Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/902d88e3-e9c9-3a3a-bd40-f404e5c50d2b.roa
File: 902d88e3-e9c9-3a3a-bd40-f404e5c50d2b.roa (raw, json)
Hash identifier: uENWylzj5DMwJbZEXzy16I4FPpr37Jvpd35LnXinoBk=
Subject key identifier: C5:7C:81:6C:0B:5E:71:65:D9:39:AE:85:D0:D1:EB:4A:4B:A5:9A:10
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858478B511148EC56CDFEB1C4EB80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/902d88e3-e9c9-3a3a-bd40-f404e5c50d2b.roa
Signing time: Tue 15 Oct 2024 01:00:35 +0000
ROA not before: Tue 15 Oct 2024 01:00:35 +0000
ROA not after: Mon 13 Jan 2025 02:00:35 +0000
asID: 13576
IP address blocks: 66.115.203.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8b:51:11:48:ec:56:cd:fe:b1:c4:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Oct 15 01:00:35 2024 GMT
Not After : Jan 13 02:00:35 2025 GMT
Subject: CN=a48b398c-7016-44fc-8055-7e18314df986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:19:87:f4:77:cf:76:ce:e6:9b:d5:2e:6d:
6e:90:ac:43:00:4f:e9:9d:9e:fc:f7:28:64:51:5b:
ec:6d:5d:be:4c:e1:7c:c1:af:58:d3:ce:dc:32:9e:
fe:8b:4f:08:31:75:f4:85:17:31:ad:5d:f1:ac:7b:
fe:c5:f5:06:0c:12:28:6d:5f:cc:c1:68:26:bf:7e:
b8:fd:25:dc:1e:03:ab:55:6d:e8:a7:3f:c9:02:e5:
d9:bd:4b:93:9a:23:5b:e3:15:ff:ec:f3:06:c8:40:
e7:8e:5e:8d:40:4a:73:ce:04:50:a7:a5:6f:a5:6e:
4c:78:34:e6:30:91:ce:d8:e2:e3:c1:47:f3:e0:39:
a9:7f:48:c8:d2:61:00:43:97:68:f4:a0:de:69:41:
9d:2b:05:ab:7b:aa:07:3f:c8:a4:91:fe:3a:1c:fe:
78:07:04:4b:a6:cc:8b:22:b3:bc:c1:21:3d:9c:d3:
bb:57:da:eb:b6:c1:55:42:4a:e2:67:96:a3:42:8a:
bb:c6:a8:27:bf:2a:2b:e2:cc:69:fc:08:6d:86:a7:
31:43:26:f0:8e:64:88:36:64:18:16:a2:4e:dd:2e:
ba:08:e2:ab:1b:90:3e:d1:b4:df:ec:98:29:54:b8:
27:41:1e:a2:5d:f8:62:88:bf:92:d8:dc:66:00:36:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7C:81:6C:0B:5E:71:65:D9:39:AE:85:D0:D1:EB:4A:4B:A5:9A:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/902d88e3-e9c9-3a3a-bd40-f404e5c50d2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:58:35:3d:02:28:c5:69:1c:43:86:98:94:83:c9:6f:95:ea:
36:b6:75:04:58:f4:2b:98:9a:e6:a7:72:10:41:37:8e:3a:dd:
3f:54:f2:92:a8:08:b8:bf:86:eb:b1:a0:38:d5:ae:33:f7:55:
cb:01:3b:5c:9c:22:f1:16:11:c7:80:ac:94:07:18:1d:35:df:
bf:52:c5:52:1a:5e:08:4b:38:b6:dd:2a:dd:26:aa:3f:29:c6:
23:35:06:5e:4d:98:8e:31:bc:05:dc:16:da:fc:06:19:e5:9d:
31:c5:64:94:06:e5:89:c4:27:93:03:60:08:8c:57:6f:20:4d:
2b:43:d0:5b:48:4c:c1:18:79:9b:06:13:e3:92:2c:67:a3:cd:
e9:50:05:5f:a4:a6:a3:6a:cd:db:f9:3e:ea:98:af:2a:28:22:
5f:1a:0f:ab:48:0a:71:f4:e7:4b:b3:1c:1d:51:d2:60:ee:6e:
4d:03:7e:48:c7:3a:d6:b7:25:19:22:18:43:59:70:b9:6e:3b:
73:fb:28:2a:e1:f5:02:44:bb:62:a1:f1:0f:80:22:18:ed:b2:
88:60:0d:7e:2a:61:c1:fb:8d:ba:56:d1:df:4d:88:d3:13:29:
54:ce:c6:ba:32:8a:d3:d5:0e:9d:df:17:3b:58:f4:17:9a:50:
22:d3:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 03:25:48 2024 by rpki-client on console.sobornost.net