Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/e36c3cc9-6f43-3161-8cf2-91b946878b2c.roa
File: e36c3cc9-6f43-3161-8cf2-91b946878b2c.roa (raw, json)
Hash identifier: omfjeoY9Bt2NLk6Xj9WG2tazeG11rtayEzNyh1zTS80=
Subject key identifier: B2:54:84:35:01:86:A3:E9:92:EB:97:AE:1F:EA:B0:6D:5D:6F:70:58
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F43285849002162EF9B375C4B9544E100
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/e36c3cc9-6f43-3161-8cf2-91b946878b2c.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 62931
IP address blocks: 200.5.29.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:62:ef:9b:37:5c:4b:95:44:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=fa23baf2-3479-4e8d-84ac-78b0240958c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:5e:d6:7a:cc:32:a6:3e:69:09:c3:37:8a:
82:b3:30:1b:0b:c8:de:9f:6a:44:6a:dd:a8:21:d1:
0a:d7:38:1b:0d:16:1d:c6:d3:1d:f1:82:02:3d:68:
d3:e7:5a:38:66:d3:37:cb:a6:d7:44:11:8d:8d:8a:
95:31:ec:44:41:c1:60:5f:98:d0:ea:4a:32:cc:ac:
5e:af:26:45:73:d2:9d:9f:52:11:3c:2a:c1:ff:91:
f6:68:08:4b:9a:68:8e:1f:4c:4c:f9:a2:0a:98:e8:
57:20:d0:20:e2:49:1e:05:fb:7e:f4:1d:d2:fe:9e:
61:dc:b3:2a:98:15:fe:b3:20:eb:1b:c9:b8:a7:0b:
88:aa:7a:a5:ff:6c:10:d3:76:4e:bb:5b:9f:b3:de:
6a:2d:16:44:f4:58:31:7e:35:ee:f9:4d:88:dc:af:
6a:3a:30:d6:04:9f:91:c2:94:6f:68:06:2d:f6:f2:
93:dd:c0:cd:40:0c:1a:af:39:57:97:61:21:70:80:
fa:bc:7b:24:03:04:f2:15:cb:29:57:72:52:16:9f:
94:e0:ba:65:34:de:9e:fb:80:6d:4a:32:b1:4c:c6:
f5:a8:85:0a:8b:d4:fb:cd:ef:62:dc:5c:e3:92:d3:
98:b3:ac:cc:36:29:71:0c:6f:e9:26:2f:6c:78:e7:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:84:35:01:86:A3:E9:92:EB:97:AE:1F:EA:B0:6D:5D:6F:70:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/e36c3cc9-6f43-3161-8cf2-91b946878b2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
200.5.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:54:0d:13:bd:39:21:1b:fc:83:fa:b4:df:2e:9f:fe:ba:22:
4d:57:b5:ac:86:95:2c:90:d1:6e:cb:ed:4d:68:76:7b:d1:c7:
ed:b8:b3:32:c2:74:26:eb:30:d0:cf:c6:26:75:d8:f8:d4:d4:
e5:0d:0c:45:5d:c5:58:b5:43:c7:43:77:8a:b5:5b:eb:c2:17:
47:96:e8:5a:8f:94:e1:25:59:8b:10:3f:5c:12:8d:1d:5a:ba:
7c:21:71:5c:c0:76:92:1f:59:0a:c6:43:63:18:2c:e7:72:89:
52:bf:a4:79:fb:02:3e:84:aa:6e:d8:53:e7:ec:d0:26:03:fa:
ca:b8:0d:bc:99:12:7b:21:20:49:4d:4f:fe:76:14:74:99:1f:
c7:f8:b9:e2:29:8d:bb:cb:e5:ec:20:f5:41:83:a2:a7:f6:fb:
75:0c:4a:3b:ab:76:3d:ef:12:20:03:3c:93:f0:11:a8:cf:15:
69:ad:b1:e8:18:8a:88:a6:35:9e:16:9d:8b:4e:b8:9f:06:68:
96:5b:ce:68:94:6a:57:66:e0:0d:96:27:8f:0d:1c:58:74:c5:
c8:89:94:f7:00:04:9c:79:79:1c:59:19:73:71:45:9d:7a:2c:
34:db:45:9b:b1:73:1b:ac:94:d8:f1:1f:29:ed:cd:4e:36:1e:
dd:9d:7e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net