Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa
File: 152d5f6f-78f2-31d9-8757-11d8cefc505c.roa (raw, json)
Hash identifier: 1le+PaUZlo9znKUBugNiThG1pAjto4evwBVJgMGGJDg=
Subject key identifier: CF:2B:3C:F3:BF:12:43:21:79:66:BD:AC:81:23:31:21:CF:35:D4:B1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858497C3EF51AD8DEF219E6009280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa
Signing time: Fri 11 Apr 2025 01:00:48 +0000
ROA not before: Fri 11 Apr 2025 01:00:48 +0000
ROA not after: Thu 10 Jul 2025 01:00:48 +0000
asID: 53271
IP address blocks: 67.62.88.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:3e:f5:1a:d8:de:f2:19:e6:00:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 11 01:00:48 2025 GMT
Not After : Jul 10 01:00:48 2025 GMT
Subject: CN=d4d692b4-4536-441e-a5be-4e1accf9f6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:7a:d4:df:fc:26:d5:42:62:93:7b:e4:3d:
0c:17:17:cf:d2:b2:58:00:b5:96:41:b6:0f:4f:fc:
20:85:f9:18:a4:5b:7d:ee:6f:02:36:a8:7e:6e:97:
22:e9:16:57:76:27:d9:9a:47:f2:dd:13:c2:6a:01:
47:0b:46:23:3d:50:78:aa:d5:eb:a5:c6:f9:b2:af:
dd:58:5c:81:6f:94:e3:3f:66:a3:da:c8:be:7a:ec:
e7:63:76:8a:95:8b:f8:59:87:6c:e5:1e:0a:10:69:
97:f5:6e:55:3d:b1:1c:d0:a3:fa:ad:e9:e1:f1:41:
e9:00:93:78:ed:43:f2:bc:81:37:25:7a:6f:30:1e:
c8:a0:61:06:a7:8a:90:cf:70:c2:79:94:86:79:80:
3a:0b:a3:ac:64:aa:e6:3e:f1:9a:35:92:78:7d:fe:
18:bd:0f:39:23:e7:06:f9:9b:f3:f7:ab:c2:47:94:
40:35:2d:41:dd:be:6c:47:f2:ee:0f:9d:44:eb:ec:
1e:2a:5c:69:82:59:fc:90:35:c6:37:9a:9f:ab:c2:
ef:a8:53:1e:3b:d4:26:62:5d:db:cc:fb:1a:7b:9c:
95:0b:c0:e5:a8:fb:c8:df:dd:07:37:8f:c6:49:ac:
1e:33:3c:8f:e0:83:50:41:6b:2b:29:9f:0f:bb:ff:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2B:3C:F3:BF:12:43:21:79:66:BD:AC:81:23:31:21:CF:35:D4:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.62.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:11:fb:c0:9f:19:3d:e7:ad:1e:a3:71:f5:eb:4a:b4:42:85:
ae:54:7d:c5:93:84:47:6f:8b:20:66:ff:fe:b1:33:1c:44:06:
84:d6:a7:92:6c:c5:c5:ac:bf:8a:42:3d:e8:78:1c:c7:77:b7:
a7:0f:17:c7:d0:77:3d:29:97:a5:77:80:5b:08:27:54:ee:81:
a1:95:e5:3a:24:d5:13:50:f3:f1:02:6a:a4:da:73:c0:1c:96:
37:33:f5:18:26:6c:df:eb:ab:1e:70:4e:31:02:57:80:38:9d:
af:ae:d4:dd:ab:02:cd:13:07:88:9e:fb:64:cc:e0:2c:75:0b:
8f:9b:18:4a:07:a5:46:b7:c6:14:10:f8:d4:b5:af:99:2f:d1:
45:6b:9f:2f:5f:c2:79:17:0a:4a:a4:d3:25:75:ed:2c:3d:eb:
98:d2:9a:da:be:c0:19:0f:ce:50:04:23:6e:1e:b4:a4:fb:20:
1b:56:7f:19:91:da:f0:05:09:74:d2:a8:72:d1:9b:08:3d:ac:
c4:3d:8d:8c:1e:5a:d1:b1:1c:84:86:5e:5b:f4:e0:7c:2b:d9:
8f:30:02:29:75:aa:8a:74:8b:bb:ad:7b:33:e2:eb:5a:07:8f:
84:12:b7:d7:21:b5:bc:57:64:f0:b8:65:0b:e0:9b:3e:20:e4:
ef:6b:5d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:56 2025 by rpki-client on console.sobornost.net