Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82baf898-a085-3f00-9524-75dcd6077316.roa
File: 82baf898-a085-3f00-9524-75dcd6077316.roa (raw, json)
Hash identifier: 5/Ze/4qshEc8DI00SXuO2KWEHcbCufD5Yujr6jkgfR8=
Subject key identifier: 29:DC:07:9F:29:3C:9F:7A:D4:1D:D9:EE:38:8C:2D:22:CC:52:6F:7A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858496A19B3DCDC0F5DDF1DE94900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82baf898-a085-3f00-9524-75dcd6077316.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 7029
IP address blocks: 98.22.180.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:b3:dc:dc:0f:5d:df:1d:e9:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=64653ecc-aa26-4ec3-ab8a-5c0ffede25dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f6:02:05:3a:08:e4:f2:f1:54:43:7e:e2:4c:
59:ed:72:9c:73:70:8f:dc:a2:4d:4f:fd:26:3d:58:
3e:34:0c:24:2a:c1:7b:33:27:f1:de:cf:ce:57:29:
90:34:87:71:a6:cd:fa:59:d6:30:a8:1e:f1:83:64:
3c:cd:b7:3e:3f:6e:3a:f6:3e:da:db:4a:ee:c8:72:
6a:c3:e6:2e:f6:3c:3d:b5:a9:4c:6c:73:c8:b0:45:
60:04:b0:1c:b2:a1:9b:60:ea:1d:36:07:25:cc:12:
23:23:60:65:1a:ab:29:52:84:8b:0a:d6:94:8f:2a:
ff:42:07:f1:ad:7d:3f:ad:e1:bd:ca:07:74:c7:23:
83:da:31:36:48:86:6e:3e:17:44:15:0e:d7:a5:e5:
46:4f:6c:82:f9:1c:cc:93:26:ab:8c:77:22:1c:fb:
26:8c:31:a9:ff:16:e9:2b:32:c8:be:36:0e:d4:bd:
de:e4:5a:2a:d1:35:9c:83:2f:0a:31:82:86:56:77:
06:d9:f3:1e:90:2b:da:2b:9f:5e:80:13:7b:c9:15:
91:26:e2:39:3c:31:69:0d:88:e7:08:82:6b:05:d4:
aa:de:24:0b:8b:0c:0e:54:eb:87:f8:c0:61:a8:c6:
f4:88:26:54:b4:f4:83:3f:8a:e8:3b:82:05:d8:7f:
d7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DC:07:9F:29:3C:9F:7A:D4:1D:D9:EE:38:8C:2D:22:CC:52:6F:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82baf898-a085-3f00-9524-75dcd6077316.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:aa:f6:62:59:78:e9:85:5e:cd:70:83:d7:d3:5f:c6:87:81:
3c:dd:a8:fd:bd:a4:d0:01:ba:37:ab:76:12:8f:0b:ff:a7:76:
b9:43:79:46:51:69:28:93:0c:68:f4:4e:b3:0e:74:da:7e:bb:
6e:bb:f8:4d:67:e2:1d:24:f9:a6:f8:b4:1d:87:32:41:48:e9:
4e:e9:e4:b4:90:ba:0a:d8:d4:7d:c2:8f:a5:ca:78:9f:06:90:
62:cf:e1:5b:f4:9e:57:67:04:2b:1d:d0:61:d3:0f:75:ef:8f:
11:2c:55:69:93:d5:7a:d5:e7:d8:61:b9:7d:01:de:90:a3:69:
b3:3d:18:bf:c9:d2:38:e8:9c:1a:32:c5:bc:7c:57:c6:07:e6:
93:76:3a:6e:df:bd:e0:e8:84:a0:5b:66:b2:ec:5d:3c:73:9e:
6d:da:af:e1:c5:3d:d4:32:e4:7d:ba:dd:51:16:ff:1f:a5:d3:
06:ec:60:3b:16:8a:80:f7:71:b4:bb:14:75:c6:f3:c2:64:47:
bf:0e:38:c2:d7:3e:7e:9c:b4:a5:66:a8:6f:2b:4f:1c:58:5d:
88:9d:a9:06:49:39:58:a9:20:e1:9f:06:92:34:84:41:75:70:
98:6c:44:51:d9:e7:5d:ec:2f:23:e4:e6:21:59:e2:46:22:7b:
70:8c:d5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:07 2025 by rpki-client on console.sobornost.net