Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa
File: 4c0a3825-9f11-31bb-9289-dde54bd64525.roa (raw, json)
Hash identifier: t898gSshqfw0v8UP74UdVQtqZFYMbPt/dbeqh8XtM7M=
Subject key identifier: 84:00:A6:C3:48:E5:46:7F:A2:96:84:AC:26:A7:30:D3:29:9E:5C:90
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858494CC953142187475912786A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 7029
IP address blocks: 66.19.208.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:53:14:21:87:47:59:12:78:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=1edcfa34-36e7-4272-97d5-c59430a2c9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:36:ae:72:b5:ba:4b:5d:bc:5e:6b:ea:60:
07:8d:21:eb:18:59:dc:8c:05:dd:21:9b:11:4c:f5:
9d:51:5f:7b:be:a1:86:ed:24:8a:67:74:61:1d:56:
f8:fb:cb:59:bf:59:53:6b:84:40:d7:63:34:da:67:
6f:53:4e:b4:98:8f:54:28:a6:08:ff:63:ec:bc:9c:
cc:65:d5:f1:52:95:fa:71:a6:0d:ca:ea:e7:c3:f0:
b7:c4:4d:ef:3f:dc:96:f6:fc:7a:54:80:52:8e:d1:
a1:de:cc:4c:df:2d:97:cc:a9:3d:f8:e2:5b:77:a3:
67:7a:9c:ca:9e:a5:49:77:2c:bb:a5:d3:b6:ea:70:
a5:2c:95:5f:1b:94:40:65:0d:17:f7:1d:01:09:ca:
c5:37:79:b6:ea:ff:2a:b1:f8:db:f2:36:13:78:2a:
a7:6b:6f:5e:e7:f0:26:39:f0:73:c7:8c:04:08:88:
33:28:23:fd:42:5d:93:55:7b:5a:7d:1e:59:93:1b:
61:b9:e0:bc:c3:6f:b1:4e:6a:22:e3:cb:b4:59:3c:
69:c2:b7:2a:f5:61:6d:b2:63:98:a2:ca:47:6b:7c:
8f:aa:7d:5c:28:39:ef:2e:ea:a6:1f:53:30:2f:27:
6b:c5:5d:1f:92:a3:ea:0f:97:f1:32:14:a6:b2:5f:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:00:A6:C3:48:E5:46:7F:A2:96:84:AC:26:A7:30:D3:29:9E:5C:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.19.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:d7:cc:f3:1a:3b:6f:ed:f0:15:c1:ec:11:d5:55:68:dd:e4:
86:53:c8:80:79:e1:ba:f3:f3:0b:ad:e3:26:6e:94:02:0a:11:
ef:91:b3:24:11:62:b1:37:a2:23:2e:a4:5f:60:81:de:a6:85:
77:86:ae:84:99:d7:7d:e8:aa:85:9d:e0:5b:23:20:20:02:ba:
a8:ad:f3:75:7b:3a:8c:0e:37:10:61:32:c5:ac:35:e2:02:fa:
f6:e7:46:7b:e9:d4:7a:91:d7:b8:09:93:51:34:50:9e:4b:33:
30:d1:a4:f9:d7:31:77:e5:fc:e8:da:97:1a:1e:08:6e:7f:76:
16:e8:fd:2d:3d:25:42:ae:2e:94:63:d2:83:95:48:26:65:ae:
64:2c:03:28:32:f9:b5:1f:23:78:a4:00:fb:e1:bd:1a:21:46:
25:f9:69:b6:37:00:70:eb:e4:7d:c2:c1:8d:16:9d:48:7e:7b:
a9:33:72:15:24:97:b3:38:71:5f:82:a0:89:d8:11:28:85:25:
67:72:48:8d:a9:91:a7:86:45:df:c0:fb:86:0c:5e:f3:f8:2e:
34:6e:ae:58:b6:75:43:ef:e1:9e:69:5e:63:8a:c1:7b:d0:16:
7b:de:19:48:57:14:a3:9e:f0:33:be:bd:cc:e3:06:8f:01:12:
9a:d2:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:05 2025 by rpki-client on console.sobornost.net