Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/256306ed-07ad-387c-9937-97eaa8093c5d.roa
File: 256306ed-07ad-387c-9937-97eaa8093c5d.roa (raw, json)
Hash identifier: 9/9yAsDYSaKpdnDSj/crM3/JVHSIR+suzbN630JOXk8=
Subject key identifier: 99:C6:20:35:45:9F:3B:F0:70:3C:0C:34:9C:E8:E2:5B:DB:BE:E4:77
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AA330EAE322F90211BEB10
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/256306ed-07ad-387c-9937-97eaa8093c5d.roa
Signing time: Thu 20 Feb 2025 18:15:26 +0000
ROA not before: Thu 20 Feb 2025 18:15:26 +0000
ROA not after: Wed 21 May 2025 17:15:26 +0000
asID: 7029
IP address blocks: 98.20.208.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:33:0e:ae:32:2f:90:21:1b:eb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:15:26 2025 GMT
Not After : May 21 17:15:26 2025 GMT
Subject: CN=509c13b2-21db-4534-b486-bcda59d3c709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c6:00:54:88:0b:7f:f0:5f:a4:8e:fa:9e:76:
7d:a2:3a:f1:8b:5e:11:65:96:14:44:cb:82:1c:d6:
b4:94:dc:16:30:bd:9a:58:8e:51:f9:72:f0:70:b1:
5d:4d:87:d4:32:3d:90:ca:43:f1:5a:9b:c0:f2:2c:
72:6e:53:11:db:6e:3d:8c:4e:77:39:27:57:ed:17:
45:3c:6a:e2:79:58:20:ef:c2:df:10:60:ab:b7:4e:
76:0c:74:2f:9e:e9:eb:f8:e7:1f:19:cf:21:fd:b3:
89:01:d9:df:60:8b:73:6d:6b:3f:71:c7:81:84:73:
86:80:46:94:9e:f8:57:60:82:ae:61:17:11:17:60:
6e:5a:ec:98:68:4b:5e:31:76:2a:07:e3:33:30:6e:
19:a4:32:17:de:2f:f7:9c:03:51:64:7e:df:b7:8c:
d7:77:d4:35:7c:90:9b:46:f3:78:e3:ba:ab:5f:15:
50:34:d0:8f:92:de:24:6c:6d:bf:06:40:08:ee:a1:
25:3e:f0:9a:c2:b5:24:98:6b:2e:d7:1b:94:39:be:
91:25:f8:fc:a9:de:f7:2e:c0:fb:1e:ba:aa:1c:32:
a8:b4:17:d2:e1:58:f7:6e:03:b9:2a:d5:78:c0:58:
0a:22:d3:0e:ba:e8:c3:2e:25:0a:a2:a4:74:7f:c9:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:20:35:45:9F:3B:F0:70:3C:0C:34:9C:E8:E2:5B:DB:BE:E4:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/256306ed-07ad-387c-9937-97eaa8093c5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:ff:b8:be:74:dd:14:19:70:df:2c:b7:59:4f:01:60:3f:46:
a9:7a:4a:d0:7a:c3:b4:e0:35:da:62:14:52:0c:b8:ab:11:44:
c7:dc:cd:02:81:f8:84:5b:e0:23:0d:6a:15:04:e1:a8:8d:e9:
ae:28:69:8e:fe:d1:f5:03:a8:36:eb:66:69:b4:32:44:04:c0:
9b:1a:6b:68:07:0a:bb:45:3e:be:db:82:6b:8f:e6:db:4f:51:
f9:40:6d:af:f0:ac:97:d8:63:eb:66:9e:a3:48:df:17:0d:57:
ec:82:d0:2e:21:e9:ee:1b:24:3c:dc:98:c7:89:e8:b7:3a:f7:
0f:52:41:08:0e:d4:1c:d4:13:16:f8:33:89:88:9b:fd:13:19:
64:e2:c9:4f:64:3c:74:52:fa:61:7d:0c:73:40:fd:4e:20:0e:
a5:f9:27:bb:49:44:14:14:f6:da:94:c7:89:51:53:16:ee:f2:
28:13:50:b9:e4:e1:22:98:d7:bd:7a:3d:1b:2c:04:a2:e0:4c:
d5:2c:cb:7e:7b:a7:41:ff:ba:89:c3:16:a2:38:49:b1:96:1d:
7f:a8:b8:31:58:6b:26:06:91:3e:5f:b3:d6:e2:26:09:dc:2b:
06:71:e6:d0:80:89:54:b0:f4:ac:20:29:21:35:e7:a9:cd:e7:
89:b0:1c:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqjMOrjIvkCEb6xAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIyMDE4MTUyNloXDTI1MDUyMTE3MTUyNlowLzEtMCsGA1UEAxMk
NTA5YzEzYjItMjFkYi00NTM0LWI0ODYtYmNkYTU5ZDNjNzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMYAVIgLf/BfpI76nnZ9ojrxi14RZZYURMuC
HNa0lNwWML2aWI5R+XLwcLFdTYfUMj2QykPxWpvA8ixyblMR2249jE53OSdX7RdF
PGrieVgg78LfEGCrt052DHQvnunr+OcfGc8h/bOJAdnfYItzbWs/cceBhHOGgEaU
nvhXYIKuYRcRF2BuWuyYaEteMXYqB+MzMG4ZpDIX3i/3nANRZH7ft4zXd9Q1fJCb
RvN447qrXxVQNNCPkt4kbG2/BkAI7qElPvCawrUkmGsu1xuUOb6RJfj8qd73LsD7
HrqqHDKotBfS4Vj3bgO5KtV4wFgKItMOuujDLiUKoqR0f8meQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnGIDVFnzvwcDwMNJzo4lvbvuR3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjU2MzA2ZWQtMDdhZC0z
ODdjLTk5MzctOTdlYWE4MDkzYzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhTQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADj/uL503RQZcN8st1lPAWA/Rql6StB6w7TgNdpiFFIMuKsRRMfczQKB
+IRb4CMNahUE4aiN6a4oaY7+0fUDqDbrZmm0MkQEwJsaa2gHCrtFPr7bgmuP5ttP
UflAba/wrJfYY+tmnqNI3xcNV+yC0C4h6e4bJDzcmMeJ6Lc69w9SQQgO1BzUExb4
M4mIm/0TGWTiyU9kPHRS+mF9DHNA/U4gDqX5J7tJRBQU9tqUx4lRUxbu8igTULnk
4SKY1716PRssBKLgTNUsy357p0H/uonDFqI4SbGWHX+ouDFYayYGkT5fs9biJgnc
KwZx5tCAiVSw9KwgKSE156nN54mwHBE=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:57 2025 by rpki-client on console.sobornost.net