Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/c717200a-1ad3-3d75-a56e-886f9c66ae64.roa
File: c717200a-1ad3-3d75-a56e-886f9c66ae64.roa (raw, json)
Hash identifier: G332yLYw+v32wcJco1Hde+Agltu/jE859ztOY4/yuDQ=
Subject key identifier: A6:16:19:84:9D:61:D1:CE:D5:44:B8:85:D5:C4:BF:5B:07:B0:80:90
Certificate issuer: /CN=e9687864-e283-4f19-98f3-a437efb373e8
Certificate serial: 010D0C9F432858497F099C85187EE0B6FD403380
Authority key identifier: 0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/c717200a-1ad3-3d75-a56e-886f9c66ae64.roa
Signing time: Sat 12 Apr 2025 01:00:48 +0000
ROA not before: Sat 12 Apr 2025 01:00:48 +0000
ROA not after: Fri 11 Jul 2025 01:00:48 +0000
asID: 22772
IP address blocks: 204.17.32.0/19 maxlen: 24
209.104.0.0/19 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7f:09:9c:85:18:7e:e0:b6:fd:40:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9687864-e283-4f19-98f3-a437efb373e8
Validity
Not Before: Apr 12 01:00:48 2025 GMT
Not After : Jul 11 01:00:48 2025 GMT
Subject: CN=2fa8b995-af1e-49d9-9cfa-93a7bcc00258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:19:6e:aa:ff:91:3c:7a:82:5a:7c:1d:eb:
22:bd:5c:ad:e8:63:bd:19:44:cb:f2:ea:b7:0d:5c:
ce:18:52:09:5a:18:9d:11:9e:95:2a:87:96:4b:f3:
71:40:dd:91:31:28:b3:6d:05:69:13:e7:73:bc:e0:
8a:22:f3:ea:8e:e8:b5:ae:30:21:d3:78:ce:96:a6:
15:e2:00:64:13:84:23:2c:8a:98:2d:d2:9e:1f:d4:
90:19:76:62:fb:60:e6:0b:8f:40:bb:0d:bf:14:c0:
d9:2e:87:ab:ce:c8:ed:be:f6:0a:77:46:97:1f:b5:
bf:68:2e:b5:66:f9:70:79:d5:24:f8:ca:52:c9:03:
8f:e0:d3:a3:31:9d:88:db:4e:b2:5d:d7:e5:c9:3a:
7e:51:19:95:01:27:8b:ba:02:05:0e:58:41:51:53:
27:76:27:f8:c4:a4:f9:e6:f9:a4:96:14:da:0c:4d:
b3:43:c7:84:00:cb:a4:54:13:73:f2:16:24:66:c5:
56:87:e5:11:52:65:b1:f1:80:81:be:33:7e:91:9f:
5d:5b:ae:e8:28:e9:3c:7c:ea:83:7a:f4:8b:09:c1:
c1:46:9f:25:23:66:d6:04:2e:b4:0c:2d:0f:66:69:
7b:a6:b1:49:e4:71:ce:17:69:12:a0:c8:29:21:dd:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:19:84:9D:61:D1:CE:D5:44:B8:85:D5:C4:BF:5B:07:B0:80:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/c717200a-1ad3-3d75-a56e-886f9c66ae64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl
X509v3 Authority Key Identifier:
keyid:0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
sbgp-ipAddrBlock: critical
IPv4:
204.17.32.0/19
209.104.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:7d:9e:d3:37:ae:31:71:a6:12:03:cb:9e:4d:af:ff:22:b8:
86:46:07:5a:5b:8c:ca:6e:56:a3:7d:f1:d7:5a:d0:3f:7b:40:
a9:9a:df:6b:da:5b:54:47:1c:06:8e:7a:af:d9:19:81:6c:bb:
6e:3a:61:5e:87:72:fd:64:0c:b2:31:ba:e3:15:56:d4:60:00:
58:01:b0:c1:b9:c7:4d:88:cc:36:02:33:84:aa:fc:01:b8:0c:
cb:87:8e:7b:60:36:b0:1e:2f:3e:d9:dd:cd:6f:3e:2a:73:7d:
18:f9:3a:24:ec:26:19:96:5c:da:5e:30:a1:ca:66:ae:c0:9e:
c0:bd:0f:f6:1f:c0:90:4a:e8:00:32:2a:a2:cd:a0:8c:bc:fd:
cb:a3:71:57:de:7b:9f:48:bc:3c:f3:9d:89:b5:87:28:c5:39:
28:e8:9e:5d:f8:63:71:03:39:cd:f9:6b:7d:bb:b7:bb:31:31:
2a:43:11:a1:93:72:b8:e1:84:28:fa:9c:11:5e:82:2c:ed:af:
1e:27:b5:b2:13:78:10:92:54:4d:14:5d:3f:5c:a3:34:ff:af:
02:8d:58:a5:49:ef:3b:8d:ed:9e:4d:b2:6b:01:22:a8:94:71:
46:5c:8b:6b:12:90:fc:39:ef:4f:b6:0f:61:8c:8f:53:f6:86:
96:c4:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:07 2025 by rpki-client on console.sobornost.net