Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa
File: f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa (raw, json)
Hash identifier: wz68AcaNHcVX9gBRc3O4cbgZ1Bwh//sGnF9s7lW9goI=
Subject key identifier: 95:F0:F8:33:3A:69:35:AC:9C:5B:EB:EB:C1:64:70:E0:F7:B9:49:77
Certificate issuer: /CN=f9b1a11d-20ed-494f-a473-5ebece521a34
Certificate serial: 010D0C9F432858495D8962CC6A2EA3ED681AD0B8
Authority key identifier: 33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 394690
IP address blocks: 104.247.125.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:62:cc:6a:2e:a3:ed:68:1a:d0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b1a11d-20ed-494f-a473-5ebece521a34
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=a7f168f5-e9e7-4718-93f3-4284de818275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3b:6e:17:f5:0f:da:6a:ff:e1:f2:2f:15:ec:
66:49:a4:71:ef:eb:5f:91:8f:6c:43:1d:cb:32:bf:
b5:43:2b:33:f1:f1:60:c1:6a:51:12:93:15:ef:36:
80:cf:2a:ae:9e:8d:cd:fa:da:3d:df:41:d8:62:ac:
a7:51:ef:a4:dd:13:01:d3:49:cb:9e:72:50:74:07:
e9:ef:bf:d4:8f:d2:2a:94:21:8f:50:55:c3:cf:19:
b7:32:f4:25:34:3b:33:ca:d2:92:f8:7b:59:24:e9:
fa:89:1e:af:07:02:f0:72:bd:18:c5:46:37:7c:50:
16:8e:ca:1e:b8:11:bf:99:88:9e:ed:84:52:39:bd:
65:67:d4:3d:30:38:7a:93:6a:3f:ac:f0:01:1e:e4:
3b:95:0b:a2:a4:91:0b:cf:3e:0c:56:0c:d3:46:89:
fd:46:6b:15:f4:97:63:0b:0f:4b:1f:bf:5e:97:e5:
5d:11:ac:50:3f:87:37:85:9b:18:94:a4:55:41:a2:
3b:0c:0b:04:81:d7:3d:bc:aa:49:f8:3d:aa:12:98:
73:b1:58:df:a8:15:57:ca:9a:01:65:94:91:0c:93:
f9:30:f2:32:48:21:d2:2e:c5:19:cc:ae:d0:b1:3a:
91:d9:bb:d9:b0:82:3f:3f:e6:97:80:d0:63:8b:3e:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:F8:33:3A:69:35:AC:9C:5B:EB:EB:C1:64:70:E0:F7:B9:49:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl
X509v3 Authority Key Identifier:
keyid:33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer
sbgp-ipAddrBlock: critical
IPv4:
104.247.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:b6:f7:d2:26:44:f0:16:2e:ec:83:7c:f8:9b:b2:a7:c9:a3:
e2:a5:af:58:41:b0:53:d0:29:f4:ea:f6:ee:c5:ae:93:bd:15:
a0:e8:97:3a:17:aa:27:3c:9b:c8:43:b3:6d:dd:a8:5b:e2:5d:
2f:4a:a9:25:1e:14:82:54:75:f1:97:19:a7:a7:45:95:5c:23:
da:73:d8:cf:e9:25:34:d6:90:81:be:18:44:40:e4:5d:96:fc:
2d:db:e4:86:d3:8a:d6:85:ac:66:cd:82:09:e2:42:48:a8:9e:
c9:a5:d6:02:18:f0:04:6a:59:fd:e4:6d:17:c1:b3:79:4e:88:
0e:6f:24:87:a3:64:64:3d:40:ef:d8:2b:f6:db:e8:5a:23:7c:
b1:61:aa:cd:c7:8f:70:19:64:67:82:e8:b8:a7:c2:63:36:87:
76:fe:ca:84:87:0f:34:7d:5e:41:d6:7e:95:47:20:96:28:46:
40:a8:e2:ef:90:2f:c9:9b:19:68:7d:f7:8d:24:bc:93:71:1e:
18:67:9d:a8:ee:1d:0e:32:c9:11:c9:6c:97:83:89:9c:18:11:
82:2b:35:7a:26:e5:17:67:ea:bb:30:88:9c:7e:22:3c:44:d9:
88:71:b8:63:6b:f4:b1:8e:eb:09:80:9c:c7:9a:f0:70:e0:85:
39:29:c3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net