Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd4d2c84-efec-3994-9009-3e1e83a7eb42.roa
File: fd4d2c84-efec-3994-9009-3e1e83a7eb42.roa (raw, json)
Hash identifier: /stN0zYtG4RS/zO5AdN0bPWaLyDYbsYqj3tc6YZvWeY=
Subject key identifier: 0E:04:4A:D4:97:B0:FA:BE:98:93:CB:A4:04:2D:DA:16:A3:FA:3A:97
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964930F30019D8D72B7100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd4d2c84-efec-3994-9009-3e1e83a7eb42.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397222
IP address blocks: 199.7.68.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:49:30:f3:00:19:d8:d7:2b:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=33722ef0-b1ba-4bee-97f2-7a7bb98dc54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:07:3a:a9:5b:26:fd:b9:ec:b2:47:45:9d:8e:
26:db:3e:49:c5:3c:00:34:73:e8:e1:1a:ae:ca:5f:
d8:29:eb:33:15:ee:1d:fd:4b:87:5a:12:86:6f:c0:
c3:76:9c:38:71:74:4d:2b:59:80:fd:2d:e5:3e:b3:
dd:e7:bf:84:d4:b1:a0:30:b0:af:14:cc:a1:a3:13:
24:df:40:04:10:9d:b5:31:48:e2:d1:a7:45:fd:97:
3b:a9:ce:af:e8:e8:8e:17:cc:b7:49:bc:62:8c:f0:
9c:da:1a:bd:89:c5:82:d3:e5:bc:4a:51:ca:a5:59:
85:82:e3:e9:5b:e6:cc:d5:4c:b5:26:ec:25:a4:b0:
44:c8:43:ab:34:93:a0:ae:7b:b0:46:01:d6:f7:42:
0a:6d:aa:60:da:80:b4:0b:d4:3b:53:18:9f:51:c0:
22:e7:c2:60:bb:1c:87:d7:cc:1f:3a:fd:13:bc:6a:
a7:7a:1c:8d:91:73:fb:f8:0a:2f:5f:d3:51:10:d1:
55:96:52:10:dc:fb:86:6d:b5:5a:79:6b:00:b7:1e:
94:14:31:56:a7:98:81:b1:6f:b4:bd:d1:c4:ee:d9:
ae:87:f4:4f:9d:f4:cb:7d:f4:2d:be:f3:9a:77:c0:
53:fa:39:02:f2:81:92:98:4f:f6:93:94:1e:96:47:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:4A:D4:97:B0:FA:BE:98:93:CB:A4:04:2D:DA:16:A3:FA:3A:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd4d2c84-efec-3994-9009-3e1e83a7eb42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c0:9d:56:22:fd:45:1b:92:9c:f4:c4:54:09:35:56:b4:86:
66:3e:2d:59:77:6e:61:e1:3e:72:6c:79:c8:a2:1d:7d:e9:78:
af:3d:14:66:0b:10:92:02:0a:22:52:60:64:e6:d5:bc:c1:ce:
74:91:65:e0:41:cb:88:7a:35:ef:44:8a:d4:79:ea:cb:5f:a6:
a3:ae:44:5d:6c:78:34:4b:3b:30:af:36:27:5d:20:6b:9a:5d:
b3:76:3f:b2:80:9f:2e:41:3a:40:1a:36:d3:46:31:4d:0f:56:
37:45:9c:ff:89:16:5e:1c:5f:4d:94:52:09:66:78:f5:81:d3:
83:54:b0:6d:06:8f:7b:92:e9:09:2a:fb:50:00:89:08:c0:ba:
9f:39:ac:39:c1:8e:8b:d5:2b:63:dd:53:a1:1a:93:7f:19:b5:
76:a5:84:f9:4f:1e:03:32:d5:dd:02:06:aa:21:4d:c1:f1:d8:
5a:37:ca:d6:92:36:eb:92:fb:28:e6:c7:d6:2e:76:93:f7:41:
45:64:2d:9d:d0:35:aa:53:2f:51:2a:1b:fc:9b:c7:f7:7f:9b:
08:c9:06:65:69:c1:e8:96:ba:19:3b:3b:b7:09:f1:ac:67:18:
96:3d:78:fe:ca:80:95:eb:2d:d6:c9:8e:c8:18:f4:58:07:25:
be:fd:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:44 2025 by rpki-client on console.sobornost.net