Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28977606-a719-313f-8175-4fb62757958c.roa
File: 28977606-a719-313f-8175-4fb62757958c.roa (raw, json)
Hash identifier: sLDDoclZqeXygylAnjR9s2gi+lLF2kPMoOTj9wJ3nVA=
Subject key identifier: E6:2A:9D:03:5A:01:8A:76:4E:57:94:EC:A6:F6:17:6D:2B:49:A7:AC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21103EF0F02D48651306580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28977606-a719-313f-8175-4fb62757958c.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 29877
IP address blocks: 66.163.112.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:03:ef:0f:02:d4:86:51:30:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=f2344a8d-8e6b-4a4a-8d05-d6fc3f2e861e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:84:08:2d:3c:ed:5c:6b:34:b8:db:7b:a5:cb:
0f:95:5d:ab:67:0e:a6:77:cf:06:fc:cf:fb:da:63:
53:1c:71:97:b4:48:43:8c:84:c7:06:1d:25:ba:4e:
0f:c6:56:68:6c:0a:f9:89:26:9b:7e:fc:e3:b1:99:
d4:87:12:71:9b:39:21:30:19:1b:7b:b8:c3:b9:25:
52:ca:85:6d:b8:d3:23:cc:ef:36:7c:06:5b:8c:67:
06:5b:35:b9:85:3b:7e:32:3d:47:6c:92:0b:4b:e6:
eb:19:d6:1f:21:79:e5:80:26:71:e9:46:ba:eb:1a:
c0:ea:5b:63:d4:c3:a1:9e:23:b0:51:18:58:f5:f6:
ee:52:7e:80:c1:22:65:e9:77:26:04:01:f5:52:59:
8f:74:d1:aa:26:99:33:d5:06:97:44:5b:ef:f7:ef:
08:c9:9f:0c:a6:78:22:98:5e:0d:f2:18:01:c5:0f:
df:39:00:1e:70:b0:83:be:02:b7:eb:e4:2d:f7:b2:
b6:7b:03:35:c5:5c:b8:1d:23:84:ba:98:27:88:43:
f1:c2:3d:64:82:0a:dc:e1:ce:ad:f3:56:73:1a:b3:
2a:d2:c4:52:5c:a7:a9:51:78:95:7e:28:9b:3a:67:
4a:2c:8a:bb:4d:14:2a:c0:e0:f1:57:56:4d:1a:5a:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2A:9D:03:5A:01:8A:76:4E:57:94:EC:A6:F6:17:6D:2B:49:A7:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28977606-a719-313f-8175-4fb62757958c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.163.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:b8:8a:64:f4:9f:c6:61:71:20:45:75:f2:67:66:6f:25:1f:
90:e9:3b:71:d5:cb:e2:16:63:0c:a1:d1:ce:5a:5c:ec:d1:dd:
36:52:a1:d0:7e:f0:42:fa:9a:a9:c8:ba:59:ae:8d:fd:6f:0d:
cb:1d:09:1b:c1:7a:58:ce:ee:2a:76:5e:56:e3:ba:6b:70:6b:
28:bc:bc:c0:f7:f2:67:e1:d1:bc:ed:92:8e:80:57:8d:7b:89:
aa:12:17:c2:72:f6:16:5b:e6:f4:c3:cf:13:70:47:f3:27:6b:
e1:78:7a:a7:d7:a6:1f:60:df:2c:0b:02:3c:5a:32:dc:45:eb:
40:33:7d:30:f4:62:36:6d:14:d4:80:66:f6:3c:c0:9d:ca:d0:
0b:21:0a:81:11:cd:ec:5f:a1:5a:d8:f7:1d:ec:31:47:26:a6:
31:7e:57:14:10:aa:45:51:fe:6a:99:80:45:0a:a6:89:f5:df:
dd:5b:f6:cb:36:0e:ea:0a:f4:fb:19:5b:6d:6c:89:1d:3b:87:
24:a7:8a:0a:9c:b5:29:53:70:ee:be:b7:40:f8:13:63:58:83:
d5:22:3f:c3:27:9f:cc:95:7f:03:b3:a7:7f:b8:61:9e:fc:66:
63:90:aa:8d:9a:e4:95:e8:09:1f:51:01:13:ef:1e:22:54:53:
86:0c:b7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:57 2025 by rpki-client on console.sobornost.net