Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1a55b-69f2-3aea-b493-cb40144517d7.roa
File: 45e1a55b-69f2-3aea-b493-cb40144517d7.roa (raw, json)
Hash identifier: 9d3l3z4oy3h1kUZYhoJUtNDXdsN/bUGuEnieG+vgoEs=
Subject key identifier: E4:BF:79:51:99:23:34:E3:BF:E8:82:A7:2B:A1:6D:3C:EB:FA:8A:8C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210EB6E622F8EAF92AF48C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1a55b-69f2-3aea-b493-cb40144517d7.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 64.196.201.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:eb:6e:62:2f:8e:af:92:af:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=c6f2f4e2-771a-4fce-9d22-7dbe2e4adb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:70:7a:86:1b:e3:99:36:7e:0d:62:60:73:
cf:1b:0d:17:1f:8e:94:04:bb:17:01:f0:90:ee:ac:
f6:f0:7d:51:ef:c3:a0:c6:ba:ec:90:1d:9d:0e:bd:
df:4f:9c:3b:71:0c:b1:71:9c:11:fd:eb:4d:c0:c5:
e3:ca:8e:e1:41:80:d3:5b:79:7a:f7:48:6c:2b:e5:
7b:5a:98:3a:38:04:84:63:79:8a:4c:38:51:58:35:
ec:c9:fa:29:67:e9:df:36:26:7b:91:4f:5d:86:6f:
0f:2b:59:4c:de:d4:64:9c:05:b1:bc:b8:f2:3a:6f:
cb:54:4d:4a:0b:56:e8:7c:63:cb:1a:a7:7c:be:97:
b5:ba:b5:fa:85:91:da:41:96:00:7c:6d:69:42:ee:
6c:73:c5:a0:5c:6c:70:ee:5f:f4:85:c3:a0:83:28:
fa:21:ff:17:fd:97:80:a5:37:2c:36:ed:85:3c:9d:
e1:a1:ec:07:6b:e5:45:5c:0b:5b:10:5f:8e:6d:c8:
e4:49:9a:2f:01:30:6f:7f:d6:03:7f:d3:e6:6a:88:
30:d7:5f:48:78:99:4c:0b:93:a4:93:bd:6b:80:76:
a2:02:88:28:fb:6b:8e:d7:54:d0:be:55:75:4f:51:
20:94:fa:f8:18:2f:11:83:1c:39:09:8e:05:67:c7:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BF:79:51:99:23:34:E3:BF:E8:82:A7:2B:A1:6D:3C:EB:FA:8A:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1a55b-69f2-3aea-b493-cb40144517d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.196.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:15:e9:00:1a:61:c3:31:8d:82:f5:bc:68:a4:a5:07:e3:1d:
6e:28:91:37:54:fc:a0:a2:7c:c1:74:ff:b5:7a:17:bb:4a:ec:
03:01:4a:cc:d6:89:15:ac:c9:a8:8a:2e:92:9c:52:d2:1c:d4:
8f:81:6a:29:ca:b6:be:c1:fe:25:6d:4f:51:87:3e:c6:4c:1f:
63:6f:89:ae:1e:0f:50:1e:fe:9a:4b:06:82:e1:10:2c:8f:ff:
00:72:13:6a:b9:90:11:0f:93:ce:3e:10:70:74:f9:45:ff:26:
b2:ba:a8:b5:5a:ac:9b:27:28:b4:cb:ed:7a:18:29:6d:d3:06:
4b:fa:26:29:cf:5f:67:5f:e5:d2:b9:74:ae:da:35:52:70:f5:
72:24:65:81:24:32:d4:3f:a9:e6:de:27:cb:40:08:8e:49:39:
6f:e3:86:ae:d4:d8:7d:a3:9d:5d:57:42:f5:4d:d4:26:65:21:
f2:02:86:30:dc:64:1a:90:fb:ed:db:6c:a0:50:09:aa:71:e2:
b2:c2:b3:2a:57:58:26:bd:9e:e1:7d:2a:bf:4a:0a:25:cd:53:
10:29:e3:bf:18:6e:18:0f:d9:14:e4:fd:b6:6d:82:3f:3f:a7:
38:8e:04:b0:05:52:f7:69:3c:35:86:c2:cc:82:60:e8:fb:af:
ce:df:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:04 2025 by rpki-client on console.sobornost.net