Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa
File: 5c4f117d-45b9-3f38-be81-53b231ffe933.roa (raw, json)
Hash identifier: bkzsTiRzquf45BIeWU+JWbfsFnpuOgviGcPj3AoBDgw=
Subject key identifier: 60:63:E1:90:C8:08:22:97:94:ED:9D:DD:E6:8F:3C:D0:15:CE:B8:0F
Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Certificate serial: 010D0C9F43285848E2D1039F1784D98893E43500
Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 46687
IP address blocks: 170.253.128.0/17 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:03:9f:17:84:d9:88:93:e4:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=3101ec95-038a-47e0-81d6-9ef6ef0e605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:25:8a:60:11:03:3d:c9:cc:65:e4:dc:e2:34:
bf:27:28:5b:54:4f:c3:46:f0:87:fd:52:49:ac:fa:
bb:14:73:7e:83:e5:1c:18:3e:53:3a:c4:07:6d:39:
87:cd:1f:e8:21:24:71:11:86:40:92:87:86:ef:f1:
1a:cd:7d:82:75:9f:2c:20:0f:1f:2a:eb:b9:36:a2:
ba:54:7e:3d:a9:c9:2c:f7:5b:c5:40:75:23:ff:4a:
d2:dd:87:50:81:0d:25:2b:70:23:be:dd:33:3a:10:
50:7f:6b:be:4e:0e:6d:bd:b3:5f:0e:50:e7:44:dc:
68:7e:90:53:e7:13:cd:6b:db:87:4d:94:97:eb:ad:
5a:a9:0a:66:f1:62:08:59:30:9e:d5:c1:76:20:a0:
2d:f0:35:05:2c:27:c7:3c:c9:21:23:bc:c1:eb:3b:
1e:66:f4:96:c4:1e:c5:14:aa:d4:0b:0d:53:b6:d8:
af:aa:98:9b:f9:32:59:5d:48:78:62:17:b7:99:e1:
3c:9e:5e:f5:1c:de:d1:41:4e:b8:5a:48:85:35:37:
bf:2c:2e:16:f3:a2:e2:d9:89:ff:a1:bd:24:f9:60:
64:c2:85:57:bc:03:11:68:a6:54:d1:42:45:e6:0b:
1f:45:73:c4:3b:61:9d:d9:47:e1:ef:07:32:23:b1:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:63:E1:90:C8:08:22:97:94:ED:9D:DD:E6:8F:3C:D0:15:CE:B8:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl
X509v3 Authority Key Identifier:
keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
sbgp-ipAddrBlock: critical
IPv4:
170.253.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:55:ef:ff:7d:9e:22:be:c5:68:9c:2c:da:13:49:50:a3:4c:
34:c2:79:bd:e6:ad:c5:7a:ba:1d:81:f3:d5:70:91:95:b9:5a:
0d:7e:bc:56:60:44:0d:9c:c4:66:db:b5:15:86:69:ac:d8:16:
e4:3b:a0:3b:0b:fc:3c:89:3b:a0:3c:7f:70:0a:94:8b:61:a8:
49:da:48:b8:f9:6a:24:99:ce:50:7e:59:06:67:d2:96:26:0c:
75:39:89:22:ad:ce:9b:ad:f4:6d:c3:cc:97:56:3a:41:e5:13:
5a:1d:4c:3b:fb:d0:79:38:e6:2c:7f:2d:ee:78:2d:d3:e4:3b:
cb:67:3f:9a:8e:a2:3b:52:23:a8:ef:84:89:48:dd:4c:9f:ef:
fa:7b:79:91:2f:65:d0:fa:30:43:71:20:91:af:26:e8:63:47:
6a:1a:95:1d:2d:08:ec:84:7b:36:7f:7d:da:c0:70:66:db:bb:
c5:b3:2c:18:fe:60:ba:54:f6:02:ce:89:4b:67:dd:90:6b:f4:
8e:7c:fe:59:89:0a:06:27:ab:1e:09:e9:66:0d:a9:10:ff:5b:
87:87:a5:69:5a:72:f0:a4:3e:fb:fc:93:8a:dc:fe:ea:76:fc:
5e:63:e5:50:98:64:06:1d:4d:41:9e:d6:05:94:e2:67:46:2f:
1a:af:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:32 2025 by rpki-client on console.sobornost.net