Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa
File: 294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa (raw, json)
Hash identifier: M/39aITdxXUhzX62Zou321tTnMFNz8YdILzJKp4cIdQ=
Subject key identifier: 8D:27:27:42:B6:0A:08:D9:39:AD:BB:AD:D0:15:A2:1C:91:B0:9C:0B
Certificate issuer: /CN=3299f656-5665-469b-8729-13b669bb2153
Certificate serial: 010D0C9F432858493B507FD8C250837D645A8800
Authority key identifier: 19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa
Signing time: Tue 18 Mar 2025 18:48:43 +0000
ROA not before: Tue 18 Mar 2025 18:48:43 +0000
ROA not after: Mon 16 Jun 2025 18:48:43 +0000
asID: 23294
IP address blocks: 2620:0:1a70::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3b:50:7f:d8:c2:50:83:7d:64:5a:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3299f656-5665-469b-8729-13b669bb2153
Validity
Not Before: Mar 18 18:48:43 2025 GMT
Not After : Jun 16 18:48:43 2025 GMT
Subject: CN=4c04c607-6235-44cd-b282-edc4f757cbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:bd:a2:57:30:71:bc:33:60:20:c0:fc:48:
2d:08:da:d2:ac:21:30:0b:40:e2:b5:60:00:cb:7e:
f5:46:80:ae:fe:66:55:19:f7:5d:24:0e:ab:c7:5e:
10:0e:d8:48:0d:e4:6a:d6:75:f7:71:33:6c:64:87:
7a:2e:b2:4b:8a:2b:02:bc:0a:44:b5:b6:3a:b8:72:
2c:aa:89:4e:05:c8:76:b2:03:ed:7f:fe:99:96:92:
da:e4:f9:69:2c:85:ff:dc:dc:cd:fb:64:6e:ae:8c:
1c:1a:a8:47:96:e8:2d:d7:01:16:7f:59:d7:e6:18:
ae:be:74:2e:c1:7d:7d:63:20:1d:13:72:9d:74:6e:
66:e1:78:64:55:d8:ad:40:86:54:66:e9:c1:1f:1d:
df:7b:57:ea:51:87:0a:48:a5:b6:c6:f4:c2:f0:24:
ad:9d:8e:cc:1f:a6:97:de:44:56:d6:9b:80:5b:6c:
b2:e4:fb:f8:6a:32:24:cc:3b:6f:6f:d4:45:db:5b:
db:47:33:90:64:a6:b5:6c:38:4b:7f:e7:a1:6e:9a:
d9:3b:5c:a6:86:08:be:93:e4:e3:b5:89:fb:85:48:
c3:e1:da:45:10:31:8c:d7:33:81:d1:ad:30:56:4c:
c5:a3:12:7a:6f:2d:80:8c:a5:91:d6:34:28:38:b7:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:27:27:42:B6:0A:08:D9:39:AD:BB:AD:D0:15:A2:1C:91:B0:9C:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.crl
X509v3 Authority Key Identifier:
keyid:19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:1a70::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:c7:f5:cf:99:ab:32:eb:39:3c:2a:ab:3c:e5:6d:65:ed:c0:
59:7c:e2:96:e2:54:56:9a:ac:7b:78:79:3c:e9:d2:35:b8:3d:
02:5e:36:e1:b4:fd:b5:a2:7f:76:2e:67:05:e6:4d:5d:8a:56:
bd:97:27:33:42:80:76:6f:61:87:8c:b6:39:4b:9f:b9:5b:fe:
f9:ea:df:2e:05:ea:cf:4e:a5:71:89:d6:c6:af:f6:29:e5:5c:
93:16:c2:a0:dd:9c:e0:91:32:3b:d7:94:50:ab:57:c8:01:0f:
0d:49:5b:68:50:65:ff:ab:95:d5:80:93:6b:e4:16:69:c3:3b:
92:7d:8c:d0:df:50:1a:38:18:09:11:65:84:aa:e3:ce:53:55:
52:99:af:0e:ea:a9:c0:7a:c7:8b:49:b8:37:7e:09:e0:5e:f0:
ee:20:0d:d7:e9:64:35:1c:82:31:7e:53:28:ed:23:ad:38:2e:
9a:03:9c:e0:c0:40:ca:05:b4:0a:da:f7:0b:8c:8e:b7:fe:ff:
f5:4e:57:f1:6f:19:58:80:57:3a:da:69:ac:2c:66:49:4e:07:
c8:61:21:81:67:0d:33:16:af:9b:68:ac:cd:b7:48:8c:18:82:
c2:57:ec:aa:b0:cd:aa:9e:79:45:3b:34:f9:5d:78:2c:c8:13:
c4:14:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:32 2025 by rpki-client on console.sobornost.net