Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa
File: 1764c104-a616-3deb-af04-69c6cae09b7e.roa (raw, json)
Hash identifier: aRe0qISnwlWGzWPgyc88zNOvhxeGYhLvICNYA+61B68=
Subject key identifier: 34:D8:58:17:8C:B4:2E:D1:B6:40:82:B0:16:D9:F1:D2:0A:15:DC:20
Certificate issuer: /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial: 010D0C9F4328584975445F014FC3D40F2F3C3040
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 31898
IP address blocks: 153.84.80.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:5f:01:4f:c3:d4:0f:2f:3c:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=8ac64f9c-2d8e-4ce9-b352-7b6e7143a880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:c9:14:16:01:fc:b6:5a:75:43:20:11:ab:
ab:0d:a1:50:b9:bb:ab:3f:27:cf:36:b6:6f:76:18:
34:26:d8:49:98:c9:6c:50:3e:4c:9d:b7:49:9f:1f:
ca:9e:3c:71:54:ec:fe:70:34:23:89:40:fc:40:7a:
7d:90:6b:00:89:d4:78:7b:da:12:16:b9:77:4f:8e:
93:4c:82:0c:be:8d:95:10:1b:79:36:db:42:71:dd:
c9:e8:90:a1:1b:a7:c4:46:ac:43:5d:ef:29:1d:fb:
fc:a1:5e:e2:68:e3:34:1b:5d:10:f2:ca:02:42:e3:
d1:8d:bb:90:02:ca:20:25:72:1b:2d:19:00:e5:dd:
0f:ed:8a:f7:d1:d5:58:73:a3:3f:51:c6:75:78:f0:
5b:99:3f:f6:52:f2:f2:ab:d5:5c:14:c6:e7:d8:12:
06:84:f4:fc:d4:ea:68:69:09:27:22:d3:38:d4:c0:
f0:c1:16:43:25:00:17:60:25:34:af:17:27:2a:9d:
32:89:ad:99:4c:0d:c0:35:6e:58:9f:52:2a:f3:32:
3a:30:ba:50:22:ea:97:cd:94:3a:44:5f:b9:24:e7:
3b:e5:e8:aa:1c:37:b9:b3:da:66:39:7c:ee:16:3a:
89:50:33:7a:80:dd:28:47:05:3c:2b:b7:7d:16:5e:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D8:58:17:8C:B4:2E:D1:B6:40:82:B0:16:D9:F1:D2:0A:15:DC:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
X509v3 Authority Key Identifier:
keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
sbgp-ipAddrBlock: critical
IPv4:
153.84.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:ad:e9:f6:96:06:30:98:6f:a6:1f:30:72:aa:74:21:5e:48:
13:16:5b:dc:12:9d:a2:21:67:4d:5f:86:79:42:99:3d:6f:6b:
48:81:a0:1a:0f:7e:c2:83:25:30:93:f2:9c:bf:f9:a3:4f:6e:
9e:9d:af:00:ea:18:f2:38:1f:00:00:88:25:cd:bc:7a:9c:7f:
4c:04:dd:bd:00:8b:12:4e:93:7e:ff:6e:c2:f6:90:11:3d:4b:
9f:4a:ad:ab:8f:75:ed:a4:05:07:01:6c:7f:97:aa:1f:1b:3b:
a1:41:27:ba:18:62:6d:c9:f8:98:d9:5b:1f:8b:d9:14:f4:69:
45:09:45:b5:03:52:aa:c2:42:a5:e3:d0:9f:6a:12:3a:ba:31:
48:47:5b:f9:cc:9b:6a:b3:e3:97:a6:6d:0c:f4:44:44:6a:90:
e3:f3:48:a0:8f:f7:af:37:70:cc:a3:ca:54:b6:71:82:f9:e1:
cb:13:33:c4:81:5d:24:80:88:69:02:37:ed:63:0c:70:e6:64:
31:cd:bc:04:e2:6b:0e:a9:df:42:05:1f:b2:74:18:dd:cb:f1:
db:bf:b9:45:b5:cc:39:06:0a:a9:38:3f:51:03:d5:ca:34:3d:
63:b7:d7:8d:da:fe:30:dd:46:51:8c:ff:b5:0a:01:dc:09:e3:
fe:c6:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:32 2025 by rpki-client on console.sobornost.net