Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
File: bdf6a7d1-a324-35af-8414-d2ae101242c2.roa (raw, json)
Hash identifier: W/ONhlZvPMsqDEMHN0Eo+3zUCHFGsBLlpPbH+nGZgiY=
Subject key identifier: F0:6D:DF:2A:98:6A:81:E7:57:26:1B:24:04:10:08:6F:5C:D5:7B:BD
Certificate issuer: /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial: 010D0C9F43285848E59BCC90F55326F2D0130180
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 19528
IP address blocks: 74.209.170.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:cc:90:f5:53:26:f2:d0:13:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=2ac98acf-6e6d-4304-a19f-c0fbf62f4544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:ac:62:ad:fd:1e:db:58:e7:3b:e8:0a:e1:
07:0b:c3:6f:22:e9:3b:75:d1:00:10:ef:1c:c8:22:
de:4d:43:da:fe:89:bb:6d:a2:c3:1f:63:08:1c:e2:
54:1f:ee:ab:2f:ca:cb:0b:5e:ab:e9:e9:38:ee:d4:
50:d4:f4:02:0c:d5:17:71:26:88:73:3a:2c:4a:58:
e9:65:d2:ad:b1:30:9a:34:25:13:d5:db:24:2f:4d:
54:b1:69:7d:bf:2d:e5:4c:52:68:14:5e:23:4b:6c:
b4:37:b6:8f:50:11:be:87:fe:74:eb:da:b8:54:11:
a2:72:3c:c8:a0:a2:51:8c:2b:72:2d:83:0b:4b:3d:
45:16:3a:58:ba:7d:48:0b:13:38:4b:5c:00:14:56:
d9:f7:3e:ff:87:54:5e:7f:0f:41:5a:42:9b:85:97:
2f:2b:4d:41:1a:60:95:bc:dc:16:6c:08:64:da:08:
81:65:f9:23:34:41:d8:69:06:4d:02:8a:67:17:b7:
81:20:38:c1:a3:3d:bb:f3:39:c0:c5:6a:eb:64:eb:
27:c6:03:88:0d:45:c5:c6:b6:69:b3:42:25:2f:46:
62:b1:37:29:5a:82:12:3a:20:9b:a1:0a:c2:a6:b4:
97:98:41:e1:93:22:25:bf:9a:d8:a2:33:0f:40:3d:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6D:DF:2A:98:6A:81:E7:57:26:1B:24:04:10:08:6F:5C:D5:7B:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
X509v3 Authority Key Identifier:
keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.209.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:96:30:3b:e8:29:b2:93:ad:9b:b1:e6:13:df:88:0d:64:98:
39:0d:ae:50:52:0e:4c:f0:25:18:f0:9c:58:a6:ee:b1:c2:30:
04:86:bf:66:65:60:02:85:1c:b1:c7:45:41:8d:6a:fb:42:20:
db:74:9e:1e:91:6f:65:fb:c6:88:e1:f7:7a:3b:3c:b3:ad:ef:
f2:ac:51:a4:71:03:e6:a2:91:4e:d1:3f:c1:0f:34:b7:18:9e:
1b:0f:33:26:f0:a0:73:37:03:ab:bf:27:ef:e7:2d:03:f1:08:
ee:48:c0:68:33:7b:73:aa:80:94:d1:2c:80:3d:d3:18:02:05:
9a:11:fa:51:05:04:60:42:40:37:3d:5e:59:16:77:d8:41:e3:
fd:ed:0f:29:ef:5a:d3:02:eb:69:05:e4:62:99:c3:df:e9:97:
9f:1c:07:4e:2e:d6:f8:be:4b:59:d8:a5:d3:e7:3f:34:ba:ac:
a4:aa:70:a0:3a:e4:77:17:a9:2e:4a:d4:30:b9:7f:b6:0b:1e:
34:3a:0c:59:97:6f:d6:88:81:32:11:c9:eb:a8:ba:25:57:0c:
81:05:56:60:dc:dc:4e:fc:c7:31:72:cd:4b:4f:ef:9a:fe:b2:
e9:c5:64:3d:f8:66:dd:6f:df:6d:c0:ac:43:6b:9f:e0:e5:86:
36:74:11:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:30 2025 by rpki-client on console.sobornost.net