Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa
File: bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa (raw, json)
Hash identifier: Nn/JErTWxpkQzp1zlEyTrxR3X6QksKUp9ck1t/m0Cl0=
Subject key identifier: 3C:D1:4D:E6:6B:B3:F0:1D:C1:CD:8F:33:AD:BC:74:21:FD:4D:E7:8A
Certificate issuer: /CN=ed14d35e-d16f-4ad5-82c4-5dcd3b569de2
Certificate serial: 010D0C9F432858497279B9764FACB283D487BC80
Authority key identifier: 55:42:44:A6:EF:F2:01:59:61:93:69:92:0C:27:51:AE:B5:D2:67:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 8796
IP address blocks: 23.159.248.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:b9:76:4f:ac:b2:83:d4:87:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed14d35e-d16f-4ad5-82c4-5dcd3b569de2
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=8c94e4ce-4a84-4a71-9d8a-842368255734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:57:a9:8e:de:88:d9:c3:48:04:fe:92:5f:
c9:12:3b:26:d4:53:6d:6a:f7:60:a5:eb:5a:87:7a:
90:53:39:1c:96:23:ad:f5:a3:e2:ca:71:28:02:6f:
4c:17:e4:aa:18:a8:5d:8d:a2:63:d5:c0:5f:d3:26:
99:e5:95:bb:2e:b2:47:55:af:13:d7:eb:24:3c:3a:
de:0f:96:3f:8b:17:d9:16:ba:06:fe:9b:bd:70:e0:
4e:9d:b3:04:6e:10:ce:47:30:17:b8:61:d3:f1:71:
01:8f:e1:44:0e:54:7f:8f:65:be:86:3e:32:6f:21:
e5:6a:13:cb:57:ae:41:50:52:40:40:ba:ba:50:d4:
e8:d4:ce:35:a3:ab:30:be:52:55:51:d6:30:ee:d0:
17:e5:0b:77:06:0c:1b:29:65:2e:4b:dd:7f:8f:fc:
6f:bf:c9:88:20:c4:79:dd:d6:1e:b4:49:52:74:d8:
67:a3:c5:d4:8a:3b:f5:81:20:b9:66:aa:c6:5e:5b:
e3:3e:4c:81:dd:72:d9:27:1e:30:be:c6:06:4a:b0:
ca:33:e5:a3:3e:0f:00:ee:e7:65:7c:ad:d2:b7:39:
92:84:dd:18:9b:ad:a5:69:b2:bb:ad:9c:00:60:17:
7f:bb:e8:fe:61:c4:d0:29:04:25:04:59:c3:9c:e3:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D1:4D:E6:6B:B3:F0:1D:C1:CD:8F:33:AD:BC:74:21:FD:4D:E7:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.crl
X509v3 Authority Key Identifier:
keyid:55:42:44:A6:EF:F2:01:59:61:93:69:92:0C:27:51:AE:B5:D2:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:66:76:5e:88:8a:34:6a:09:21:36:3f:57:c9:55:c6:88:7f:
28:e4:4c:9f:6b:54:a2:86:4b:36:47:30:8b:32:49:60:fd:10:
6f:21:b4:b2:55:34:d8:89:a4:7d:22:d3:78:56:6c:82:02:6c:
36:3c:44:e2:48:8d:90:88:06:38:8e:61:99:b8:ee:d8:71:4e:
d0:ef:07:2b:0a:76:0a:bd:4e:50:26:28:f4:8d:93:0a:03:9a:
9a:ca:cc:9f:df:b3:b7:d3:fc:5d:d4:a5:e5:43:79:7b:ea:42:
6d:4c:c5:6b:23:bb:9c:9b:54:03:44:f0:0d:b1:ea:2c:6e:a8:
fa:85:49:18:c0:43:f3:88:3a:9e:d6:fb:3b:f8:26:52:46:af:
57:39:16:3f:25:fa:a5:f5:de:9a:f8:fe:88:8b:ea:5d:ff:2d:
e2:fd:66:7f:f2:b2:6f:d1:22:92:c4:69:8f:e5:14:c4:8f:27:
bf:9a:e3:5c:4c:f2:e0:88:33:eb:88:4c:10:4b:ac:6a:dc:a5:
70:ad:d2:d4:03:23:45:48:68:ca:05:f5:ff:10:6f:b5:02:c1:
6e:e2:42:de:f2:60:8e:98:0a:da:95:e9:7d:d7:ee:be:c8:a4:
db:2d:16:7a:c6:74:a1:dd:a0:75:79:50:0c:72:b0:bd:2f:c2:
18:a8:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:31 2025 by rpki-client on console.sobornost.net