Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/d7567321-e4c6-3ef1-bc68-b7342c65de83.roa
File: d7567321-e4c6-3ef1-bc68-b7342c65de83.roa (raw, json)
Hash identifier: XAqzv05G8w6jzZrhZwTxioxtW5yAyGDYYwKrAzrEiUQ=
Subject key identifier: 63:93:5C:AF:43:AE:0F:C1:4A:8F:EF:BB:BE:33:95:58:03:80:B5:76
Certificate issuer: /CN=ef573c37-3920-4b85-b5ca-50707eefe4b3
Certificate serial: 010D0C9F432858498339F4ADE6B612C81FBD5900
Authority key identifier: AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/d7567321-e4c6-3ef1-bc68-b7342c65de83.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 30039
IP address blocks: 204.9.32.0/24 maxlen: 24
204.9.33.0/24 maxlen: 24
204.9.34.0/24 maxlen: 24
204.9.35.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:f4:ad:e6:b6:12:c8:1f:bd:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef573c37-3920-4b85-b5ca-50707eefe4b3
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=3e290e68-7308-4e72-9814-22ff33ef1ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:00:49:09:36:be:e4:ec:bc:96:89:86:33:
40:d2:ca:8e:96:ed:4e:a8:36:71:fd:31:8b:e0:19:
b3:3e:bd:d6:fc:74:d7:db:40:11:6d:b1:35:99:af:
09:8b:f1:79:14:be:2e:14:04:a7:0f:e6:88:4c:6c:
a4:61:64:78:ed:50:7f:4e:1f:e2:b3:54:3d:49:1f:
d2:d2:8f:e0:03:65:32:b3:d6:97:cf:7f:a8:0d:72:
38:be:9c:37:d5:01:4c:cd:59:f9:75:e1:0d:ad:62:
b6:09:a8:04:62:a5:35:0f:9a:48:07:5a:ca:5e:84:
74:75:6d:5b:57:0c:d2:7a:e2:67:88:87:dd:d9:45:
a6:f9:c9:d1:f1:51:7b:fd:a0:8d:41:aa:d7:be:3c:
1f:ee:65:95:f3:fa:bf:da:d4:0c:40:2f:cc:1a:f1:
c0:c7:6b:a9:49:dc:17:7b:b2:ec:0e:b6:46:9e:b6:
2c:74:e9:40:74:5b:05:10:08:b3:5b:29:06:71:ed:
88:51:ec:c5:14:8f:db:f0:08:44:9a:5d:84:a2:6e:
42:76:48:d5:1b:97:4b:10:cc:07:c5:58:bc:b5:a8:
c3:79:fd:1d:be:7a:a9:f7:79:ff:a7:6e:51:f2:64:
ab:fa:d7:3c:57:26:0a:43:57:d0:cc:a1:33:2a:12:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:93:5C:AF:43:AE:0F:C1:4A:8F:EF:BB:BE:33:95:58:03:80:B5:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/d7567321-e4c6-3ef1-bc68-b7342c65de83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl
X509v3 Authority Key Identifier:
keyid:AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.9.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:18:3f:ce:01:bb:19:94:f0:d3:81:fb:cc:a6:3c:db:2f:3b:
30:82:19:61:fe:b1:1e:91:50:59:5f:f9:ff:8d:8a:36:92:bb:
44:f1:fa:3f:55:5b:0c:ed:2e:57:9f:41:5f:83:86:b9:bc:52:
32:05:e3:39:ba:d7:4d:34:33:9c:b1:5d:d6:a7:51:cf:15:0e:
33:84:f5:03:80:2d:db:5f:a8:13:f8:a3:85:9e:be:44:20:cd:
86:35:2a:2c:1f:c0:1f:0a:7c:1a:3e:12:4a:2c:96:27:3b:8b:
e6:3c:74:0e:dc:f0:9e:63:a8:4e:82:4e:27:3f:92:d1:57:3e:
1d:2a:85:c7:e2:38:55:d3:c2:a3:b1:c3:39:a2:75:66:a5:eb:
3f:20:2d:23:7b:a1:a6:aa:0b:92:a5:34:c9:11:08:0a:60:21:
86:e7:20:a8:1b:38:19:65:5a:76:94:98:1d:8f:20:af:21:fc:
72:cb:9d:1a:68:c5:7e:e0:31:5c:f4:58:d3:78:18:a0:cd:e4:
82:20:67:33:bb:66:45:98:4c:79:4b:5f:ef:3f:c6:99:28:7a:
cf:4d:73:1a:8c:45:a0:5c:42:d6:7e:dd:71:79:e6:dd:4b:08:
48:1a:f4:ff:35:92:05:74:07:89:39:f5:dd:be:c9:41:d1:2b:
b3:22:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net