Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa
File: 43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa (raw, json)
Hash identifier: DFgbAhJBChiXaNGFu10Ilbl57+vJ+hQaBlpeNw3/8L4=
Subject key identifier: 83:DA:57:9E:2F:5B:47:5E:26:E0:6E:0D:1E:DB:30:37:45:B9:3E:2C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210EB7FBFFF996260AA3300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 64.206.223.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:eb:7f:bf:ff:99:62:60:aa:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=2de57da1-ac8a-4c42-8332-f7823ed420e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:11:bf:cd:bc:25:7b:03:27:0a:79:10:c1:
92:fd:18:5f:22:05:33:0c:01:db:fa:b5:dc:70:55:
65:24:28:51:c3:37:28:df:fa:3c:70:15:d4:b5:97:
5d:fd:86:a0:8f:3d:1d:76:f8:d6:94:de:0b:be:45:
56:06:9d:f5:1c:a9:fa:ff:6c:5f:d3:2c:8a:09:53:
1f:19:39:38:68:ce:3a:fe:b2:d3:67:57:b7:ca:98:
0f:0b:6f:a2:92:54:df:e1:64:2f:b9:4e:37:1b:9a:
a7:61:0d:a6:c2:ab:56:85:43:92:ac:c1:ac:37:97:
ea:f0:8d:80:1c:35:37:01:a3:d5:25:1a:5a:db:7e:
bd:a6:fc:0f:75:f9:db:c3:f5:7c:36:e7:3d:59:c4:
46:e6:f2:bd:0f:df:c8:2b:e9:62:ac:51:4c:59:9c:
02:92:e9:7e:da:93:d6:3b:ec:f5:41:93:6f:c0:0a:
50:36:9b:1e:ac:6f:1d:ee:2b:79:c3:1a:f2:14:eb:
cd:b4:a6:fc:82:fe:75:c7:1d:da:01:3a:75:5b:68:
d5:6d:fa:db:50:95:56:f4:9d:3c:e3:41:70:1a:6e:
88:b2:5a:8e:2b:10:42:3c:e9:db:4a:d6:6c:6c:99:
b8:d5:36:80:42:62:ed:cf:66:04:97:7e:65:e2:3f:
04:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DA:57:9E:2F:5B:47:5E:26:E0:6E:0D:1E:DB:30:37:45:B9:3E:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.206.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d8:53:60:b7:d1:6b:a3:34:5f:19:27:38:ef:ee:cc:29:72:
c6:5e:ab:84:65:4e:3a:2c:f4:33:38:f2:72:ac:2f:6c:34:bd:
ac:95:1c:57:f6:88:73:07:49:fc:b0:6d:83:39:e5:81:5e:dd:
a7:82:b0:f8:ce:55:51:f4:48:27:6c:44:ca:6b:93:eb:76:14:
e5:50:0a:41:b6:4e:08:66:ac:fd:fc:1d:dd:53:66:8e:cd:32:
d3:d2:c2:81:21:f5:9f:72:a9:19:24:83:c8:37:aa:4c:8d:00:
26:e8:37:1e:fa:62:c0:e3:b2:71:c9:d0:f6:44:c4:60:7f:3b:
63:9c:a6:1c:2e:e5:4f:f2:bc:c1:c1:4e:52:63:ea:04:8d:a3:
83:12:4a:17:91:f3:4f:fa:95:bb:54:f2:56:77:b5:ce:fb:9e:
f9:69:08:25:2f:cb:35:76:89:cd:be:c5:af:e6:ad:c0:26:ce:
e6:46:d7:34:c0:6d:81:a4:dd:33:b6:4a:06:5a:cb:2a:cc:af:
04:8c:19:9b:2b:b3:90:18:6f:a0:8b:d5:2f:da:48:c2:a0:aa:
62:05:52:c0:60:42:e9:3e:06:f9:a8:65:fd:5a:81:b8:da:6f:
02:76:b9:f6:6f:fd:51:67:34:53:e2:35:93:df:33:d5:3d:84:
d6:7d:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:04 2025 by rpki-client on console.sobornost.net