Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/705ba21e-07be-33a8-a79d-3a77a4020648.roa
File: 705ba21e-07be-33a8-a79d-3a77a4020648.roa (raw, json)
Hash identifier: HMKtZvkSRQVvVqNL3upCbK2eaasCdRGzzYw6B9nWxXk=
Subject key identifier: 80:5B:B8:A7:6F:3A:37:60:5C:B5:E0:F8:99:D6:38:94:F1:BD:51:38
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285849780F1EE97B67268341028E40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/705ba21e-07be-33a8-a79d-3a77a4020648.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 7029
IP address blocks: 98.23.244.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:1e:e9:7b:67:26:83:41:02:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=77a1f35d-a17f-4494-ac18-1d572e68639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:69:1c:5f:a6:ff:4a:a0:d2:1c:5c:fd:e5:
57:b8:be:cb:3d:7c:78:07:3f:c3:77:0a:c1:70:a8:
19:f4:c3:b1:0f:45:b7:b3:6e:d3:f1:13:71:37:89:
31:ca:db:93:73:dc:09:f2:96:a0:e2:e9:e5:dc:c5:
2f:a5:65:6b:0a:69:3a:a8:6f:a2:ff:19:e7:5d:de:
a4:dd:4c:cc:da:f9:e3:9e:4f:ed:ea:0a:b0:f3:68:
9a:68:90:be:eb:4f:a2:d8:bb:6f:d1:41:37:94:01:
71:f2:66:0a:62:a9:27:86:15:7f:0c:cb:c7:c3:09:
7e:16:c3:e6:e1:cb:59:92:17:f8:f1:6f:04:4a:7b:
85:1f:09:d6:2f:91:39:e0:49:d0:c4:93:cd:01:15:
7a:57:66:b8:e6:26:08:6e:b0:c6:8a:dd:aa:13:ac:
81:90:8b:b0:d4:46:7e:6c:9d:43:c5:8f:e3:76:3f:
ba:91:e8:4a:1e:46:13:d3:18:5c:29:09:38:cf:01:
37:2a:2f:f9:f8:5a:f1:8f:6f:62:28:7f:6a:6e:31:
31:92:d7:7e:7d:a2:52:27:ef:a0:c8:4c:08:db:42:
16:90:8c:2e:2a:05:b7:64:99:90:c3:4c:fd:39:67:
ce:3c:3a:f3:49:e7:ca:8b:52:dd:f7:7d:f9:f1:3d:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:B8:A7:6F:3A:37:60:5C:B5:E0:F8:99:D6:38:94:F1:BD:51:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/705ba21e-07be-33a8-a79d-3a77a4020648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:b3:e4:7a:a7:86:fa:87:5b:2c:f8:59:b6:a1:3d:9b:28:71:
ec:37:5a:66:61:e0:b2:fe:86:0b:ec:30:b8:a5:93:d8:f3:d0:
5c:7a:fe:c8:96:74:a9:5f:86:b8:06:6f:25:3e:5c:cc:3e:c5:
75:7a:18:fb:2c:44:67:92:a5:f7:96:4f:b7:50:ee:0f:78:c1:
09:ea:d0:d2:17:34:a4:1d:cb:b4:69:b5:01:42:37:82:f7:56:
11:91:a5:ae:d5:e0:86:ed:84:ed:81:68:f0:dc:28:f2:93:05:
76:df:78:34:f7:8e:3a:6e:22:79:07:2f:41:64:7c:09:28:d9:
63:8b:e2:aa:e8:c1:8c:c5:ad:47:67:2f:be:e0:59:b5:e6:c5:
20:1e:d7:81:29:94:3a:fd:b5:16:79:8e:e9:c7:7f:df:8d:f2:
2d:03:59:12:bb:5b:2e:c3:7f:b6:c2:0d:77:33:3e:8b:8b:76:
f8:d2:c1:4e:3e:19:d8:31:80:68:b4:11:0a:9d:5d:e6:24:48:
12:a7:a6:35:34:55:35:b4:74:6e:65:76:5d:d9:82:67:18:d7:
eb:3d:12:ae:4f:7b:e4:fa:b4:1c:68:04:0f:ee:1c:82:4c:fe:
53:43:a9:e5:cd:8d:46:6d:57:b2:fd:ac:79:e3:17:b8:f6:90:
e8:4b:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:06 2025 by rpki-client on console.sobornost.net