Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d410945-00d3-33e8-9750-df14388cbd3a.roa
File: 3d410945-00d3-33e8-9750-df14388cbd3a.roa (raw, json)
Hash identifier: iQokKa1dFjzehwJFbTZ7KUM+3VBwOmrCdLKFz6Zl9Mg=
Subject key identifier: 2D:CC:59:C7:2C:3F:29:E7:AC:5D:2D:61:AF:14:E7:EB:05:9B:0E:81
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AA698F5068F10AE6F97100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d410945-00d3-33e8-9750-df14388cbd3a.roa
Signing time: Thu 20 Feb 2025 18:15:52 +0000
ROA not before: Thu 20 Feb 2025 18:15:52 +0000
ROA not after: Wed 21 May 2025 17:15:52 +0000
asID: 7029
IP address blocks: 98.23.208.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:69:8f:50:68:f1:0a:e6:f9:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:15:52 2025 GMT
Not After : May 21 17:15:52 2025 GMT
Subject: CN=0b5fe896-a7fd-4e49-992e-57b89fbcf508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:f6:fd:35:c8:64:71:f2:46:d0:52:1f:c1:
1d:fd:73:e2:e1:f7:a6:44:dc:1c:56:8c:9f:81:eb:
3d:5f:1f:cd:56:fe:11:8b:3d:0f:f2:6e:80:58:ab:
b9:ff:6f:2f:17:d6:5b:02:3e:84:b9:1e:f6:73:07:
7a:7e:75:51:fc:dd:e3:c4:3a:7d:2d:5d:46:01:a0:
fc:28:34:11:6e:ae:78:d8:ca:f8:59:8e:8a:53:0d:
a5:cc:ae:3c:5b:39:a1:0a:87:65:7f:d4:ad:f2:2a:
24:2a:51:f9:c7:00:47:ab:f6:8d:6b:23:e0:13:75:
0e:7b:f8:69:a3:05:3d:0f:b9:0d:f6:c6:1d:b0:d4:
ee:09:2e:3a:8b:c2:48:2e:ef:1f:2d:ce:0d:52:34:
cc:80:59:ff:e3:0e:45:95:88:f3:51:1a:a2:f0:09:
ef:99:47:b5:6a:a7:be:13:88:d9:5e:44:79:18:6d:
80:8a:3a:0b:0c:b9:fb:ff:e7:c8:71:47:62:1c:b9:
4c:15:86:78:71:37:e2:b6:36:54:80:a3:7c:c6:dd:
db:64:da:50:77:f7:28:a7:1d:df:e8:5c:9a:18:e1:
f1:c6:ce:dc:23:59:31:3c:f8:6b:7c:e7:92:ab:52:
a7:9b:be:10:8f:6a:d2:15:13:64:26:62:6c:7b:e9:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CC:59:C7:2C:3F:29:E7:AC:5D:2D:61:AF:14:E7:EB:05:9B:0E:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d410945-00d3-33e8-9750-df14388cbd3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:1b:37:37:91:80:fd:85:0a:06:db:38:07:fe:ba:65:04:f3:
c9:bf:00:21:da:5d:04:c6:f2:21:af:53:d4:e0:a1:5d:20:e7:
a0:c8:e2:b2:3f:bf:ab:68:1e:ee:37:dc:54:c2:3d:3a:77:97:
d1:c1:ab:4b:e0:0a:66:c4:15:05:8d:03:92:79:0d:9c:61:8b:
bc:81:33:38:b0:a5:53:81:26:3d:5d:74:fd:cf:08:00:29:20:
9c:93:54:93:61:a4:01:dc:12:4b:f3:7e:30:08:60:90:c6:28:
0d:86:b3:d6:ea:e6:b1:89:5c:4e:0e:c7:a2:69:21:80:72:eb:
3b:e2:89:ba:c3:e3:e2:a5:59:ed:d1:9d:36:f2:69:8e:ed:a2:
36:cb:68:d0:e9:ce:cc:8f:a6:7e:65:a7:2a:1e:0b:b6:5e:3d:
d5:df:28:12:3c:76:67:07:68:5e:98:1e:58:a1:39:66:04:6c:
a6:47:78:4e:00:ee:11:4e:da:ee:46:1a:df:12:f4:b1:2f:df:
1b:e1:28:e2:6c:21:09:16:b0:8c:ec:46:e2:ab:08:f3:c6:70:
af:5a:87:85:58:4f:68:d7:36:bb:dd:97:30:8e:7e:bf:ea:fd:
41:d2:2f:a8:a0:5a:34:95:bf:b5:ab:66:fd:69:1c:af:b7:0f:
c6:69:b7:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqmmPUGjxCub5cQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIyMDE4MTU1MloXDTI1MDUyMTE3MTU1MlowLzEtMCsGA1UEAxMk
MGI1ZmU4OTYtYTdmZC00ZTQ5LTk5MmUtNTdiODlmYmNmNTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuH2/TXIZHHyRtBSH8Ed/XPi4femRNwcVoyf
ges9Xx/NVv4Riz0P8m6AWKu5/28vF9ZbAj6EuR72cwd6fnVR/N3jxDp9LV1GAaD8
KDQRbq542Mr4WY6KUw2lzK48WzmhCodlf9St8iokKlH5xwBHq/aNayPgE3UOe/hp
owU9D7kN9sYdsNTuCS46i8JILu8fLc4NUjTMgFn/4w5FlYjzURqi8AnvmUe1aqe+
E4jZXkR5GG2AijoLDLn7/+fIcUdiHLlMFYZ4cTfitjZUgKN8xt3bZNpQd/copx3f
6FyaGOHxxs7cI1kxPPhrfOeSq1Knm74Qj2rSFRNkJmJse+lhRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3MWccsPynnrF0tYa8U5+sFmw6BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Q0MTA5NDUtMDBkMy0z
M2U4LTk3NTAtZGYxNDM4OGNiZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcbNzeRgP2FCgbbOAf+umUE88m/ACHaXQTG8iGvU9TgoV0g56DI4rI/
v6toHu433FTCPTp3l9HBq0vgCmbEFQWNA5J5DZxhi7yBMziwpVOBJj1ddP3PCAAp
IJyTVJNhpAHcEkvzfjAIYJDGKA2Gs9bq5rGJXE4Ox6JpIYBy6zviibrD4+KlWe3R
nTbyaY7tojbLaNDpzsyPpn5lpyoeC7ZePdXfKBI8dmcHaF6YHlihOWYEbKZHeE4A
7hFO2u5GGt8S9LEv3xvhKOJsIQkWsIzsRuKrCPPGcK9ah4VYT2jXNrvdlzCOfr/q
/UHSL6igWjSVv7WrZv1pHK+3D8Zpt1w=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:04 2025 by rpki-client on console.sobornost.net