Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa
File: 2b70cd1b-681d-3341-8277-ce21a1801227.roa (raw, json)
Hash identifier: NH++ISrEfrubqte1VWyRYsEnHh4HpeQWdYJ1m94sNvY=
Subject key identifier: 7A:CD:D7:95:F9:C0:E9:CE:C5:6E:3D:28:E8:FB:D2:F5:85:E8:3B:0C
Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial: 010D0C9F43285848ECD4AF2EBDBC66C4C84D8240
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa
Signing time: Tue 18 Feb 2025 16:06:11 +0000
ROA not before: Tue 18 Feb 2025 16:06:11 +0000
ROA not after: Mon 19 May 2025 15:06:11 +0000
asID: 2615
IP address blocks: 147.1.10.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:d4:af:2e:bd:bc:66:c4:c8:4d:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Validity
Not Before: Feb 18 16:06:11 2025 GMT
Not After : May 19 15:06:11 2025 GMT
Subject: CN=552d890c-d502-423e-9eb7-c90747fbd424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:a8:34:65:00:7b:9a:79:1b:7c:9f:c3:7a:
b8:b5:ca:6f:f5:70:fa:3b:3b:94:54:47:2b:04:3b:
f9:5c:c5:b1:76:91:a7:eb:fe:2c:47:8e:39:11:e8:
da:16:1a:92:11:ee:73:b2:a2:24:b8:3f:70:76:2c:
f3:94:68:9f:19:91:e1:48:df:74:0d:84:05:be:80:
ed:1d:5d:74:e9:3c:5c:79:bc:c8:05:bc:f4:57:45:
1f:3c:eb:8b:31:20:1b:f6:fa:6d:7b:4c:4b:30:23:
df:f6:5c:7e:0b:39:07:b5:66:fa:4d:a2:15:8c:07:
86:78:5c:d1:1b:bc:cd:3f:92:98:16:74:0f:19:a3:
97:f5:83:ec:1c:cd:7c:9c:25:cd:15:39:e5:84:8c:
40:97:f9:54:5b:2b:46:8d:82:eb:e2:c1:ba:a7:df:
41:dd:6c:07:00:a0:5a:d3:63:fc:82:f7:59:f1:b1:
0a:bb:c2:48:d8:a4:29:de:30:5b:82:ed:32:aa:e5:
6e:a1:62:95:53:7f:66:97:5b:d7:96:a2:c9:c3:e0:
2a:ad:8a:f1:95:f0:dd:ca:39:d9:a5:94:b8:ce:e6:
b9:0a:cd:d6:6f:65:b0:32:ec:2e:bb:aa:a1:29:c9:
07:2a:ef:6a:4e:94:f0:3b:71:75:e7:01:cc:97:03:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:D7:95:F9:C0:E9:CE:C5:6E:3D:28:E8:FB:D2:F5:85:E8:3B:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
X509v3 Authority Key Identifier:
keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
sbgp-ipAddrBlock: critical
IPv4:
147.1.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:96:4f:8a:1c:b6:14:25:e0:d5:f0:77:b7:a0:3e:84:79:10:
b1:56:57:7d:6b:21:dd:6c:23:49:ee:2e:c5:4e:78:be:d1:c1:
7c:b9:14:59:98:89:75:0f:da:00:60:31:3d:e6:15:dc:e7:8e:
a4:59:f5:18:6d:5a:b2:9d:02:55:9f:2c:41:a2:1b:1b:c1:eb:
25:f8:20:bc:c6:38:c7:c2:d3:7d:f0:e6:a5:c0:fc:1b:81:ff:
5a:80:d0:7f:e0:1d:7a:11:74:c7:1e:80:e0:83:d0:d5:d5:13:
35:dd:d1:79:20:b9:e4:08:6c:0f:02:e7:d4:f1:54:41:83:5d:
9d:72:95:cf:cb:76:aa:53:8e:a5:20:78:1a:6f:68:e6:0f:91:
1b:83:08:9b:fc:c5:54:98:ab:4f:f6:30:d8:b8:1e:ed:02:99:
32:f9:23:fb:51:11:78:07:a6:d8:fb:69:bf:91:94:0f:84:8b:
1c:76:e9:6b:76:79:a0:83:57:7b:45:d1:08:86:aa:21:0e:4e:
da:87:19:a7:23:00:60:c7:b8:77:dc:f1:41:8d:24:59:fe:b2:
66:0d:94:9b:f9:8a:e2:ea:e5:24:6e:e7:84:c4:bb:da:73:42:
ba:78:bc:e8:68:f8:c8:f0:07:64:37:35:60:50:54:dc:34:1e:
d4:a1:e6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:06 2025 by rpki-client on console.sobornost.net