Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa
File: f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa (raw, json)
Hash identifier: 3F9fNg8aaLzlK1qAVflSUzv+rIgIxzlYDF6fwZFHy7U=
Subject key identifier: E2:DA:B1:3E:0F:CF:C3:C7:96:AA:9A:CB:7D:33:06:95:35:20:C4:B8
Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial: 010D0C9F43285848EF61319C215DA1B95ED2F140
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 7782
IP address blocks: 107.152.112.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:31:9c:21:5d:a1:b9:5e:d2:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=348d32e6-9c56-4182-ab39-6f9cbb1f17cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:70:6e:c9:6c:86:1d:bc:17:a8:27:ea:c5:
8d:32:8d:3d:78:37:61:bc:b0:17:aa:cc:8c:f9:d0:
89:d0:17:95:f4:0b:1d:2f:73:e2:18:1f:c8:51:e8:
14:e3:ba:88:83:3d:03:d8:a3:a9:1b:1b:2c:88:42:
a5:06:ce:a6:31:7f:2e:19:6a:53:66:87:74:fd:26:
fb:cd:28:19:5a:a7:c5:9e:84:ca:d5:8d:c1:65:e0:
ee:60:cb:0a:a8:9a:cb:77:6e:b7:35:ef:f4:0f:c5:
84:02:88:01:18:8e:ec:d1:e0:2a:63:c7:64:05:69:
49:72:c5:4d:d7:59:15:27:52:16:29:2b:d2:18:42:
ad:17:cd:6e:fc:ea:41:f6:b0:58:d3:f4:89:1b:ec:
9e:9d:bd:f4:e9:51:11:88:fa:73:04:09:df:22:87:
a9:53:af:92:8a:83:2d:af:b0:0a:4e:67:2b:5c:00:
48:75:20:4b:12:41:c9:e2:3a:d4:ae:ff:51:c7:7e:
22:4f:84:d5:c2:8b:f1:f2:a8:59:6e:ac:a7:4d:a3:
b2:0a:97:8f:56:4e:4b:a3:39:43:9e:be:46:8b:7a:
4b:d6:5e:aa:c8:05:fb:39:5e:9f:30:47:ce:a5:76:
2f:e7:a6:16:0f:fd:28:1c:56:cc:ec:19:bc:9b:05:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:B1:3E:0F:CF:C3:C7:96:AA:9A:CB:7D:33:06:95:35:20:C4:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
X509v3 Authority Key Identifier:
keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
sbgp-ipAddrBlock: critical
IPv4:
107.152.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:2a:d2:d7:d7:ae:06:78:82:81:d3:a9:60:78:b8:bb:61:81:
f6:8f:8f:4f:3d:c5:8a:7e:5b:c9:81:cc:db:ce:6e:be:a7:e2:
b0:ed:8e:76:25:5e:55:4b:d4:2d:e4:d3:c2:e0:85:24:6f:eb:
eb:62:78:64:fa:50:d0:4c:12:c4:2b:af:70:ab:60:e5:ca:c0:
7f:d1:eb:7d:4b:4a:19:ed:d8:65:54:d7:54:25:1f:31:6c:fc:
5d:57:ee:cc:dd:a8:a3:ab:84:52:d6:9d:78:d4:ba:d4:8f:6d:
79:47:8c:01:9d:d5:00:f8:d1:0c:6c:18:be:ef:df:cb:2f:0d:
2c:d9:f4:07:5e:b5:f8:5a:47:52:1e:5f:d1:d2:13:8d:97:87:
2c:14:f1:8c:5f:5f:61:ca:51:0d:ef:1d:4a:43:94:63:78:2a:
12:a7:45:4f:92:5a:58:07:d5:77:67:e0:02:f3:06:1f:6d:0f:
18:e6:02:07:7f:1d:c8:e7:90:0a:3c:dc:58:49:28:ee:de:f8:
c2:22:b0:3f:47:88:81:a4:a4:90:c0:59:4d:4f:eb:ad:31:75:
8d:af:73:6c:44:59:7d:20:72:5f:40:4f:9e:a8:74:5f:97:d2:
f0:d3:93:43:33:9a:b7:de:d8:ba:9f:fd:34:de:a0:8c:d2:b6:
c8:90:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net