Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa
File: d66d3dcb-2e94-38a7-9549-d369a5770717.roa (raw, json)
Hash identifier: Y2pL5myI9uAvHtvAPfCVQpvTyXjxZZ456X8gwFx5WBU=
Subject key identifier: 3B:5E:43:A6:4E:BB:C3:10:71:FB:22:42:F0:CB:68:1F:74:ED:D2:C7
Certificate issuer: /CN=325f62aa-b9c8-4315-87d2-409b60e8840d
Certificate serial: 010D0C9F432858497A718D814624DA206077DD00
Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa
Signing time: Thu 10 Apr 2025 09:31:14 +0000
ROA not before: Thu 10 Apr 2025 09:31:14 +0000
ROA not after: Wed 09 Jul 2025 09:31:14 +0000
asID: 400228
IP address blocks: 206.41.111.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:71:8d:81:46:24:da:20:60:77:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d
Validity
Not Before: Apr 10 09:31:14 2025 GMT
Not After : Jul 9 09:31:14 2025 GMT
Subject: CN=64a6f1f4-725f-4bed-8ea4-33ea27022c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:8f:0b:bf:90:fb:40:8d:e0:bb:aa:cc:d7:
8d:55:54:48:6a:83:e2:3f:cd:c5:8d:9d:7e:b1:93:
71:29:1e:c9:6e:9e:e8:6e:87:c3:35:e1:b9:14:16:
df:b4:d1:da:1f:14:da:61:80:66:b4:fb:f5:22:f5:
ab:7e:a8:fc:08:05:dd:87:37:b2:95:89:3b:b4:c1:
57:98:29:0b:08:af:0e:9d:c5:0f:03:7a:6b:61:eb:
45:0e:73:ea:80:7d:d6:94:ab:a2:59:07:30:b4:40:
d0:48:af:2d:c4:3a:bc:6f:a4:ac:51:4a:61:a6:13:
ef:ea:94:b6:50:74:55:4b:d0:d2:52:d8:b1:11:b0:
09:51:28:45:ea:12:c1:d2:7b:71:cd:0e:bf:0a:26:
4c:7c:78:8f:23:80:d3:95:fd:28:13:04:fb:fc:30:
95:bf:e4:0a:4b:9b:08:b5:9c:86:e3:69:4e:c9:12:
c4:7f:7a:d3:50:c2:0f:7a:27:75:8b:88:ce:ac:d9:
fc:f2:3c:83:d7:bb:a6:17:af:ae:08:88:70:ee:4b:
2c:77:c5:c5:7c:f3:3d:31:fe:f0:dc:c6:e8:17:5a:
35:55:1a:d5:ff:06:0a:c1:89:d9:95:b5:22:96:cd:
80:35:d1:7b:46:7f:4f:e8:fe:cf:8c:b8:fc:fa:2e:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:43:A6:4E:BB:C3:10:71:FB:22:42:F0:CB:68:1F:74:ED:D2:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl
X509v3 Authority Key Identifier:
keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:3d:e6:41:2a:6d:6b:72:41:3b:f9:98:67:b3:cc:a7:32:61:
a2:25:34:38:7d:f6:00:2e:71:43:57:e6:54:e5:7b:b1:38:e1:
f9:30:7e:2a:93:6e:12:17:ef:61:80:0d:c1:2b:f2:0e:b1:04:
4d:a5:a1:e8:75:e8:24:0d:09:de:7e:1b:73:c3:1a:84:bd:ae:
f5:7f:72:0e:9b:66:95:62:36:24:4e:6e:4f:b0:84:36:9d:e9:
63:1e:96:15:67:d2:af:a4:4d:d3:24:71:7f:3a:98:2f:e2:04:
b4:f3:d7:14:92:6b:60:9c:b2:88:8e:55:62:09:83:be:1d:36:
ff:8f:6b:3c:f4:33:58:1f:f3:3e:56:0e:48:e3:a9:e9:55:b1:
19:ea:b7:04:3b:aa:83:a1:01:f5:3f:89:56:07:e6:4f:39:e2:
dc:a1:37:be:9f:65:35:03:17:a4:cb:c5:c3:db:ac:bf:d1:fb:
54:97:ad:45:56:2d:4c:98:45:60:73:5b:4c:65:7c:e0:b0:7c:
8e:d6:f6:67:6e:5f:94:d7:cf:ed:bc:cb:37:25:be:a7:95:24:
45:bd:b0:e6:4d:22:74:56:50:f1:18:81:ea:83:f9:e6:6f:ac:
dc:50:b7:8e:ff:a9:27:94:b9:cf:bf:60:01:43:87:51:43:2a:
14:d4:f8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net