Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa
File: d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa (raw, json)
Hash identifier: w1NHpxjg5YZlWH+SBwMxb65fvc+uZL+LuedDjc/zolE=
Subject key identifier: F4:85:0C:39:73:81:27:1B:B6:5C:7A:95:FF:60:17:60:8C:BD:11:70
Certificate issuer: /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial: 010D0C9F4328584975B406C691002214E29FDE40
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa
Signing time: Tue 08 Apr 2025 16:46:08 +0000
ROA not before: Tue 08 Apr 2025 16:46:08 +0000
ROA not after: Mon 07 Jul 2025 16:46:08 +0000
asID: 7950
IP address blocks: 142.87.117.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:b4:06:c6:91:00:22:14:e2:9f:de:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Validity
Not Before: Apr 8 16:46:08 2025 GMT
Not After : Jul 7 16:46:08 2025 GMT
Subject: CN=9c7489f4-41e4-427c-8bf9-2b5ac87b4384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:61:6f:5d:ec:57:25:33:5e:d1:78:48:78:
f9:3a:d3:d4:67:cc:14:57:3b:ac:1b:b6:52:18:d0:
e6:69:0e:7f:cf:af:ef:b8:33:17:7c:cd:3e:29:66:
dd:09:71:7a:ed:4f:6c:10:a3:0c:9f:4c:0f:4a:38:
c2:de:db:66:5a:cc:a3:dd:92:a0:e1:24:68:9c:fc:
4b:c6:4c:8e:1c:da:e1:2f:c7:72:64:e4:58:d3:39:
e2:85:ba:82:4b:f7:df:69:52:b3:e9:1b:0c:10:bd:
01:83:f9:81:6c:77:26:ff:31:43:5e:54:ad:cf:09:
9e:f7:c0:52:48:fd:ac:69:b0:4d:3c:eb:29:59:68:
93:0b:49:91:f9:ec:4b:41:90:55:83:62:02:86:fe:
11:59:b0:2f:9f:2a:e6:26:88:69:c1:46:99:a8:0e:
38:f9:a5:b2:a1:96:77:6b:1e:cd:49:0b:7c:30:e3:
ed:27:fa:4e:6f:6b:79:41:5f:85:4a:19:34:69:92:
8a:ea:1e:a2:41:63:ea:67:4b:59:24:f1:67:3b:11:
65:b6:89:26:42:11:a1:81:a1:a6:24:86:65:e6:da:
79:ca:8b:84:4a:5c:db:5d:3c:c1:2f:3c:34:19:61:
a4:b2:df:0b:9f:fa:fc:1d:66:98:09:26:4a:8b:3f:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:85:0C:39:73:81:27:1B:B6:5C:7A:95:FF:60:17:60:8C:BD:11:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
X509v3 Authority Key Identifier:
keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
sbgp-ipAddrBlock: critical
IPv4:
142.87.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:f1:40:17:4e:73:3a:e9:86:80:cf:39:02:67:9b:2f:43:d9:
bf:42:81:0f:7f:24:ba:f3:00:33:76:0a:4e:40:b1:d7:cc:27:
cb:8c:d8:3a:20:8b:74:12:5c:cd:59:22:bb:a4:28:1d:19:09:
bd:ac:1f:ac:c2:c0:74:9c:0d:95:e5:d0:e4:1d:ac:88:9f:43:
a6:03:96:f6:d3:d1:ca:fb:75:0b:6f:8c:43:92:3b:b7:86:9a:
4a:30:26:95:a2:23:6d:eb:37:b4:c5:33:c0:ec:0d:3d:ee:9e:
f9:70:22:c1:5e:ff:3c:b4:82:51:bc:fd:6c:e5:ae:5b:f5:e9:
96:26:ed:cf:ee:53:59:4a:d7:f5:cf:d2:fa:58:dd:37:13:15:
3a:76:e8:1b:06:48:3a:59:16:3a:05:62:41:64:fd:9e:4c:65:
a5:81:9e:6c:5c:9f:23:3a:77:16:44:b9:a8:e6:e4:a2:21:d9:
74:03:4d:d8:20:55:c0:87:03:a0:3b:f8:46:20:b4:d6:be:16:
e2:91:d3:c8:59:6a:73:df:70:ef:4d:c3:e5:45:2c:66:f4:f0:
fd:66:b0:cd:83:ec:10:83:2f:5f:90:f7:e6:68:79:7d:05:b4:
3f:93:88:48:35:e4:c3:35:c5:b2:05:be:dc:07:ff:c6:31:c1:
9c:7b:65:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:41 2025 by rpki-client on console.sobornost.net