Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa
File: 89b5a997-3223-35c4-9454-eea1ce7afb45.roa (raw, json)
Hash identifier: mq5BLFsf5ZW10Y0TgIb66WmIhFRMgSjcmzsu4hunWhk=
Subject key identifier: C0:B2:FA:9F:F0:36:CA:3A:5A:80:44:F9:45:64:D6:43:75:0E:49:77
Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial: 010D0C9F43285848EC969045B8270D9F87A51A20
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 3807
IP address blocks: 207.196.200.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:90:45:b8:27:0d:9f:87:a5:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=a3b99bae-60b8-4fdb-bfd1-fee42c8c57bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:bc:8f:f5:cc:22:75:80:a8:5d:6c:70:23:
0c:f3:7c:0d:76:d6:29:c4:74:f5:fd:d5:24:f3:77:
e2:f9:31:df:f7:55:53:66:6e:21:7a:8e:7a:ce:ca:
a4:bc:37:75:32:47:18:31:7c:7a:48:2a:69:1e:6c:
16:69:50:ec:13:85:25:8e:ca:82:53:57:69:33:ae:
c5:10:a6:38:b7:10:b7:a4:4e:aa:ae:51:54:cd:94:
3f:71:fd:ca:e3:fa:6c:56:f9:b3:73:1f:bf:34:e0:
08:6e:ab:f6:34:5d:84:d0:e3:df:33:e9:68:dc:b6:
b9:76:c8:9b:db:42:da:5a:08:a4:f9:4e:6f:27:0c:
b3:ba:b5:89:17:fa:f0:86:84:d3:e6:01:c9:47:e6:
bb:2b:39:f9:a8:71:17:b0:07:ad:02:88:48:3d:0a:
40:2b:2a:c2:70:76:2d:bf:32:db:37:24:e8:6d:87:
2e:a7:85:da:6c:4a:09:7b:0e:1d:0e:58:23:e4:9d:
9f:18:a2:46:bd:79:b7:17:71:44:24:f5:74:cc:5e:
ae:2f:3b:12:12:5a:1a:29:43:e8:9f:34:0e:0e:76:
a8:13:37:d6:f9:eb:44:88:83:08:7d:a2:18:82:4c:
90:de:16:cc:8a:7c:ec:2d:d8:28:5f:15:a2:fb:ac:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B2:FA:9F:F0:36:CA:3A:5A:80:44:F9:45:64:D6:43:75:0E:49:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
X509v3 Authority Key Identifier:
keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
sbgp-ipAddrBlock: critical
IPv4:
207.196.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:da:4c:2a:1e:cd:9a:cb:31:ee:cf:db:74:28:f9:eb:6a:ad:
b4:b2:a2:4f:73:08:72:3e:c8:81:6d:f2:e8:c9:09:e4:3b:a8:
02:d6:3d:9b:c6:fb:8a:5d:1c:d8:ca:9b:fa:46:85:b0:09:95:
6a:b0:13:26:6a:ce:ca:81:58:57:25:6d:6c:a1:35:e6:e6:1c:
58:e7:ae:5a:d2:af:b4:da:69:73:57:f4:4f:c2:fc:c9:89:3d:
c5:ae:0e:00:66:73:dc:e3:65:e5:57:68:ca:e6:6a:aa:4e:29:
94:1d:12:c7:2d:45:85:94:6a:7c:65:ac:cf:41:fb:9c:73:b2:
2b:49:06:04:07:c3:39:12:f4:4a:ac:9c:bd:32:90:ff:fa:1f:
3b:df:19:08:f4:75:d6:86:4c:c7:80:2d:07:be:aa:14:38:aa:
a7:d5:53:86:f0:90:9d:56:4b:85:9b:37:4d:8b:d1:0f:72:19:
32:72:67:45:e4:33:db:84:e4:80:91:63:29:c9:b7:cb:55:53:
0b:07:bb:74:cb:c4:37:95:49:ff:f0:19:cd:fc:22:6c:ec:68:
2f:3e:67:c1:02:7f:07:38:43:fd:2f:0b:b3:66:1c:06:f3:ce:
b8:d0:c4:5f:a6:a1:4b:af:a3:bd:c7:2c:92:a6:b6:5a:d7:ce:
6b:c1:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net