Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa
File: 1e069c73-4292-3ffe-a143-d91bade4b8f5.roa (raw, json)
Hash identifier: QTolAiw9oYt/O5UANrLt8q/nXuWESNsPZDCTBJHSOgM=
Subject key identifier: 1A:12:E6:3E:8C:48:69:C6:58:72:30:EA:BA:6B:99:F1:90:BD:5D:5E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112369E871F7A8C8B3CFC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 173.211.192.0/18 maxlen: 18
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:23:69:e8:71:f7:a8:c8:b3:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=485db17a-5851-4d2e-a8a5-3c3f0cd63b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:f9:ad:f3:e2:c1:91:eb:06:12:9a:d7:5f:
aa:4a:83:ee:8f:55:cc:ee:a3:52:75:9a:41:02:b5:
9b:7a:c2:51:2d:09:19:4a:d8:d7:27:d2:31:fa:83:
2c:36:4b:7b:72:e6:61:92:85:38:2b:2a:08:cc:10:
c4:a0:35:e2:09:cf:ba:b4:f3:64:41:c1:61:be:bc:
7f:23:5d:5c:1f:a8:e2:2f:16:5f:c6:ad:30:ae:bc:
3f:6b:d9:45:72:14:9b:19:2c:f2:a8:bc:ae:e3:b5:
ff:ef:c2:86:f4:69:12:18:8a:22:34:f7:28:c6:c4:
71:7a:4d:a9:76:49:22:ce:65:e7:87:cf:c3:03:8e:
ee:24:fd:e1:81:61:6b:ec:a6:74:58:77:99:2f:ab:
28:17:3d:45:c5:d6:87:1d:28:69:bd:62:25:5b:92:
2f:e2:82:f3:bd:0e:84:98:6c:82:8e:c7:9f:e1:0a:
9f:a3:72:f5:83:be:16:4f:a1:13:06:6f:07:d3:55:
ba:b9:a9:0d:4d:43:c5:20:0b:6c:57:25:b6:b2:f5:
78:24:9c:9e:38:9e:df:4f:7e:95:89:7d:ea:f3:61:
3f:19:2a:3e:58:ce:3a:55:35:83:a8:fc:b3:f1:8c:
92:93:ef:66:90:9d:18:df:a3:ce:b7:05:dd:3a:e8:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:12:E6:3E:8C:48:69:C6:58:72:30:EA:BA:6B:99:F1:90:BD:5D:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:7a:65:da:db:66:97:99:2f:14:75:74:32:f8:c6:10:d8:26:
e5:7f:d0:6c:aa:ba:9a:2d:19:8e:68:b7:5a:a0:1c:8b:1e:60:
4a:9e:56:56:a5:8b:31:5d:cc:0c:ef:48:4a:29:ba:f1:8e:f4:
74:e7:2b:7b:7d:1b:95:85:ea:20:dd:d7:bd:a4:89:fa:7b:72:
9a:fd:f7:03:85:bf:e5:e5:c9:89:fc:d6:e4:8d:dc:23:33:0b:
5e:68:17:ca:80:4c:27:7e:ae:92:83:08:f2:4b:42:e1:01:c1:
98:5a:9f:42:4b:31:9b:7b:e5:cc:40:5f:07:ae:d7:ce:68:5b:
46:f1:55:95:99:d2:7e:c1:e7:79:85:b3:f4:34:dd:ed:3a:23:
f7:52:23:f4:b5:01:bf:b6:50:b4:bd:91:ed:4b:b1:db:8d:42:
dc:f4:0e:a6:b6:a0:16:63:a9:59:45:62:9f:18:e9:c2:70:00:
5b:80:86:b8:e0:86:3c:b1:a5:f4:c6:11:b5:c6:b6:a1:5d:f8:
5d:d0:33:bf:21:bc:67:bb:95:12:87:19:56:ae:6e:71:5f:42:
8f:0d:92:75:7d:25:ef:dd:1f:b2:fa:f8:6a:1b:29:db:7c:a2:
bd:f3:89:49:0d:8a:4a:d4:c9:01:20:1a:f3:56:b4:2c:56:e1:
37:0c:50:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:56 2025 by rpki-client on console.sobornost.net