Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa
File: f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa (raw, json)
Hash identifier: V0UcXQbSuSxDmZTuV6Xcby+GJghXWY0gbaTRaRh8Vac=
Subject key identifier: 51:CE:CD:DA:EF:DA:42:CE:C0:7F:77:EC:E8:D0:CB:21:20:D4:4F:3A
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F43285849806F2205FB6AD52D1A150680
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa
Signing time: Sat 12 Apr 2025 13:01:01 +0000
ROA not before: Sat 12 Apr 2025 13:01:01 +0000
ROA not after: Fri 11 Jul 2025 13:01:01 +0000
asID: 21559
IP address blocks: 192.254.96.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:80:6f:22:05:fb:6a:d5:2d:1a:15:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Apr 12 13:01:01 2025 GMT
Not After : Jul 11 13:01:01 2025 GMT
Subject: CN=9d572aa1-ebeb-485e-a5bc-024ca9f121cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:ea:5c:e2:5c:37:2b:bc:24:96:f8:6b:c5:
3d:30:01:3e:3a:eb:b1:da:84:cd:34:c9:e5:03:12:
8e:2e:d0:33:22:f4:45:1e:53:63:45:76:ff:a8:60:
4c:8b:63:82:03:c6:c3:d8:19:77:b7:9f:a3:31:f5:
49:f3:8d:40:3d:85:ef:9a:3a:1e:4b:08:b4:be:e6:
44:2f:92:1e:63:84:40:a0:64:d4:60:c6:d7:1e:14:
7f:95:3b:8a:a9:8a:74:95:78:93:83:1a:ba:e2:78:
8d:f7:b1:fb:17:a4:ff:39:ce:ff:6a:40:2a:b6:a8:
24:f2:42:f1:dd:17:81:70:e6:e1:f7:c0:df:97:4b:
25:be:35:7a:f7:53:14:b2:b1:06:01:9e:8d:01:6e:
d6:1e:ed:50:52:fc:24:a2:f4:f0:11:08:40:07:91:
04:e1:eb:71:c0:04:9e:e8:2c:b2:50:b6:f0:a7:25:
5b:48:9d:0f:22:42:35:c3:45:d3:2c:c9:30:c2:59:
ad:29:47:7f:08:ea:11:59:4e:9b:0e:b0:0c:d9:0f:
5f:58:55:f0:13:b3:a0:39:da:91:2e:5a:b7:1b:70:
db:88:cf:9d:01:be:08:f3:13:42:cb:4c:9c:51:5f:
b3:ee:50:69:e6:1f:15:6c:99:4a:25:50:89:b4:e7:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CE:CD:DA:EF:DA:42:CE:C0:7F:77:EC:E8:D0:CB:21:20:D4:4F:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.254.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:63:b8:41:43:3f:b1:96:7a:44:8d:f1:86:00:63:f2:a9:ad:
77:32:60:ac:39:22:ec:10:76:7f:97:83:9b:b6:93:4b:02:6a:
f6:a6:1a:b9:90:d1:3a:4b:d4:29:3f:4c:f6:0d:6e:dd:cf:60:
6b:68:d4:98:5e:70:f1:68:69:73:d4:59:88:6a:8a:3a:13:b7:
0c:87:c3:16:7b:59:28:da:56:23:76:7e:0b:09:7e:df:a1:88:
52:67:d4:1d:2f:79:c1:c3:6a:ef:cf:ed:31:d8:eb:0a:bd:23:
ff:f3:07:db:32:27:a3:16:77:ee:ca:64:fe:f4:31:6a:09:64:
58:6a:d9:22:44:75:18:92:f7:3c:bf:98:0a:f8:35:f2:7b:41:
58:29:d6:07:c0:34:69:f8:06:be:44:3c:d8:95:71:03:4e:86:
33:03:77:1f:d7:b8:4f:7f:83:71:fd:4a:0e:66:f4:9e:45:41:
4b:b2:f3:52:09:f4:60:50:20:76:fb:fc:c0:bc:6d:b5:e2:8f:
8a:ee:78:d0:c6:16:c1:df:e2:bb:a8:bd:fe:18:a5:6f:0a:8c:
c8:e2:fa:24:77:ba:49:1c:68:29:0b:0a:0f:57:68:ce:65:8e:
12:c2:64:ce:bd:e7:be:ef:7c:89:89:a5:fc:56:fc:6c:45:40:
3c:bd:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net