Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e60ce6df-674b-35fc-9fc0-7a95bdd5f476.roa
File: e60ce6df-674b-35fc-9fc0-7a95bdd5f476.roa (raw, json)
Hash identifier: KZ6ZfvehOXaqC4XVpg3TCDK7OcSRtPgX8cXHtsog2LU=
Subject key identifier: 4F:AF:79:24:73:41:6F:F2:86:0C:00:2D:76:48:AA:88:6A:99:5B:8F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858496FAF1B5CC7D2AC00C6539B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e60ce6df-674b-35fc-9fc0-7a95bdd5f476.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 397214
IP address blocks: 198.133.199.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:1b:5c:c7:d2:ac:00:c6:53:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=1a3b33a0-750e-4436-b6d1-e62b97db9459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fc:8b:5d:6e:3d:a8:63:70:5d:fe:b4:2b:a1:
e8:54:9e:4c:d7:5e:7d:e4:df:bd:38:34:e6:95:00:
66:92:3f:35:57:54:f0:77:32:df:3b:57:dc:c2:f3:
88:cc:2e:cb:97:cd:6c:d3:79:6c:18:0b:32:33:ce:
8e:b3:b5:65:ab:75:c7:96:dc:c6:16:12:4d:d7:d1:
25:cf:75:8d:4d:47:8d:01:35:59:59:07:a6:42:a1:
5a:b8:d7:8f:d5:7f:af:30:d5:ff:1b:7d:3f:2f:a5:
ca:af:c9:d5:88:d3:fe:f5:5c:3c:73:66:7c:f7:82:
a2:9a:80:48:9e:97:13:1b:4d:ef:2e:a0:2d:c7:a3:
e4:e1:81:9d:79:b3:56:55:64:44:25:51:48:73:b9:
f5:27:66:bb:e2:22:09:80:2e:13:67:29:46:11:d9:
06:ce:d5:4d:55:e4:40:a4:fd:e8:9f:87:9b:f7:88:
12:c5:58:f0:ae:1d:d1:f5:cb:5f:ad:fe:28:22:e1:
d7:07:72:92:25:6f:e1:80:e9:61:9c:56:30:34:ae:
64:b8:59:0b:87:3a:eb:6a:4d:dc:dd:65:e6:2c:34:
53:06:ea:04:ee:22:83:41:ef:f7:6d:b7:df:c1:15:
ce:cd:2a:a0:48:a7:65:31:f9:ec:4c:5a:16:07:bb:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:79:24:73:41:6F:F2:86:0C:00:2D:76:48:AA:88:6A:99:5B:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e60ce6df-674b-35fc-9fc0-7a95bdd5f476.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:51:56:5e:21:64:50:1a:f1:b4:c7:27:84:64:ee:3b:5d:3b:
11:e3:f5:95:70:64:e4:6e:1d:b2:05:c0:1d:18:cb:56:b2:b1:
74:2e:9d:af:e2:85:1c:8f:09:4e:ef:2f:60:be:e6:41:7a:83:
70:31:14:04:57:eb:95:11:c1:66:c7:2d:91:6b:5e:3d:09:51:
1f:b5:30:f3:bd:0c:d3:f6:9f:0a:7c:a2:59:3b:02:56:71:80:
75:b2:4e:77:44:23:1e:a4:1f:c7:2f:2b:7f:73:37:0e:ad:76:
95:31:9b:76:f2:b1:ae:96:64:7c:9b:08:c4:be:e6:df:e2:3f:
ec:74:1a:c1:ae:d0:ac:c4:b6:26:2e:21:e5:17:59:68:53:dc:
89:64:03:cd:1b:da:4e:b7:23:ad:12:45:56:82:6e:04:ff:b1:
55:a6:bf:ac:ac:8e:75:9b:c9:75:65:4b:67:77:cf:51:38:0b:
d6:e2:43:41:86:01:fa:64:34:68:d0:dd:6d:bc:8d:dc:f7:8b:
2c:d3:76:bc:a7:1a:6c:ac:ec:90:29:b6:1a:fd:83:51:b3:25:
ad:2f:6b:09:c0:de:11:d0:de:b7:c2:7a:14:42:ae:6f:80:ae:
8a:7e:e0:c2:8f:13:aa:f1:05:d0:1c:a3:ec:fb:8a:3e:79:8e:
f4:16:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:42 2025 by rpki-client on console.sobornost.net