Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a14059eb-bc29-309e-9bd9-1ec4e21bd3c8.roa
File: a14059eb-bc29-309e-9bd9-1ec4e21bd3c8.roa (raw, json)
Hash identifier: DkQY/saUqVf69zuYuaUcK3g8AOrKGwhFnPx8DIQq7ww=
Subject key identifier: 46:C0:37:3E:98:D7:CA:A7:EA:0B:D1:69:A7:51:BA:06:26:F4:02:09
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858495C246A9A7B5FBCA0A71F9540
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a14059eb-bc29-309e-9bd9-1ec4e21bd3c8.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 397227
IP address blocks: 204.74.74.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:6a:9a:7b:5f:bc:a0:a7:1f:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=25cf4d58-2a05-4c74-b2ef-64148a2ea874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:54:a8:a3:1f:11:6e:eb:5b:7c:49:43:74:
b5:1f:7c:11:7b:0e:64:5a:28:59:c2:51:cc:fe:8e:
07:5c:04:6d:94:6d:77:44:a9:1e:00:e3:47:3f:16:
63:6e:1c:a3:27:76:f1:8d:ea:e2:d8:2e:36:69:8e:
9a:e9:c6:ff:eb:c5:c3:7e:2a:25:01:15:a2:4c:0f:
ec:b8:ac:62:b4:8e:a8:2f:19:d6:94:4c:78:b7:27:
03:11:8b:76:66:f5:1a:c2:f2:ec:13:46:6a:6d:74:
67:4b:b8:17:94:f3:ea:c4:14:7d:bd:0b:fa:87:55:
4a:43:9f:fa:95:ae:97:2a:d9:75:93:c9:e8:35:e8:
b7:8b:75:44:b6:6b:25:ba:0f:6b:68:ce:5b:80:5b:
0e:58:4e:47:3f:5e:52:15:d3:72:15:0f:99:dd:aa:
b6:9f:d2:55:2b:f9:4e:15:b8:bf:e4:3e:e8:d9:8e:
b4:ff:91:81:7c:35:0e:b1:ae:53:23:dd:8b:a2:ae:
82:f2:66:bb:15:4b:67:3e:2e:54:4a:a0:ab:6a:54:
d4:96:6e:a9:05:77:d8:a0:6c:10:a3:2a:29:d4:94:
87:91:78:8a:b3:65:49:09:e1:70:37:82:75:c3:54:
11:9e:cc:a6:b7:fc:b6:e8:2b:4c:69:54:10:1e:50:
2d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C0:37:3E:98:D7:CA:A7:EA:0B:D1:69:A7:51:BA:06:26:F4:02:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a14059eb-bc29-309e-9bd9-1ec4e21bd3c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:16:75:57:94:7e:57:71:f5:f7:f9:f5:6c:86:3c:37:6c:42:
ab:5a:51:fe:15:bc:ad:82:a7:b2:02:fc:43:80:f0:4c:48:6a:
14:d8:71:a6:b7:aa:63:16:47:60:8f:ca:29:79:fb:63:7c:d4:
34:4a:42:26:2d:de:29:70:31:c5:42:e5:8b:02:a1:d7:5f:0f:
92:bc:9d:4a:b4:a4:95:44:50:5b:2e:84:22:27:86:d4:63:5f:
0e:68:7d:73:57:74:45:fe:63:ee:71:ab:59:13:e6:7c:f8:68:
7c:55:c1:e9:61:d5:1a:12:9a:a9:b0:18:b5:fb:30:05:e9:cc:
f5:45:ad:34:c7:61:6f:c0:eb:e7:ba:ac:30:a1:12:6f:c5:d0:
e0:11:18:c1:cb:13:14:94:0d:2c:9c:60:93:bb:33:16:de:64:
f5:5f:56:f6:63:5d:16:6e:f2:59:e3:21:43:e0:3f:82:d6:22:
40:ab:aa:32:2d:01:9a:16:19:4b:c0:07:7e:88:ce:7c:67:51:
41:44:48:e2:9d:05:2e:fe:b3:fa:d3:44:58:1e:39:f0:a7:0a:
9b:61:22:aa:74:58:dc:b9:d2:85:7c:6b:32:69:4f:22:00:1f:
a7:d7:ac:a1:64:02:63:87:90:3a:a7:57:66:10:f5:4d:df:ab:
cf:b3:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:39 2025 by rpki-client on console.sobornost.net