Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa
File: 37011cf7-93bf-3f24-a66a-48d124c2519a.roa (raw, json)
Hash identifier: qqQ1TdCQJwaDkj6kerFGPCUmINambSjgnmq/j4V+Rt4=
Subject key identifier: 12:DD:28:76:55:6E:65:6F:4C:0B:A0:B7:07:72:27:45:A1:E3:3D:81
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F22C22378D32359A775A8A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 7029
IP address blocks: 173.187.0.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:22:37:8d:32:35:9a:77:5a:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=23902053-7fc5-4adc-90ec-c9d41244fb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:1e:6b:25:09:e5:fb:96:51:c1:17:f3:07:
dd:93:03:ba:77:fb:92:33:58:3c:4f:1c:33:8e:75:
18:24:33:22:8b:cf:a2:e3:84:bd:5b:47:e5:32:15:
f0:1f:56:96:2e:e4:67:97:5d:3b:51:58:ba:63:5f:
57:1b:b4:d6:a0:0a:7a:96:bc:0c:fa:42:44:9e:7a:
58:13:95:88:e0:cd:c7:3b:13:ed:83:fa:bb:50:2c:
2a:16:6a:1d:a1:c0:3f:54:a1:aa:09:95:83:1e:35:
7e:43:49:f6:63:9e:ff:13:ed:0d:83:1d:d0:f0:13:
c0:06:05:27:5f:80:c9:0e:2d:f4:4f:22:ce:89:0c:
49:dc:1e:63:f7:a3:da:b0:65:8d:f9:0e:b4:c0:15:
4f:16:b7:cf:3c:19:b6:60:60:fe:04:24:58:9c:3c:
e4:b5:a8:1e:17:1a:05:9c:c2:ca:51:fc:2d:31:af:
51:bb:62:cb:69:cc:c9:ea:15:cb:94:78:a0:cf:2f:
90:7f:31:e8:31:d0:75:d8:d5:21:a2:73:cb:ea:36:
92:19:b3:82:ba:12:fa:58:5a:b7:96:e6:23:9d:b0:
a2:91:68:fc:95:06:33:d1:65:9f:9d:6b:c6:70:d4:
d2:de:67:1f:72:bf:73:46:71:94:8d:91:00:4a:c1:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DD:28:76:55:6E:65:6F:4C:0B:A0:B7:07:72:27:45:A1:E3:3D:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:63:4c:9c:48:48:d3:65:23:b1:7f:05:4e:fc:cf:3d:19:7b:
0e:af:43:c3:fb:39:b2:6f:41:b0:5b:07:37:33:cb:16:68:25:
59:af:b2:b7:a4:95:6b:f2:1b:03:01:a4:15:7e:0a:50:86:76:
ec:57:77:bd:d4:d0:91:32:87:2c:0e:56:3b:74:c4:24:4c:a2:
45:d0:22:46:83:1d:a9:1b:d1:ed:84:25:8a:0c:4c:6e:e6:15:
1a:ba:6d:80:23:1b:01:d1:fc:46:f4:59:fc:0d:b3:41:a3:93:
2e:dd:d3:a6:57:92:b5:a7:12:d3:65:7a:dc:49:79:79:42:14:
89:b5:1a:77:3d:89:8e:2e:0a:3a:60:b5:4e:4b:c5:ad:25:a3:
2c:d0:8c:43:2a:86:5a:c6:09:6a:f0:e6:f2:e3:00:f7:bb:c6:
b2:c0:7a:90:a8:e6:d2:85:ed:07:b5:af:a4:a0:59:59:5d:96:
05:bd:30:85:a3:98:9f:fc:95:3c:59:71:19:5c:9a:38:ab:aa:
c8:d3:68:ca:50:c6:4e:9c:0d:83:ed:fa:43:cc:39:b4:63:47:
b0:d4:f8:38:09:a9:6b:9b:34:65:1a:e8:4a:9f:25:83:3a:5c:
f5:07:c2:e4:14:3b:ff:57:f0:af:7e:e4:10:4e:19:ad:18:ea:
e2:a2:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:04 2025 by rpki-client on console.sobornost.net