Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa
File: 3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa (raw, json)
Hash identifier: WVkZ9EkOVubeLPu738g4ObhDJE9YytPQklH6ZSdIP3w=
Subject key identifier: E4:EE:7B:7D:0F:26:92:D6:2D:BE:15:6A:33:0C:19:C0:A8:67:D3:21
Certificate issuer: /CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
Certificate serial: 010D0C9F4328584981D454955115BC95F8FD5480
Authority key identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 8987
IP address blocks: 165.159.140.0/22 maxlen: 22
165.159.144.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:54:95:51:15:bc:95:f8:fd:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=82baa0a3-1dcf-4982-84df-3d340a361907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:bf:94:fb:c1:68:4c:4f:2b:3c:e0:34:cf:
41:0e:3b:6e:33:57:bc:71:b1:8e:4e:1a:41:02:d2:
54:de:76:eb:a3:6e:d6:18:76:c4:c3:2d:e3:52:9c:
83:82:3b:1f:3e:6c:cb:3d:93:c4:c5:72:1e:ef:29:
65:87:7f:c2:29:c4:c9:55:28:9c:31:e8:b2:55:a0:
92:42:1c:72:db:f4:09:31:e7:69:1e:04:71:1e:57:
d9:3b:ef:57:4c:21:02:d4:08:8e:85:ad:59:06:fe:
ab:6a:f0:94:8f:c8:83:2c:f4:3e:3f:ee:7c:2a:78:
fe:2b:25:cb:b1:5b:98:e2:a3:4e:da:de:f6:aa:64:
85:2f:81:18:82:bc:be:35:fd:9e:52:93:ce:65:1b:
4b:19:ef:89:f0:13:11:3a:88:d0:6e:ef:1a:e1:58:
71:23:4c:e2:5f:00:02:b4:ed:f9:13:04:7a:09:3f:
97:a5:93:1f:55:c2:c4:bc:37:6e:62:88:06:84:4c:
d3:1a:61:7f:3d:02:e2:a9:26:7a:59:74:14:46:cf:
8f:b8:2d:7f:f8:d2:59:4b:50:63:39:cc:db:20:f4:
c0:05:64:d2:e6:70:ab:be:c3:17:c9:0d:68:a1:55:
c2:31:42:d0:2e:77:37:cc:3d:64:51:43:f8:67:ac:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:7B:7D:0F:26:92:D6:2D:BE:15:6A:33:0C:19:C0:A8:67:D3:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.crl
X509v3 Authority Key Identifier:
keyid:CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer
sbgp-ipAddrBlock: critical
IPv4:
165.159.140.0-165.159.147.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:63:80:1c:51:4f:3e:95:0d:fe:36:03:f2:20:bd:9d:aa:61:
3f:74:9a:3a:f4:f3:e2:09:0a:56:ba:ad:5c:ff:b7:1b:f3:3e:
06:61:85:f7:24:52:cd:f6:c0:20:97:0b:95:18:e2:bb:2f:bd:
cd:97:a9:4a:e4:26:d8:46:b0:49:72:7a:9c:cb:f2:38:70:d6:
72:a2:e9:b9:46:69:35:99:ef:90:8a:b2:47:25:31:80:7a:06:
f9:e2:4f:9f:03:e2:19:4d:99:09:81:a0:25:23:94:92:42:9c:
50:32:10:bd:de:01:09:92:7c:fa:f7:7e:11:14:75:d0:13:03:
3c:83:06:ee:c8:db:32:a6:45:5e:80:99:b5:86:45:2d:d9:cf:
58:e7:ee:ea:e4:eb:46:2b:b4:b1:06:98:53:e2:9d:8a:e7:d0:
0a:97:40:a7:29:23:04:e1:d8:77:0f:32:84:00:92:b2:39:7d:
2d:c7:25:3d:e1:4a:c1:10:24:b3:14:c0:94:c8:8b:76:0a:d3:
f8:ee:f8:ce:c3:f0:5e:5d:c7:74:08:f7:4b:c7:57:63:3c:90:
60:8d:d9:ec:0d:b3:1b:c4:96:47:b2:ec:76:d0:6c:88:2d:d8:
c6:38:15:90:dd:34:f3:9b:f2:02:05:65:5f:36:45:45:9f:77:
c9:3c:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:44 2025 by rpki-client on console.sobornost.net