Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48a5ff49-8972-3952-98dc-c337903c0585.roa
File: 48a5ff49-8972-3952-98dc-c337903c0585.roa (raw, json)
Hash identifier: 5U0BIxkuVPPonDpB4CXi+3w19X5UmN0Maw+O/JBgSX8=
Subject key identifier: 10:68:14:33:06:23:2F:55:CF:63:65:FF:B7:D4:95:41:79:7E:C7:A7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F5A6928E6BC055123740
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48a5ff49-8972-3952-98dc-c337903c0585.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 173.191.104.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f5:a6:92:8e:6b:c0:55:12:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=d6533769-156e-4c41-abc5-900eec2ce764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:a1:e2:cc:a5:47:35:ec:2d:98:c9:04:a7:
e2:40:ec:c6:9c:95:e4:3c:f1:68:82:94:6e:60:9c:
4b:59:4f:63:3e:e6:b7:59:99:43:cf:30:bb:dd:22:
ba:b8:38:c7:fe:70:53:b4:85:cc:20:ea:52:16:9d:
0b:f5:dc:8a:06:d9:74:ee:9b:41:ca:3f:cb:b0:04:
f4:61:cc:d6:c0:09:77:fb:87:d8:26:ba:77:be:c4:
35:50:9a:2d:2c:73:9a:54:fe:8b:3d:f5:7a:da:77:
67:fb:a1:4c:7f:79:7b:99:1a:b6:00:75:51:4b:e7:
6c:f8:84:1e:7f:4b:60:8b:19:41:9e:c0:c1:24:bc:
ca:fc:b0:7e:f3:f6:c5:94:8e:13:93:5e:6d:35:cf:
61:b1:e7:54:4f:df:0d:1a:ad:29:98:b6:1b:de:48:
67:e5:70:37:49:92:1d:fa:a9:d3:bd:a4:02:ae:9e:
30:1d:5c:d1:4a:c9:40:13:5f:46:dd:60:5d:45:4d:
53:49:9f:f8:4f:e6:f1:4e:c4:b8:09:2f:e3:66:03:
09:d4:46:a8:49:54:7e:4f:bd:12:bf:5f:85:83:39:
a8:0b:d0:b4:a0:04:a7:9b:cb:a2:ef:af:17:02:aa:
4e:28:0b:14:7f:25:1f:f9:08:80:7e:b1:4d:54:4b:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:14:33:06:23:2F:55:CF:63:65:FF:B7:D4:95:41:79:7E:C7:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48a5ff49-8972-3952-98dc-c337903c0585.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:38:da:22:80:8d:8d:3a:81:94:18:37:6b:80:72:76:6b:e7:
4e:ab:a4:c4:3e:bc:f6:be:d8:3f:14:f5:f8:e9:bd:c4:a1:b8:
f3:0e:08:7c:1e:86:00:06:63:94:ba:c0:a7:53:87:7b:d1:0c:
e6:5d:c9:ed:4d:13:59:56:76:43:51:2d:00:0f:78:c5:fb:53:
bd:2f:19:56:1e:d9:f2:d5:e7:6f:95:c4:2d:f9:52:35:30:6a:
9f:04:55:f2:db:ca:10:34:01:20:aa:9c:2e:dc:ac:4f:cc:b2:
bd:68:b8:c1:59:f9:e1:5b:e9:88:51:3e:d6:10:77:ad:50:d0:
50:f3:08:ee:cc:51:dd:a0:17:fa:f5:6c:03:1f:a3:e4:7c:2e:
2e:a5:13:38:7b:7c:93:6a:89:18:0f:e3:d0:85:6b:3c:76:3c:
ee:0a:e8:92:34:73:9e:15:09:e3:b0:a0:ce:be:90:1d:c2:b0:
35:2c:cd:b0:8d:61:71:61:67:5e:12:31:e4:bd:0a:65:c4:6a:
70:21:00:62:54:e8:56:fe:27:68:44:11:25:b2:92:ff:f8:b2:
bb:40:55:88:86:dd:9f:b0:1d:c0:15:46:05:66:c0:7d:ec:e5:
f6:0d:e1:c1:ca:17:27:1a:6f:61:5c:f9:ae:34:4f:b1:78:49:
30:f4:ca:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:05 2025 by rpki-client on console.sobornost.net