Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1107219f-7c6b-3cf1-88c1-4e68939eb125.roa
File: 1107219f-7c6b-3cf1-88c1-4e68939eb125.roa (raw, json)
Hash identifier: uZ9IPXPNKxGcyC7mG6ZuOiKVr52KL7/HqDKYuSunRwc=
Subject key identifier: DE:E9:50:D1:47:71:09:91:1C:F4:67:A4:97:C3:DC:53:77:C5:AE:9D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210EE2222D1F09AACB30D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1107219f-7c6b-3cf1-88c1-4e68939eb125.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 69.66.0.0/16 maxlen: 16
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:ee:22:22:d1:f0:9a:ac:b3:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=7123957c-798e-4947-9dc8-f13156a84e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:df:6b:c4:0f:dc:bf:49:f6:98:70:7c:54:
a0:ac:ee:75:99:23:4c:40:f2:72:6f:2e:d7:7d:4f:
31:fc:d9:8b:9d:44:64:5e:fe:4e:02:28:28:7f:12:
db:57:f3:d9:61:a9:78:3b:f0:37:40:a2:55:d0:fc:
d1:21:fa:a4:2d:3a:17:be:1a:d6:23:6e:96:aa:c3:
67:5f:b2:18:34:89:fc:83:87:64:68:ce:db:2e:ff:
d6:e5:48:e4:5c:1b:94:39:47:e4:f7:d4:0a:54:27:
c7:9a:65:79:46:ae:17:c4:bd:60:bb:3d:b6:36:92:
cb:5e:fb:98:e5:35:12:eb:14:4b:7a:a4:da:b8:68:
5b:31:c7:8d:29:4c:41:b5:e5:87:3a:e3:b2:65:4a:
f4:57:5f:16:bf:1d:55:e6:10:11:36:ba:ef:7a:36:
04:29:16:0e:a0:81:91:5f:0f:ca:31:03:21:5c:dd:
4b:93:5d:00:6a:d1:d2:6b:bb:00:1f:9e:48:98:c7:
92:09:b2:53:b9:fc:32:df:cf:00:45:42:58:4c:ed:
af:ab:e0:a9:c6:16:a7:0f:c6:e0:f3:a7:d6:e8:88:
ee:ca:2f:9a:d4:40:0b:16:8a:f9:f9:fe:41:b3:91:
35:05:15:d2:94:ca:65:0f:fa:38:2e:07:a0:16:9f:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E9:50:D1:47:71:09:91:1C:F4:67:A4:97:C3:DC:53:77:C5:AE:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1107219f-7c6b-3cf1-88c1-4e68939eb125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:6b:37:69:8c:cd:78:f2:b4:a8:d1:50:0b:26:82:8a:31:21:
d0:16:68:4d:76:d9:42:0a:ce:04:4c:84:10:06:2d:b1:79:a9:
39:25:17:f1:bf:cf:7a:fe:55:b6:cf:ef:b0:aa:26:a4:89:9b:
d8:eb:55:8a:73:11:7d:10:34:a9:be:ca:3c:e2:3d:8c:5e:75:
4d:9c:f2:9b:e7:89:c5:b4:fe:1a:7b:6d:82:77:45:b0:b6:2c:
ad:b8:2b:28:a1:73:f6:40:32:cd:eb:bf:05:e2:8f:44:6b:a4:
c9:52:6b:95:5d:c3:e9:7f:7e:77:46:71:76:32:6b:9e:24:84:
ff:9e:10:91:e4:82:26:69:51:6a:e2:63:81:7f:1d:bc:5a:41:
08:b3:3d:dd:44:63:d0:17:a1:6d:fa:d0:dd:09:c0:a2:75:be:
bc:07:a6:fe:23:fd:b6:8e:b4:49:22:4d:2f:73:12:c4:54:22:
38:d2:1d:20:aa:d4:77:ed:fb:44:5d:6c:91:49:f6:b7:69:d5:
f9:bd:17:e7:13:c1:01:fe:6e:04:6a:f0:99:38:c9:cb:05:de:
32:79:6a:13:6e:19:d3:60:1a:75:73:4f:02:3b:28:5d:75:0e:
ea:b0:c9:b5:92:e6:f5:4f:e3:6a:df:9b:a6:d0:6c:16:6d:f8:
62:39:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:56 2025 by rpki-client on console.sobornost.net