a0:84:10:ce:b8:
31:b3:55:3d:69:59:76:23:88:26:70:e2:75:85:3b:
91:15:e4:e9:06:d7:95:8a:ef:af:39:24:6f:61:a1:
c8:02:ea:68:40:4e:37:c7:05:63:cf:38:a0:95:69:
b8:17:72:10:18:6a:fd:fe:0d:05:31:b3:ad:7e:cd:
03:2a:9c:9d:76:aa:70:6b:d0:f1:37:ad:56:26:28:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:50:B0:9F:59:E6:02:37:7D:DD:C0:2D:DB:70:DD:BB:1D:C0:48:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:8a:21:2b:87:b1:dc:b0:bd:42:e8:fc:23:d9:f6:55:ac:bd:
48:da:ae:b1:f7:65:e6:0a:2d:44:b8:4c:99:28:06:59:bb:d7:
1d:ab:e2:b8:c6:0f:22:08:1f:7d:d3:9d:b0:b6:a6:52:3c:ff:
7f:41:87:68:18:d6:69:83:eb:05:31:e2:9a:50:11:7f:32:b3:
d7:b4:a3:2c:a9:38:a8:3e:fc:8e:37:2a:7c:53:75:de:ce:fa:
b0:f2:92:f5:f7:ab:9b:0b:75:b6:bf:90:07:d6:8a:68:6e:ed:
ea:61:e4:c5:12:30:02:18:9a:31:7d:c1:14:02:c5:83:65:17:
b1:c4:45:4d:72:41:b3:a4:41:a5:71:12:b2:92:06:b6:36:97:
11:3a:e0:71:57:63:ee:1a:63:d4:cf:dd:49:cd:75:47:9b:15:
e5:92:52:62:48:b1:7e:c2:7c:9c:3d:99:d0:94:44:45:61:ee:
71:83:40:7d:2d:0e:4d:4c:c5:2e:d4:8b:89:30:77:c5:b1:29:
0b:5c:b9:ce:49:7b:66:b4:82:db:26:3a:37:97:c7:bc:a3:62:
fd:e3:25:f0:98:4a:12:69:f0:a3:cf:99:2e:dc:4d:98:a4:23:
b1:4c:cf:8d:00:df:25:0f:d4:1b:3f:21:43:1a:82:b4:96:93:
35:c5:79:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:34 2025 by rpki-client on console.sobornost.net