Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3827e8ef-545e-37f5-861b-ae19730b2106.roa
File: 3827e8ef-545e-37f5-861b-ae19730b2106.roa (raw, json)
Hash identifier: fyIQCFvnxuExPVnRqKU+Iyran+uCl1d/5u8V1nG1p/w=
Subject key identifier: 2A:58:9B:2F:A3:1A:B2:DB:73:0F:44:AF:5D:9C:A9:E4:AB:2C:1E:C9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858497F09A0578FE605F1C0116B40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3827e8ef-545e-37f5-861b-ae19730b2106.roa
Signing time: Sat 12 Apr 2025 01:00:48 +0000
ROA not before: Sat 12 Apr 2025 01:00:48 +0000
ROA not after: Fri 11 Jul 2025 01:00:48 +0000
asID: 7029
IP address blocks: 174.131.186.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7f:09:a0:57:8f:e6:05:f1:c0:11:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 12 01:00:48 2025 GMT
Not After : Jul 11 01:00:48 2025 GMT
Subject: CN=4cb33a2e-b1f7-4691-8728-3f2b7f9c08f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:fb:2c:e1:54:d7:d1:d7:fc:3b:da:49:1f:
c3:5b:91:d6:d0:8b:74:03:6f:31:40:28:8d:ae:a2:
df:69:dc:4a:ef:1a:9f:43:37:a3:fc:61:4d:1a:b5:
a2:95:7c:e0:56:c0:07:5c:81:97:82:27:29:01:67:
f9:98:3c:30:be:30:30:4e:9e:73:07:dd:12:0d:0f:
f1:4a:ea:9c:14:4b:9b:29:0b:0d:f4:5f:e5:9d:ef:
84:0c:4f:a0:9b:3c:0d:3b:41:43:33:76:bd:13:67:
db:2f:94:a5:f0:bb:5f:d7:0e:2f:d2:58:a6:26:1b:
69:6e:bb:4b:3d:88:e5:05:95:69:c0:df:8d:a9:6b:
0c:6a:74:29:da:11:6b:11:82:41:86:31:8a:82:ec:
f6:ea:4b:92:a3:a3:aa:98:93:a5:8a:20:0c:b8:55:
0f:cf:54:3b:ac:9a:e0:ce:3b:9f:9a:aa:73:03:f7:
57:79:51:12:0b:f6:2d:38:e1:18:60:c3:21:95:7c:
a3:d4:98:4d:3e:01:eb:a4:37:16:62:13:fc:43:5f:
4a:ac:d6:55:85:4e:30:66:c0:6a:e9:69:b2:ff:90:
2b:30:e1:83:9d:ec:b1:cd:ba:6b:36:59:7c:cf:8a:
b3:f7:1d:df:a2:ac:6d:20:35:c7:fb:06:f0:71:92:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:9B:2F:A3:1A:B2:DB:73:0F:44:AF:5D:9C:A9:E4:AB:2C:1E:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3827e8ef-545e-37f5-861b-ae19730b2106.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.131.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ac:9c:3b:3a:43:60:19:fd:0b:4f:e9:e3:5f:8f:db:0a:e3:
67:64:c7:d6:f0:58:ff:87:11:57:24:3e:5a:90:1e:c6:98:f6:
01:11:46:4d:fc:bc:86:03:3b:80:cb:c0:d7:77:37:58:7d:8d:
d2:67:1d:c4:e8:cd:03:cc:ab:13:97:77:01:cb:05:90:1b:49:
07:b5:1c:53:9a:26:24:bc:1a:48:61:5b:06:02:b3:56:ae:80:
bb:fb:48:4e:1e:8d:5f:db:e4:4a:1b:2c:1c:38:46:52:af:ff:
30:9b:94:ba:3f:0d:e6:81:7d:40:5c:8f:dc:a0:51:17:29:c1:
59:32:63:ad:9b:34:28:31:17:59:dc:a7:a5:93:73:0d:b9:2c:
c5:f3:fa:86:ad:81:f1:10:aa:65:cb:a8:7a:d0:a8:2c:94:b0:
e6:b2:3a:3e:61:34:c6:58:08:3e:f1:f0:a1:66:8d:f2:d5:f4:
0d:82:3f:4c:60:dd:4a:b9:2c:10:10:79:ff:3c:ba:a4:4f:8c:
e6:90:76:c9:69:33:ac:42:82:6e:45:00:4e:57:ac:07:fb:c3:
5a:b3:0f:56:bf:75:8e:f5:2d:a0:57:42:75:88:c4:44:17:da:
ef:5b:88:1e:24:a7:46:3b:e1:fc:ed:3c:5c:ce:a9:30:33:b6:
03:25:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:04 2025 by rpki-client on console.sobornost.net