Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa
File: a661538f-4136-32b8-a899-88104881e2db.roa (raw, json)
Hash identifier: XZWpgI9rXkuVYz+KWnbL7TlMh+0fS5uo2PCx3k6jkNk=
Subject key identifier: 32:98:AA:08:4B:4E:F5:A4:A3:70:E7:70:C7:A6:43:22:FF:40:6C:BA
Certificate issuer: /CN=d64341ea-4a31-4684-bf89-237774f5a468
Certificate serial: 010D0C9F432858495ABEC2B1866DD58938887680
Authority key identifier: A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 16509
IP address blocks: 66.22.176.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:c2:b1:86:6d:d5:89:38:88:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64341ea-4a31-4684-bf89-237774f5a468
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=7f50637c-9260-49e0-a219-cf0d6047ae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:ad:37:c8:d0:d9:cf:87:46:62:ae:a2:69:
ac:37:52:af:f4:3c:b7:73:18:70:8e:f9:34:dd:93:
f5:53:e9:9e:fa:a1:16:1e:fd:7c:fb:06:87:76:e1:
d3:5a:b8:f8:6d:cf:0c:13:5f:ff:95:47:bc:d2:4a:
16:ca:d0:70:ea:9a:dd:4b:0f:af:11:7f:3e:00:83:
00:1a:71:07:17:8d:b6:86:3c:02:ea:ba:20:9e:52:
46:7d:a9:d5:ac:33:32:df:df:29:bf:0c:4b:42:c7:
ce:35:38:f6:7c:69:43:28:9c:69:2e:12:7e:6e:a9:
50:64:a1:15:c0:9b:93:34:00:58:7c:22:e2:7d:2f:
6d:55:a8:40:72:a8:2d:47:da:5c:cb:a0:02:e1:79:
3a:25:be:bc:b7:b2:bc:23:29:35:a9:06:c7:4f:63:
6d:ab:0b:26:d0:f5:2a:1d:37:78:58:15:7e:12:1a:
02:7e:47:a8:98:6a:50:db:65:20:f6:dd:30:0e:d5:
36:a9:fd:bb:95:30:ae:f3:83:02:f5:ba:9c:17:9a:
f1:22:65:f2:26:1f:54:e5:a2:ed:9f:bf:75:0b:24:
3d:3a:b3:cf:87:bc:d1:80:3d:44:c5:b9:11:c9:30:
b1:44:17:9a:80:ad:52:0e:e7:28:92:05:12:ac:59:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:98:AA:08:4B:4E:F5:A4:A3:70:E7:70:C7:A6:43:22:FF:40:6C:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl
X509v3 Authority Key Identifier:
keyid:A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer
sbgp-ipAddrBlock: critical
IPv4:
66.22.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:35:3d:d0:8e:3a:d9:b9:5d:c4:f3:85:a4:89:37:79:ec:51:
4b:d8:3f:e1:31:fa:24:23:7d:19:c3:27:06:71:f6:7c:1a:b5:
93:17:46:33:b1:0d:c7:86:2a:9e:57:97:b7:11:86:27:03:35:
c1:34:19:d6:81:b4:47:ca:3b:be:b9:85:dd:8e:fe:8e:0c:38:
7e:5d:7a:a9:fe:b9:54:fd:ba:6a:11:6d:98:a0:35:ff:a1:95:
06:25:6d:a6:95:2f:fd:eb:47:3d:15:1e:a5:13:d5:4c:fe:75:
36:4f:b9:9a:85:c3:98:4d:2a:73:f0:00:47:f6:55:06:53:c1:
e2:d0:7e:2f:88:57:ef:8a:52:3b:04:8f:31:d2:a7:6d:4e:b9:
08:c1:94:00:ee:a3:60:40:e6:0d:09:be:3a:7e:47:d2:db:56:
1a:f2:af:5f:29:d6:b3:88:85:b9:10:9e:f0:07:31:25:20:d8:
66:17:00:59:64:d1:f1:ee:1b:f4:7a:34:ed:74:35:c5:d6:71:
44:8b:a1:a3:2d:e1:0b:67:5e:b4:a1:2d:57:59:ef:86:40:b6:
c9:b9:e2:1a:1e:58:23:d8:24:21:56:8e:95:37:15:a1:6e:d6:
0c:22:4b:14:14:ff:fb:38:ff:85:e0:29:44:fd:42:cc:d4:3d:
0a:3c:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:16 2025 by rpki-client on console.sobornost.net