Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa
File: 040f0daa-4901-3c20-af2f-533b29edcc22.roa (raw, json)
Hash identifier: BSbJWR/B+PIzG4VPO8wWDEzHkF6iR3U/KMfvthLq31A=
Subject key identifier: B3:E9:62:C2:79:D1:F0:BB:46:6C:24:B4:6E:C5:17:13:CA:DC:55:96
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CDE11C066F5E3731F3233CE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 98.16.32.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:1c:06:6f:5e:37:31:f3:23:3c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=3456e675-c3b8-47ef-b744-ddbd5c67fca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:29:63:52:49:25:06:40:53:38:d8:2b:26:34:
5d:ec:cc:e8:a2:0f:b9:8b:49:c0:01:7c:3b:d7:ac:
42:5c:61:74:9c:be:ef:ae:56:56:4f:13:cb:cc:f6:
60:65:fb:d6:44:74:83:32:d7:2b:fd:02:7e:42:80:
92:31:cc:e2:cb:e6:5f:ce:af:01:ec:2f:33:bd:61:
a7:bd:f4:6e:42:5a:0f:09:e7:92:b3:00:86:ac:c2:
5b:c7:3b:ff:a2:3f:6f:c3:82:c6:3a:62:4c:9e:af:
a2:80:60:88:39:7f:4d:99:0c:ba:bc:0b:36:47:6d:
17:e2:51:9d:0e:35:6c:66:2d:c2:7f:45:8a:95:0d:
9a:df:7c:b9:38:10:a4:ae:f3:c5:28:7a:71:b2:1b:
9a:1e:69:aa:34:df:b9:99:19:50:da:e6:88:cb:a9:
51:c8:c2:c7:b1:92:f9:2c:92:81:13:74:12:24:0f:
42:aa:bb:6b:a6:4a:7b:34:9e:3f:f4:e9:65:d6:e0:
36:54:de:84:d7:ff:18:6a:52:3b:e1:94:ab:03:d1:
fa:92:8a:99:f1:5a:b9:f5:b0:0a:10:06:f2:94:fb:
ee:e9:60:20:f7:7b:85:f8:0c:8f:10:a2:f5:9f:07:
55:d6:7c:28:06:36:0c:4e:71:27:8c:7d:25:ae:34:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:62:C2:79:D1:F0:BB:46:6C:24:B4:6E:C5:17:13:CA:DC:55:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:3e:e8:4d:cc:8a:43:a5:2f:8a:25:e3:b6:76:c9:c2:7e:08:
f3:a1:25:4d:35:66:33:21:85:2e:cc:ac:bb:65:1c:e3:27:e7:
33:a7:0f:9d:28:e2:99:df:a9:7b:ef:07:f6:28:7d:bd:a5:28:
30:57:01:07:3b:89:d2:c8:f6:28:cb:f9:47:a0:c6:b0:fd:35:
59:7e:d6:ab:cf:23:30:d2:d0:51:77:f4:f7:49:db:22:c6:6e:
83:5b:0c:6d:e2:03:c0:c2:1c:80:98:d3:b5:b8:7e:20:e1:40:
82:ee:d0:6c:24:2a:ca:18:3f:94:9b:f4:11:6a:93:00:84:84:
ac:42:cf:e7:21:a9:7b:18:1e:94:3e:ba:46:6b:3a:7f:8a:bb:
ec:ee:ce:34:09:09:ae:4f:b2:9c:73:0d:47:7b:ae:d0:9b:3f:
66:18:71:71:51:86:60:86:11:07:71:f1:f6:2e:af:f9:b1:06:
e8:24:db:83:39:8c:b7:31:2b:4e:a7:82:72:83:1a:75:1d:e6:
5a:8b:0d:4a:e4:bc:8d:b4:b9:09:75:6a:2a:6c:6c:d8:89:a2:
91:0d:56:12:13:78:e9:42:23:4a:a0:4a:2d:23:ed:4a:4e:7c:
c9:e4:a2:2d:35:31:c9:6d:43:db:92:85:87:3e:f6:fb:ce:03:
d1:43:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:55 2025 by rpki-client on console.sobornost.net