Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa
File: 46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa (raw, json)
Hash identifier: Ens0OMpnBQShPMdJM8kEiIN8PL6/dtEUoGNvzLSSe0M=
Subject key identifier: 0E:DA:DF:CA:E5:76:44:12:C6:1B:69:21:04:8D:62:D6:C1:00:60:E2
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858497279B4D773A7E0544D01D600
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 17984
IP address blocks: 63.222.152.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:b4:d7:73:a7:e0:54:4d:01:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=aca11b34-3c36-4011-b814-f6482afc502f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:3d:c5:43:90:d2:1d:73:4d:91:53:61:58:
e2:1a:58:f2:0b:ae:da:f5:01:45:83:97:68:00:23:
15:25:a9:8c:e6:27:65:32:3c:c8:ee:72:06:c1:89:
8f:de:b4:90:c0:99:2f:b3:43:62:d6:c6:dd:ae:47:
b9:43:a0:94:0b:72:e1:1e:5f:54:6b:27:b7:d8:92:
39:98:7a:37:9d:b1:2f:25:8e:0c:bf:53:a4:47:6d:
1d:7d:7b:ec:7b:0a:d1:1a:0e:c5:fa:cc:b6:62:98:
78:3a:5e:92:fe:f7:3c:25:6a:6b:88:10:49:a3:1d:
3d:5a:41:bf:98:fa:0c:d4:61:5b:09:9d:e0:22:3a:
b0:f2:63:44:ee:8f:ac:1a:2e:f6:2e:ec:fa:1b:25:
cb:a3:89:68:c0:84:98:87:ab:d5:95:81:d5:a6:bb:
da:b4:83:af:a1:47:09:bd:aa:65:30:3e:f8:36:f8:
5a:4d:17:cd:4e:64:35:47:e4:35:e6:0b:e5:c2:2b:
92:d4:c3:7b:3d:37:ab:62:64:e9:d6:b3:ee:a5:2b:
0b:d0:14:eb:d2:da:9e:71:6d:47:81:6b:d8:3f:96:
c0:57:d0:74:ec:6e:b6:aa:f4:fc:0d:e1:6e:e4:23:
bb:92:ad:dd:d2:15:2b:0d:df:57:84:09:bf:9a:d6:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:DF:CA:E5:76:44:12:C6:1B:69:21:04:8D:62:D6:C1:00:60:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
63.222.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:a8:cb:92:19:8f:21:29:5b:17:2c:fb:1e:fd:4f:cc:70:0d:
73:4e:13:b9:d4:c8:7b:10:ad:12:76:ba:8e:e5:f0:44:7c:70:
39:d8:86:49:db:3d:f8:09:f0:d2:3c:f5:af:ce:0c:15:6b:3d:
2d:b1:88:cd:df:f8:69:5f:70:07:8f:2b:26:f9:4a:ee:24:73:
97:83:0c:43:db:9e:f5:21:9e:58:33:91:35:85:18:bb:1a:46:
d2:cb:36:2a:33:25:9e:87:77:0f:ed:39:a0:c0:4b:82:71:52:
39:87:e6:89:92:28:7d:40:2b:0c:cd:3b:2e:a3:4c:43:47:d5:
72:b4:33:c7:19:1e:4c:26:e4:b4:65:a2:c5:25:e6:72:c2:fa:
6f:5a:c2:8a:49:9a:7f:c3:84:99:94:d8:70:d5:39:d8:c2:4c:
98:2c:90:49:8c:19:24:0f:58:11:a2:03:b6:dd:9d:dc:15:09:
fb:22:2a:a5:51:83:b6:91:ac:47:76:d3:f6:cc:9d:f1:15:0f:
22:01:01:ba:d1:48:fe:fe:74:39:c6:af:53:40:84:77:88:a2:
b6:bb:eb:39:a5:c6:aa:f7:ac:52:77:6b:16:a2:5c:b4:45:1e:
65:23:e8:f8:53:cf:dd:6e:e9:99:f3:63:5e:cc:e9:60:ea:84:
f0:a8:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net