Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa
File: c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa (raw, json)
Hash identifier: htSVEJXYRY3FZG1BPQ+oFWOb5gfB6G2KM4ATtQMCziw=
Subject key identifier: BB:23:69:23:22:CF:B3:B9:A5:F2:B2:C6:D6:7E:51:39:7B:79:23:60
Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Certificate serial: 010D0C9F43285848E2D1032FF649ECAF3407CD80
Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 46687
IP address blocks: 24.213.96.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:03:2f:f6:49:ec:af:34:07:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=01005fba-b47f-4c67-8afb-6db7c23b28bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:0f:83:6d:ee:c5:19:b3:5f:a9:62:d6:52:
a2:2a:11:70:aa:2b:f0:69:0f:7c:84:98:26:15:f8:
80:15:33:da:50:9b:1d:5e:62:95:9f:b8:bd:76:f1:
87:55:d6:90:1e:45:54:62:0a:26:f3:94:68:eb:aa:
b7:35:76:e6:36:d1:93:35:f3:76:67:20:e8:f4:d1:
8f:b1:ed:56:3b:da:a5:5d:07:69:88:d3:df:ce:7f:
76:2a:73:61:9c:ee:02:f0:be:2e:c9:de:e3:28:3b:
b0:d8:10:a4:5b:66:dc:43:75:e5:53:98:c9:be:b6:
e4:1a:27:8e:51:e4:ab:1f:49:5c:88:e3:c4:b8:cf:
15:bc:1c:4f:db:f2:0e:35:ae:fb:2b:da:4c:8d:d2:
59:d2:16:00:b3:6f:a7:ee:f5:7e:91:e7:59:b8:3a:
87:59:d3:48:cc:42:d3:c0:6c:e7:2a:e4:33:fd:e8:
dd:20:2c:0d:a9:6f:03:24:cb:ce:b6:2d:6b:f2:e8:
80:31:db:10:fd:cd:ab:49:81:d6:59:71:8d:dc:f1:
6c:20:06:81:1c:bd:40:b1:3a:fe:f9:41:48:a5:68:
26:73:78:22:63:16:4c:97:9b:8c:70:dc:78:8b:9a:
28:e3:4d:42:68:9f:14:5f:5c:07:ca:56:66:04:c2:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:69:23:22:CF:B3:B9:A5:F2:B2:C6:D6:7E:51:39:7B:79:23:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl
X509v3 Authority Key Identifier:
keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
sbgp-ipAddrBlock: critical
IPv4:
24.213.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:55:f8:57:ce:38:9c:55:1f:c4:ec:37:c6:03:86:b8:af:2b:
82:4c:79:82:3f:bb:0a:77:37:de:90:80:2d:31:9a:db:9b:eb:
67:6c:2b:52:b2:1a:8e:fb:7e:54:58:9c:ec:a8:63:e6:c0:10:
68:fe:ad:5b:03:0a:94:f5:d8:4c:ee:f6:2f:75:4a:68:42:8a:
2c:ec:6e:f4:b9:08:56:ce:aa:9f:40:50:05:6e:6c:ac:f0:97:
58:27:e8:47:23:b4:43:5a:96:43:31:d5:3f:c4:81:f0:74:80:
36:8e:32:fb:a0:04:28:f2:c8:ab:51:c7:6f:4f:76:9d:50:d5:
b8:1c:64:55:0c:78:6e:32:98:29:b3:b6:31:81:91:8a:e8:aa:
cb:4d:45:23:16:b7:a7:be:27:9b:77:38:bb:64:74:2b:06:7c:
20:28:f2:1d:bc:e9:42:d4:22:fd:69:81:7f:90:d2:b9:34:60:
d5:3c:63:c1:c0:80:dd:8b:9f:ab:4e:d9:df:2c:2f:1e:a8:d7:
e1:b3:b6:c8:7d:a8:00:fc:38:65:22:6d:2f:a9:c6:63:f1:4d:
8f:ee:36:35:f5:72:e3:4d:b4:00:7b:02:4c:b4:74:7f:5b:56:
27:5b:7a:19:e3:a5:9c:4b:5f:96:7d:e6:e2:e8:8a:58:08:f9:
93:c9:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:32 2025 by rpki-client on console.sobornost.net