Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/74d16441-df67-378e-8d0a-6433ed6ebe16.roa
File: 74d16441-df67-378e-8d0a-6433ed6ebe16.roa (raw, json)
Hash identifier: jrCBaqvQ9Eiemwo+4X3sX/DTZidgC5OSu0KACiEAOhI=
Subject key identifier: CF:01:08:7B:55:05:1E:4C:92:E7:FA:EA:C2:A3:1D:DE:53:79:85:D7
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F432858496B7ED44DF06D2E3FBAAFB840
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/74d16441-df67-378e-8d0a-6433ed6ebe16.roa
Signing time: Sat 05 Apr 2025 01:00:47 +0000
ROA not before: Sat 05 Apr 2025 01:00:47 +0000
ROA not after: Fri 04 Jul 2025 01:00:47 +0000
asID: 4764
IP address blocks: 207.174.107.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6b:7e:d4:4d:f0:6d:2e:3f:ba:af:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Apr 5 01:00:47 2025 GMT
Not After : Jul 4 01:00:47 2025 GMT
Subject: CN=1852877c-3181-46a4-af77-819246d4c84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:8b:d7:0a:e7:24:ed:b7:d5:66:f0:1b:a7:
b3:c2:42:0a:4b:f9:81:fd:7d:76:e0:f2:9e:04:b0:
36:2e:4d:9b:99:c4:bc:c9:2f:ee:74:0a:c9:c7:65:
58:fa:51:cf:64:b5:8e:88:c7:07:02:f8:ea:83:e7:
fa:0a:c1:f0:8a:d9:5d:c5:6d:86:f8:a6:ce:f4:fb:
38:30:d3:3f:02:51:2c:ba:54:be:77:dd:c9:09:f6:
b7:09:c6:32:fe:48:48:71:67:9a:d2:68:9c:70:0d:
3d:2d:61:7d:b7:14:55:d1:26:78:ff:4a:b7:36:3c:
7b:0d:a5:c6:4d:ad:f8:f3:28:23:52:eb:da:a5:62:
61:a5:51:40:10:33:d1:e1:a1:42:a5:51:c4:ea:6a:
76:45:10:4c:6e:83:c3:72:e2:61:74:aa:52:72:6b:
37:de:b4:34:44:fc:83:3f:a1:9d:44:a3:92:cf:3f:
c1:34:3e:19:d6:a2:b4:c0:7c:bd:ab:e6:0e:06:3e:
5c:94:5f:57:0d:5b:d4:dd:5c:d6:f2:66:11:85:f8:
0a:4b:f1:63:49:0a:b5:8e:44:3e:54:bb:a0:b1:d2:
fd:82:28:ea:47:c0:a5:76:73:0b:fb:11:66:b4:8c:
6d:6f:16:74:0b:c9:c3:41:a9:37:69:fa:ae:70:93:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:01:08:7B:55:05:1E:4C:92:E7:FA:EA:C2:A3:1D:DE:53:79:85:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/74d16441-df67-378e-8d0a-6433ed6ebe16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
207.174.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:b8:d7:23:4c:7e:7f:e7:01:6c:7a:f1:8c:12:cd:96:2d:aa:
d0:62:fe:fc:0d:7b:e3:19:0c:45:66:4d:ab:3a:be:0b:dd:a8:
c2:ba:7c:78:81:3f:dd:2b:06:4c:86:cd:53:9e:20:f9:a4:1c:
8d:06:98:78:52:3c:0f:cb:43:5a:81:54:75:25:54:e9:17:31:
7c:7c:d6:c0:3c:db:3b:ca:29:01:5f:3c:5f:49:f1:09:2d:2a:
f7:8c:6d:58:47:13:34:6f:0b:b3:9e:57:e2:08:24:c4:ae:6c:
ce:90:47:1c:4f:7c:3f:f8:69:a7:c3:24:18:43:2c:b9:87:c8:
1e:01:ed:81:a8:71:1e:bf:cd:89:43:75:5b:72:68:80:11:dd:
cf:22:70:53:4a:bb:d8:b4:24:72:c4:a8:77:eb:79:4a:04:fe:
67:9c:8f:b7:3b:f0:ec:8b:a2:d9:4d:49:bc:1b:e3:46:a0:94:
7a:c9:38:23:08:19:47:bb:8c:c9:f0:f5:28:ac:46:aa:f8:a9:
3c:45:fb:eb:a2:5e:3d:2d:bb:d8:af:21:e2:d6:84:58:72:3b:
05:5a:4e:a0:09:f4:af:06:21:c0:a5:a5:ba:18:cf:13:56:61:
0f:94:57:42:ed:a3:15:a1:26:0d:8b:5a:54:87:80:f0:14:0b:
19:bf:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:46 2025 by rpki-client on console.sobornost.net