Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1036a36e-2953-370a-be15-7e275eb5ecfb.roa
File: 1036a36e-2953-370a-be15-7e275eb5ecfb.roa (raw, json)
Hash identifier: f/BikzRRpbfhdaHnve6wFubsq900czpcgrYG/XpMRSY=
Subject key identifier: F6:D6:DB:FF:70:DB:AF:79:8D:7E:B5:B2:BC:80:39:A4:E6:9B:4B:F3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858496A19B7C956D389F5D96BE840
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1036a36e-2953-370a-be15-7e275eb5ecfb.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 7029
IP address blocks: 98.22.216.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:b7:c9:56:d3:89:f5:d9:6b:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=f8f2f635-1a83-4acf-b322-c81f35d7acba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:fc:eb:85:3f:7d:9e:23:1d:67:76:13:69:
3b:1a:61:b5:03:39:58:2e:3c:6e:f7:ca:e0:28:9f:
b9:87:4d:00:47:fe:e9:ce:4b:fa:47:cf:e3:19:e9:
bc:5a:00:c5:e4:30:e8:ea:61:61:4f:9e:13:34:5e:
7b:6c:ba:81:a6:62:48:35:16:5b:da:79:e0:8e:c7:
22:af:12:19:39:eb:a3:f5:1e:ba:35:07:3f:dc:ec:
17:12:b2:b6:70:33:84:1a:41:14:70:04:e1:66:cd:
eb:a4:23:ae:3d:ed:2f:16:2a:35:30:62:71:9a:cf:
af:9f:fc:44:08:bc:0a:0b:65:0f:da:2a:74:94:6a:
3c:4f:0d:a7:88:c2:2b:58:cc:3d:97:71:7d:96:2f:
6b:fb:a7:d3:6d:65:d9:3e:95:8f:57:22:f4:90:c0:
7a:c7:39:c7:5d:55:8b:cc:a9:1f:ba:f9:2d:73:63:
31:20:e7:12:c6:0d:2d:5a:8a:27:75:cb:ae:0d:52:
8b:c0:79:5d:b5:45:38:13:11:a3:76:37:a5:5a:86:
66:42:5f:45:8f:ff:ca:51:44:17:d5:a8:19:da:46:
7c:7b:7a:41:96:a6:46:51:fd:9d:f3:5b:8a:50:60:
84:0b:7b:4f:20:21:b4:92:b6:cc:f5:03:e8:26:8c:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D6:DB:FF:70:DB:AF:79:8D:7E:B5:B2:BC:80:39:A4:E6:9B:4B:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1036a36e-2953-370a-be15-7e275eb5ecfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:5e:a6:5c:76:3a:34:a3:13:80:30:ae:68:90:53:32:d9:64:
60:32:a7:2d:b8:47:62:49:39:fa:8b:8f:5b:c8:b0:14:c9:c9:
7e:c5:32:bf:f2:b4:68:7a:dc:56:b9:0b:fa:9f:77:23:76:ee:
a8:7e:4b:79:f4:eb:e9:d1:d8:8e:4f:09:4e:12:07:af:4d:9d:
f9:d9:54:d2:d4:13:cf:5e:8a:ac:e1:31:58:a1:c2:de:a7:20:
9f:c8:f3:41:6f:9d:89:7d:d5:bd:43:46:7d:bd:64:f2:c6:f7:
3c:ee:af:e4:aa:0e:5b:44:12:ca:f6:b0:6b:d7:c8:6e:ea:63:
f9:d6:0e:82:0f:8f:5f:96:ca:28:00:37:a8:18:a0:0b:c2:45:
1f:08:46:80:4e:99:7f:81:ba:4b:02:fe:85:c8:19:c9:2d:06:
52:5d:ba:80:87:5f:31:ec:d5:4a:ad:97:fb:00:14:bb:34:eb:
86:a1:2a:5a:e4:44:3a:25:c6:4c:7c:8f:4b:a8:8a:ad:4a:48:
cc:2c:81:01:52:60:b0:33:6c:5f:1c:5b:ea:d6:7b:66:77:66:
66:78:51:4c:81:2a:e8:20:af:29:77:c6:44:98:6a:01:4f:fc:
a6:75:1a:36:e1:8d:01:f0:20:23:2c:0b:1e:d8:cb:aa:ce:e5:
79:41:37:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:56 2025 by rpki-client on console.sobornost.net