Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/430e50a7-91f5-304d-9b3f-69a68efcd530.roa
File: 430e50a7-91f5-304d-9b3f-69a68efcd530.roa (raw, json)
Hash identifier: I58dfBWBXVNl0qa1z9gmCroYh4663GvUSlzqvigD7wg=
Subject key identifier: 5B:11:B3:92:FB:DF:F3:94:CB:57:57:C0:99:9D:00:BB:47:9D:24:7F
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285849447F0BB8E77EFDA20859B440
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/430e50a7-91f5-304d-9b3f-69a68efcd530.roa
Signing time: Sat 22 Mar 2025 01:44:46 +0000
ROA not before: Sat 22 Mar 2025 01:44:46 +0000
ROA not after: Fri 20 Jun 2025 01:44:46 +0000
asID: 197730
IP address blocks: 107.151.224.0/21 maxlen: 21
107.151.232.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:7f:0b:b8:e7:7e:fd:a2:08:59:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Mar 22 01:44:46 2025 GMT
Not After : Jun 20 01:44:46 2025 GMT
Subject: CN=cbd1b7dc-22c7-43d6-b4c8-6d3e68d69c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:26:41:a3:fe:b1:6b:6d:5d:36:a3:73:5b:2c:
49:d5:08:e6:73:a2:9f:c6:7b:02:7c:d1:dd:56:33:
0d:1e:19:76:6e:52:e2:ed:89:ec:5f:69:75:20:0b:
2f:6a:ea:61:7f:61:87:58:0b:42:cd:4d:f5:44:5f:
f0:c4:a7:21:8a:fb:50:b4:4b:d3:42:a2:d1:1b:67:
c0:a7:7b:90:9d:49:ad:c7:5d:9e:0f:3a:b2:bf:d1:
e6:bc:66:45:18:42:0f:0b:9d:03:55:9c:85:26:95:
1a:d8:d2:60:ce:17:d4:98:81:a2:72:fa:b8:39:27:
e3:10:69:65:22:6a:c8:88:5b:ec:da:2a:82:b9:14:
f4:5c:59:42:4d:84:58:ed:10:61:06:51:f4:a0:25:
ed:2a:7f:ab:12:dd:48:45:75:d0:a1:18:9e:09:ec:
27:72:47:12:06:80:c5:c7:8f:e4:2d:98:34:eb:e7:
5e:56:4a:fa:b3:f6:82:44:c8:ae:6d:04:50:bb:a7:
e7:ca:1c:ae:ad:57:db:3a:52:21:d6:07:eb:a7:20:
dd:f3:ff:b2:60:78:73:e2:09:9d:14:bb:a2:4c:dd:
e6:be:42:56:37:96:a0:f7:e5:f8:6e:3f:b8:0d:cf:
51:22:8f:6f:52:71:e2:ff:15:ee:48:b8:8b:62:a8:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:11:B3:92:FB:DF:F3:94:CB:57:57:C0:99:9D:00:BB:47:9D:24:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/430e50a7-91f5-304d-9b3f-69a68efcd530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.224.0-107.151.233.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a3:f6:4f:4e:09:3d:ad:00:f9:49:17:a2:81:50:c4:3a:5e:
fe:89:6d:de:6b:56:46:e1:0e:9f:e5:be:25:9b:90:34:6a:e6:
5e:5e:1f:f8:79:ae:36:47:94:4a:58:b9:8b:59:b5:a9:90:8a:
79:2f:7f:46:12:46:b6:df:b4:38:87:9c:58:b7:ef:c2:09:bc:
4f:d2:a9:6f:72:e4:96:5e:a4:81:24:6a:ae:1a:6d:49:63:18:
3e:8d:75:6c:ed:56:aa:98:3b:61:e3:23:d1:53:66:e1:78:c7:
47:98:07:d4:f2:90:7e:d5:4b:66:d2:36:76:d1:e7:9c:9a:65:
95:ea:40:00:c8:03:a8:a3:c0:17:33:46:41:6d:f2:ea:c0:cd:
b8:89:41:a8:b6:d8:a2:da:41:49:09:13:44:c8:42:05:33:45:
53:d8:b7:8c:6e:e7:31:c6:6d:7f:67:2a:48:62:14:7d:43:99:
48:8a:57:27:e1:2b:7c:2b:23:58:52:f5:a0:de:4f:8c:7a:d8:
e0:c9:b1:66:7b:d2:5f:37:d1:80:56:be:e2:26:63:cd:1c:dd:
bd:22:fb:db:79:8f:4d:cb:46:a4:b4:22:ae:b4:74:57:68:b5:
d3:44:1c:20:5a:24:84:d2:bf:4b:7e:ae:df:30:e7:db:44:d7:
f6:22:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net