Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa
File: 5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa (raw, json)
Hash identifier: zr51TgHJ8qW+vS+D8Fk2UASH8MvLRKTF7W/22/osugs=
Subject key identifier: 86:60:69:59:B5:BB:0A:2C:C8:E0:43:0C:F7:E8:1C:DE:55:91:C7:B4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285849780F1999E6E8FD3979CDC100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 7029
IP address blocks: 71.31.208.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:19:99:e6:e8:fd:39:79:cd:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=80c9ade2-e04a-449a-bade-f44e84617f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:c6:f9:32:44:02:a2:2e:e8:a3:50:3e:57:
a2:b9:5c:cd:48:7f:66:2b:4f:4c:48:19:3e:ff:73:
fc:3e:5a:42:74:75:1d:42:f7:39:5a:fd:ba:73:35:
e7:ef:8c:1e:fa:f8:c9:eb:c4:f0:52:48:c6:0f:30:
8e:b5:eb:d4:4b:39:1b:ba:b4:e9:6d:a5:57:ce:36:
15:b9:6a:a1:7d:a3:15:ca:5f:88:71:8b:1d:12:ad:
d8:7d:f5:e1:95:58:22:8c:f1:b1:07:5b:84:ad:f4:
c5:92:51:9c:fa:7b:b0:f0:98:52:86:d7:ad:db:1d:
c0:7b:64:c9:15:70:a5:59:72:35:fc:a6:3c:34:05:
f0:0b:fc:3c:1e:58:21:80:98:a7:e9:6e:61:7c:a1:
73:2a:99:49:26:cc:e5:bd:d1:00:fa:65:24:ae:88:
bc:e6:4b:96:4e:b4:c0:09:d6:9e:e5:58:27:5c:fc:
b5:07:9e:07:bf:af:a0:c3:bf:95:ff:91:02:1e:f8:
91:23:0a:4a:bc:e9:5e:5c:33:4f:b2:7c:4c:ac:1f:
84:51:cc:38:52:27:a4:b5:d9:01:a9:c3:b6:9e:3d:
b0:c5:bb:19:eb:0c:d2:c2:fc:11:d8:71:eb:d3:22:
aa:e9:e2:cb:87:00:b4:86:e8:1d:5b:61:fa:83:57:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:60:69:59:B5:BB:0A:2C:C8:E0:43:0C:F7:E8:1C:DE:55:91:C7:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b7:cb:79:b3:d9:5c:4a:49:65:cf:d9:9e:3b:12:f2:1c:25:
79:44:eb:db:3c:e2:42:41:de:ef:1c:ae:f9:0f:1a:f8:a8:f8:
af:e2:89:61:a0:86:bc:08:5d:c3:47:05:c9:e5:d3:09:2d:76:
dc:97:b1:9d:3d:de:e4:dc:24:a7:93:64:03:d9:87:b5:9d:80:
b0:1d:40:1c:11:c6:a4:05:de:42:63:8b:b3:ed:e5:d6:8a:8a:
c1:ae:0b:da:f6:5e:b4:3a:9c:68:58:db:4e:a1:c5:3d:97:f4:
fc:71:65:3a:1e:9d:90:10:9d:a1:b0:aa:00:b4:a6:ce:d4:ef:
b4:54:f5:d1:66:8b:aa:55:27:d4:69:9c:cd:fa:08:ff:03:01:
14:82:14:c2:b9:bd:38:b3:e8:12:ef:06:3f:c4:67:19:ee:4e:
12:a3:4b:c3:ae:97:2a:c2:83:7a:b9:88:30:37:0a:f4:e2:a9:
d1:91:c2:b2:1e:70:0b:ef:5e:08:75:a5:ba:d7:f1:1c:46:46:
6f:8b:74:6f:f7:bc:71:46:66:14:98:95:8b:66:3a:75:8a:71:
64:52:eb:18:c9:36:5a:19:d2:5d:48:76:09:ff:12:b8:85:11:
49:da:6e:1a:d3:32:6a:ac:91:d1:52:fd:24:8c:17:0d:18:85:
77:8c:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:06 2025 by rpki-client on console.sobornost.net