Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa
File: c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa (raw, json)
Hash identifier: 4h6p+7G+1XGUKjxi6wtOHWhKnU+nD6X5JrMdwP2St7o=
Subject key identifier: E9:A2:45:83:9E:34:3E:B7:20:28:DD:C2:DD:7E:05:F3:8A:B5:73:A8
Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Certificate serial: 010D0C9F43285848EC96A19C7664EE62D29287C0
Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 205627
IP address blocks: 170.2.248.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:a1:9c:76:64:ee:62:d2:92:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=3a9acadd-cf96-4e6e-8bcf-fdd8623ebd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:dc:76:60:83:31:b6:c6:ee:7d:aa:b6:84:
ae:a7:22:c1:67:13:d3:3f:64:b3:72:1c:83:85:17:
ba:24:3b:a1:d4:05:d0:2c:a7:41:db:28:48:e0:be:
ea:b6:4e:f3:07:b4:99:f0:8d:61:d5:c7:b6:e3:26:
06:ae:e4:77:16:af:c5:56:7d:e4:9f:b1:09:f3:1e:
77:e4:26:e5:9d:fb:74:71:b7:c5:de:6f:97:8d:5a:
da:b5:eb:c9:bb:ae:3a:21:3f:de:ee:85:cd:37:04:
05:de:4e:41:db:71:7d:9b:5f:bf:9c:d5:04:15:9e:
e5:75:af:c6:17:38:53:d1:11:49:a5:0b:ae:60:a0:
15:cc:e6:97:d3:72:9e:68:a9:75:e2:8e:63:a0:30:
e4:e2:8e:8a:a3:aa:94:98:6d:bb:5f:0e:bb:bc:f1:
2e:90:f8:5a:73:7d:f6:c1:d0:63:d3:08:5a:35:58:
98:c4:d8:bc:35:13:8e:69:97:b8:b4:4e:6b:60:f8:
3f:f3:98:46:35:16:c1:24:78:a9:33:d6:ec:96:f3:
dc:61:c3:3c:c9:ba:d2:94:f5:4b:8c:01:c1:34:d5:
ab:63:55:ed:0a:b0:61:dd:bf:11:a3:1a:46:4d:e6:
f4:e6:e4:d5:f1:69:7f:42:08:5c:6d:a5:bc:cd:0d:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A2:45:83:9E:34:3E:B7:20:28:DD:C2:DD:7E:05:F3:8A:B5:73:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
X509v3 Authority Key Identifier:
keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
sbgp-ipAddrBlock: critical
IPv4:
170.2.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:fc:bb:7f:0c:6e:c8:2b:f1:e9:56:93:d4:8a:bb:ef:f5:3e:
a4:b6:7b:bc:36:dd:fd:a0:69:af:79:9f:e1:61:aa:53:3c:a3:
38:55:be:79:bd:57:12:ee:6c:5a:a2:86:38:06:28:ae:e8:e5:
eb:b7:17:3b:ab:8d:19:6b:ff:68:5b:4a:fa:5c:6b:5b:db:40:
d5:36:5f:f5:a5:90:04:31:f0:dc:b7:b7:0a:03:61:31:61:da:
07:89:14:79:31:29:99:e4:2e:ba:d5:4a:19:61:4f:55:0b:44:
30:e5:2b:26:d7:d2:38:c4:e1:f5:69:a5:7a:18:03:fb:8f:bb:
27:85:c0:30:a0:3a:2c:61:c6:40:d3:b3:9c:65:99:36:8f:63:
a2:cc:a7:99:cc:2e:84:fe:e7:d6:7a:5d:1e:6b:f2:64:74:e8:
62:5d:26:c4:c5:67:7f:09:51:ba:85:9f:0a:9f:f7:78:f4:7c:
b7:55:56:6c:e8:08:63:47:32:7a:bf:08:e0:5f:5b:f7:8f:95:
70:a2:8f:da:90:f7:d8:3c:67:6d:97:79:dc:80:df:8d:e6:d6:
7e:b4:ed:e3:e7:80:92:48:29:15:b8:e0:9c:03:d3:54:bc:3e:
30:09:1e:69:ee:a3:a6:32:ec:a9:ca:60:40:2d:1d:b6:fe:7b:
e7:51:3a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:44 2025 by rpki-client on console.sobornost.net