Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
File: 2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa (raw, json)
Hash identifier: bbagXMGpGLg43ow/LoyL2qrJjc7toEG2D3biNVGkgis=
Subject key identifier: 10:8C:CD:81:90:67:58:7B:17:CB:31:10:5F:B6:C6:2A:42:20:DA:5F
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69DFFC6A93C4D6DD7AC80
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 8560
IP address blocks: 74.208.0.0/16 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9d:ff:c6:a9:3c:4d:6d:d7:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d4035a82-1db7-4a98-9044-754921534c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:be:19:3f:2a:39:da:80:df:ed:57:53:08:
92:6d:89:98:05:31:76:c0:f7:c8:56:b5:5b:e8:b3:
d0:de:d9:57:04:82:e6:12:cf:67:bd:3a:26:25:f4:
11:e5:c8:d0:e9:8d:5f:8d:ed:bf:a9:43:ee:a0:7f:
ad:ca:9c:e1:70:3e:9f:84:0e:88:ae:35:cd:f8:39:
82:56:8f:8e:d6:88:85:c8:1a:08:63:b9:db:fc:64:
3e:d9:fc:c6:ee:5f:57:b4:14:e4:00:79:ab:e1:7d:
72:b2:2c:0b:23:30:86:05:da:ae:c1:f6:2d:c9:e3:
ca:63:9d:2f:9d:ff:12:66:00:28:d2:d4:2b:2e:9b:
14:09:b2:bf:75:30:72:27:f3:df:e6:94:e8:cf:fd:
a0:cf:11:38:f7:82:ca:ae:3b:b8:04:5c:e0:2e:b9:
e1:bd:44:87:22:bb:59:a6:9d:ff:c4:ed:17:44:30:
be:88:96:ee:12:e1:db:cb:23:82:45:d5:a6:bf:c8:
f6:42:d8:5c:17:49:02:3d:a2:2e:59:f4:0a:16:ae:
72:a7:44:bd:9c:b7:7b:92:9b:9c:5e:66:c0:be:5a:
21:84:53:27:95:80:de:7e:3d:2d:8e:f6:e0:15:19:
da:4c:f5:9f:0e:7d:45:8d:72:f5:b0:e3:50:f0:04:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:CD:81:90:67:58:7B:17:CB:31:10:5F:B6:C6:2A:42:20:DA:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
74.208.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:4f:11:00:46:c7:4a:cd:5d:89:50:fc:48:3b:23:e1:4e:86:
86:7f:7f:70:50:d6:3e:12:b2:76:09:4b:36:36:a9:53:c3:85:
fd:e8:00:ce:c7:f0:78:f2:a9:d7:74:83:7f:6a:b3:03:d6:72:
27:4d:8d:9e:26:82:c5:65:c5:34:8c:8d:af:3c:dd:af:be:74:
16:f5:e8:74:14:e2:91:e6:50:d7:6c:97:39:e3:d6:33:d2:44:
e0:6b:05:9b:a2:e9:05:ee:f5:41:6d:d4:ed:2c:7c:13:09:87:
fc:e1:ea:49:aa:21:11:91:40:c8:4d:cc:d7:a9:36:ab:07:cf:
fe:cb:98:0b:bd:a7:69:07:8c:cd:62:59:5d:50:9c:7f:9e:b6:
b9:3a:b1:50:f0:aa:7b:1a:93:f0:e3:a2:68:c3:3c:82:a6:fe:
93:14:05:cd:6e:26:0a:fb:98:57:ec:e1:af:ab:84:ae:a8:88:
83:ee:1f:42:cb:05:16:8f:53:a9:d9:70:0c:a1:53:41:b6:e1:
43:0d:df:21:f4:56:39:f0:d0:12:31:bb:89:7a:9a:4e:bf:5b:
ce:ff:36:14:d4:33:98:10:95:78:e7:42:e6:8a:63:15:ca:cf:
06:88:ad:54:bb:f9:18:68:ab:fd:51:6f:7c:18:0c:d6:4d:73:
64:2d:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:26 2025 by rpki-client on console.sobornost.net