Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa
File: ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa (raw, json)
Hash identifier: 4gl3ib7W0ZYYfntZtkcwfYiyNEp/zeCyVrFUWPpryxk=
Subject key identifier: E1:51:DE:0F:A1:95:CC:9A:18:19:39:EC:5E:CB:35:02:51:12:9B:6D
Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Certificate serial: 010D0C9F43285848E2D1036D4139C88E94FF7100
Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 46687
IP address blocks: 24.245.112.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:03:6d:41:39:c8:8e:94:ff:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=219474ab-2806-4f9f-b0ee-74bdf3bf07a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:2b:15:8c:41:a7:56:e1:bb:b8:66:38:07:
7e:17:b1:97:c4:c6:19:cf:88:db:a3:c8:e4:74:e0:
4a:80:23:ea:e6:9b:c6:7b:96:65:63:6b:d9:3e:49:
ba:c4:8f:7f:1d:2a:dc:a7:2c:19:be:64:3c:15:59:
e7:a6:a4:b4:f2:24:5b:a7:ae:d0:cb:11:97:af:68:
71:f4:32:ab:b0:65:7e:d7:b5:56:17:b3:e2:bf:4f:
43:53:a1:a7:14:b2:02:0e:5a:2c:68:bd:41:93:47:
f2:98:8c:0d:10:5c:90:2a:8e:45:57:4e:c3:e7:1a:
35:92:fb:a9:5a:0a:99:2a:a2:74:7e:79:81:c3:2b:
a5:c0:77:09:d2:5b:78:2a:98:ac:90:2d:31:90:d4:
85:71:35:3f:3a:3e:54:04:db:ac:43:3c:de:ec:82:
a0:dd:07:0c:00:c7:72:9e:29:16:bd:c5:08:05:89:
96:4c:37:42:ba:8d:72:bb:b8:72:f5:74:09:c4:80:
58:8e:8f:a6:54:aa:b4:f0:4c:a6:76:71:d7:0d:1d:
8e:2a:50:82:5a:26:5b:b9:da:86:1a:38:56:b2:c6:
e6:30:ee:05:45:06:22:13:30:82:62:6e:72:39:d0:
42:f1:53:68:30:ba:5c:0a:40:8e:6b:67:da:35:8b:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:51:DE:0F:A1:95:CC:9A:18:19:39:EC:5E:CB:35:02:51:12:9B:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl
X509v3 Authority Key Identifier:
keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
sbgp-ipAddrBlock: critical
IPv4:
24.245.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:e0:c0:d6:e2:22:c3:a5:f3:19:a4:09:fd:9d:55:e9:0b:dd:
11:65:59:14:44:e5:79:b1:00:c0:51:24:3b:e6:11:86:20:28:
1a:09:e2:51:79:cb:3d:ce:8a:9b:5e:0f:c4:00:a2:f2:c3:68:
00:6f:91:a9:71:b2:ef:8b:95:0d:a0:bb:68:e2:b5:1a:44:76:
7f:4e:00:4e:45:a7:de:31:08:b9:49:0a:0c:c0:04:97:ab:bb:
1a:74:a6:49:7c:4f:ae:68:40:6c:ac:84:65:61:49:ba:4e:eb:
8c:91:49:71:4c:26:51:5c:20:2d:15:0e:82:4e:4d:8b:fb:a9:
2c:ef:76:b7:99:49:06:f3:e1:74:d2:b2:1e:2e:8d:6b:db:76:
92:4e:90:cf:42:8d:ae:22:25:d6:2b:58:1f:09:b7:01:46:89:
bc:2d:31:02:73:35:9e:7d:79:be:e5:41:81:e8:57:36:11:b2:
48:3c:5f:97:0a:97:5c:63:48:63:38:52:0a:e6:de:d4:05:ba:
42:5d:14:fb:42:b4:1c:75:1f:90:01:9a:9f:08:a7:32:06:1b:
f4:a5:b4:c0:b2:8f:4c:b8:c2:ea:87:5e:76:e8:63:36:20:dc:
6d:09:2d:a7:f0:16:9e:70:a3:47:75:0f:e6:4c:ca:24:b0:d3:
ee:d4:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:32 2025 by rpki-client on console.sobornost.net