Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa
File: d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa (raw, json)
Hash identifier: xkRc/U5HdeEp2HlJGIXglK7SFZ4dM+gvX9W3l9rhu20=
Subject key identifier: 6B:10:44:7B:2F:8A:B5:76:5B:39:B4:14:60:E7:7B:30:BE:88:08:65
Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial: 010D0C9F43285848A830B2723F91A972D980F7C0
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 6208
IP address blocks: 104.238.194.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b2:72:3f:91:a9:72:d9:80:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=14484958-9fc7-4ecb-ae20-98a810b642d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:f3:28:eb:dc:bc:72:68:34:a7:f7:37:8c:
10:50:6d:49:4c:02:c7:36:fb:e0:93:34:3b:f1:48:
79:b7:55:ed:24:bc:00:4c:ab:dd:28:c3:87:2d:32:
47:ad:cc:71:e3:1c:fd:7d:9e:24:b1:78:c0:f7:59:
89:a6:87:6b:3e:3e:05:d2:82:30:71:b8:3f:61:aa:
9b:7f:7c:f5:49:06:52:c8:2c:de:05:cc:da:91:01:
ea:ac:25:67:dd:52:69:28:96:5c:4e:31:f0:30:9d:
e8:6d:0a:ae:f3:5c:b4:03:98:87:cb:5a:3c:56:29:
d8:ce:0d:1a:91:ba:ed:de:64:e5:8d:80:f8:d4:83:
e8:d2:30:7b:bc:0d:9d:7c:ca:e3:15:30:b3:65:bf:
d1:fb:21:34:cd:27:e4:bb:29:cb:83:cf:ba:e6:08:
22:58:48:3a:06:f2:55:f6:88:6b:28:97:06:5f:cf:
78:39:ff:f7:c1:da:5f:74:a7:04:88:aa:28:c2:bb:
a2:72:c0:50:1f:47:7a:92:ad:5f:06:82:8a:3c:0d:
4e:8c:c5:22:fb:04:51:5f:24:cb:69:a8:7b:82:c7:
5f:4d:3e:7b:86:f3:a2:12:5a:77:72:6f:7e:17:2e:
96:74:a6:6a:36:e2:11:b5:e6:34:34:9f:68:6d:34:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:10:44:7B:2F:8A:B5:76:5B:39:B4:14:60:E7:7B:30:BE:88:08:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d040ec9d-d8f4-31f2-a2d8-fd6142194dea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
X509v3 Authority Key Identifier:
keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.238.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:09:c0:17:63:8e:24:f9:56:24:28:ee:45:6c:f0:d8:b1:6e:
a2:ff:d7:d3:22:ba:c1:ce:17:d2:99:9b:1d:e7:ea:a7:ed:5f:
e7:de:4e:02:84:1d:cf:b6:2d:40:0c:f9:75:7c:52:9d:06:aa:
64:14:1c:24:ab:01:2c:cd:9f:c4:0b:bd:89:d1:a8:cf:5a:60:
e9:ab:86:79:6f:a6:01:a8:bb:d7:92:f5:38:7f:ba:9e:45:f1:
d0:51:d9:5a:c6:a0:d5:f1:4a:77:41:75:d2:c3:16:24:fa:5c:
8c:9c:40:ec:d3:2a:6d:ec:c6:67:17:fb:80:9d:7a:b6:b4:ed:
f4:74:81:4b:6a:2e:40:1b:e0:a8:1e:e0:79:76:bb:dc:c4:03:
de:4c:a4:01:16:1f:08:74:b0:02:c8:31:f1:31:0e:74:22:30:
36:9c:e5:c9:d1:bd:c3:7a:0b:eb:2a:9d:c4:91:37:cc:50:26:
44:7a:12:ab:6e:4d:61:48:7d:84:89:9a:cd:d0:27:11:87:3e:
3d:e3:2a:22:14:d4:90:6f:94:00:46:af:41:2d:a6:dc:52:84:
f3:ab:ad:40:46:b1:24:27:dd:5f:81:13:2b:b5:eb:ec:cf:51:
a3:d3:e5:c7:1c:75:47:48:23:f8:cd:98:ac:b1:a4:63:80:97:
1b:8f:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net