Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a2636ec-0161-397f-8ac9-6d548fb061b4.roa
File: 1a2636ec-0161-397f-8ac9-6d548fb061b4.roa (raw, json)
Hash identifier: IBTJgycEPRMKzUlQ5HMykrCD0CYQs5KmXmTU6df7uSU=
Subject key identifier: 3A:99:C8:C4:2F:87:EF:0C:AF:53:C8:EA:80:72:15:5D:79:60:A9:80
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285849780F197FDE253CE88DD8CC00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a2636ec-0161-397f-8ac9-6d548fb061b4.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 7029
IP address blocks: 67.140.112.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:19:7f:de:25:3c:e8:8d:d8:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=181f33c8-13f5-4052-9b15-3945cdc4ae73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:36:1c:f0:96:d4:cb:b6:49:cd:73:94:96:
70:8b:04:db:6a:83:4d:6c:c3:65:e4:3f:1b:4c:d3:
cf:81:3c:3c:12:35:3b:fc:94:9d:5d:f5:bb:01:98:
4e:ad:d0:80:62:5b:1b:82:67:d7:a0:e9:a2:46:a8:
c6:66:b1:b2:26:8c:e3:43:b9:68:43:fb:d7:1a:10:
18:27:4f:15:07:b3:fb:bb:bf:fc:8f:cd:9b:1f:b7:
95:42:6d:13:e4:19:76:24:63:4e:d6:a7:b4:74:83:
02:e2:80:75:c5:c7:64:d0:69:04:f7:03:8a:b2:ef:
60:3c:c3:10:f4:4d:c5:91:16:97:b8:7d:f1:e8:36:
7b:89:19:14:78:3a:96:6d:e5:b0:98:98:27:2d:1e:
e2:53:7a:6b:ae:fa:97:c4:a4:c7:5e:41:76:c4:27:
6a:e5:5d:85:f0:78:17:72:87:01:98:83:68:17:b3:
6e:74:48:c3:3a:7f:48:d3:fc:c6:00:6e:2a:f8:83:
d2:b8:40:8c:15:41:c2:18:0d:60:ae:4b:a2:2f:1e:
19:67:4a:3f:81:8e:9b:7c:ed:ff:3d:a7:b3:fa:5c:
67:f7:28:68:c1:d7:6c:31:5e:dd:37:92:7d:d5:fb:
5c:a9:aa:69:6e:a8:fb:25:ff:eb:b8:74:85:9e:35:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:C8:C4:2F:87:EF:0C:AF:53:C8:EA:80:72:15:5D:79:60:A9:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a2636ec-0161-397f-8ac9-6d548fb061b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.140.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:38:ea:9b:c3:3d:e4:c5:3a:ad:71:c5:c3:1b:6f:8a:c1:e3:
8b:c2:66:b8:b4:b7:b6:91:ac:12:65:25:81:01:4b:9d:4a:4a:
d9:ca:50:6c:8b:61:50:ef:e9:bb:6b:d0:00:2a:a8:a8:e6:a3:
b4:04:02:3f:02:eb:cd:ae:f6:e7:9f:e4:b0:eb:d1:bf:37:5c:
a4:b6:c3:5d:df:0a:30:f8:d8:ea:22:35:c5:dd:04:58:47:78:
94:34:30:ac:7c:7e:1b:a1:db:b3:f1:f2:cc:f9:27:cd:b0:ee:
6c:d2:67:c1:97:35:4b:45:30:d6:04:b0:eb:86:1b:b8:aa:b5:
1c:5e:bd:1c:7b:f6:b0:86:03:cb:26:63:42:c5:3d:16:c8:ca:
1b:c5:63:e5:76:44:b9:a5:8c:cf:97:4e:8c:5f:b2:6c:b0:de:
20:c7:35:08:02:a3:88:6e:6a:14:ff:15:35:01:83:c6:3f:19:
c7:1b:56:8c:f6:b8:d2:1c:a1:3c:45:8a:24:1b:9e:fb:13:83:
8e:5a:8c:e8:f8:14:b4:06:35:fd:7c:ea:83:34:97:60:68:5e:
59:9e:c3:fc:a8:12:05:27:4f:20:2e:2c:66:ac:9a:54:50:d3:
95:c1:7b:47:a5:1c:20:07:ce:88:fa:a6:1b:94:9e:72:cd:8f:
c7:54:99:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:56 2025 by rpki-client on console.sobornost.net