Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa
File: 918523ba-c151-3f99-b377-2e0bfbd7897c.roa (raw, json)
Hash identifier: CZIIA+MaPH6ydlJ3iQjxp+MD8LHMp8ntRFw4zhq9Dmk=
Subject key identifier: 3C:4B:67:BC:EA:4F:7E:05:99:33:11:DE:E8:78:8B:06:9B:50:B0:7A
Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Certificate serial: 010D0C9F43285848E2D103EFE795D5916E5CD880
Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 46687
IP address blocks: 208.93.80.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:03:ef:e7:95:d5:91:6e:5c:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=f41a6fb9-2d96-4595-aa93-4320fa0ff976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:e7:64:5a:0e:88:81:06:1e:97:3b:75:9e:
44:0b:a4:5a:eb:2e:17:95:08:f7:ff:04:a4:f4:b3:
1c:21:4b:8a:c7:a8:43:72:d3:ac:fd:94:fe:c1:8b:
5d:63:b4:3b:5f:f9:a6:26:81:56:e4:55:3f:a2:dc:
65:f9:e3:a9:cf:21:95:01:1a:24:a1:d2:ef:3e:cc:
46:21:9f:4a:3e:49:7d:e2:7f:8f:f5:2d:c6:41:b6:
bc:e4:21:e6:6b:d6:41:9e:bb:5c:c5:87:dc:32:6c:
d8:be:9b:3f:ca:84:d6:e0:81:f3:0c:f0:a8:dc:44:
43:cc:ce:b4:7d:79:eb:ee:52:b1:d9:a6:9c:0d:a3:
2c:bc:72:e8:a6:c6:68:9c:57:f7:4b:f8:01:5d:ff:
b3:58:7d:69:82:df:75:d2:68:9b:68:b2:ea:06:df:
f6:53:d5:4e:b4:8f:c7:ce:b4:26:03:2d:3f:c4:93:
b5:fe:f0:73:bd:83:a3:45:8d:15:7b:4c:f8:01:54:
ab:97:2b:2c:9c:3c:42:37:5f:43:89:53:ea:47:c3:
47:2d:ba:41:5d:17:49:a3:06:dd:2a:88:4d:14:3e:
76:90:a0:ae:17:52:f6:10:65:ca:0a:73:8e:9c:3d:
4f:5b:5c:5d:15:2c:96:d5:af:05:c8:90:53:19:8b:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4B:67:BC:EA:4F:7E:05:99:33:11:DE:E8:78:8B:06:9B:50:B0:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl
X509v3 Authority Key Identifier:
keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
sbgp-ipAddrBlock: critical
IPv4:
208.93.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:6c:a3:8e:b2:f8:94:82:34:67:45:f0:2b:53:0f:61:eb:3e:
b4:31:af:b7:68:ab:e3:0f:48:f1:0a:7d:8e:2b:1a:54:9c:d6:
77:d6:8a:1d:b0:fc:7a:ad:79:40:ef:58:f0:34:76:22:31:20:
e1:b5:6b:40:8e:fc:26:f2:eb:af:26:58:c7:57:d2:87:d3:9e:
79:f4:37:45:f9:84:57:0f:de:71:c4:cc:e2:70:f5:4d:cd:c7:
55:3c:dc:d7:85:fc:05:01:a8:6e:69:97:42:b5:f0:9a:14:dc:
59:f4:86:e7:7c:c9:9d:ac:b3:3d:01:fd:75:08:be:59:20:21:
c8:af:e5:83:3d:8b:c8:98:86:38:26:c9:01:c3:58:fc:92:8a:
f3:6b:93:11:2e:db:dc:d5:f1:5c:3f:5c:fa:f7:f2:03:7c:b6:
fc:2a:ec:98:7f:ef:43:38:9d:33:b4:06:28:78:42:05:b1:55:
5d:5e:a0:9c:15:fa:38:b6:00:8c:17:2c:3c:3a:b5:4e:b8:a7:
b9:cc:c4:b4:eb:d3:de:73:80:fc:6a:0a:f7:fa:7e:0d:da:1d:
85:4f:f3:68:f4:8f:7e:db:c4:33:f4:e7:40:5c:4e:27:32:95:
f3:dd:e7:b6:14:f7:b1:1f:a6:7c:65:e3:ef:64:10:89:53:b1:
a7:16:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:32 2025 by rpki-client on console.sobornost.net