Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa
File: 871d8d50-3938-3054-a9bb-27338048e4d9.roa (raw, json)
Hash identifier: QxNdFVb7wW5sVQ0T8NfzNngYhTtj55JB4L8HeVSKbDY=
Subject key identifier: F9:F1:BD:C5:E3:97:16:E8:F9:E2:0E:FF:CF:86:A9:A7:5A:E9:A7:CA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D0ABBF8CD98011DC7497CD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 7029
IP address blocks: 173.213.144.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:bf:8c:d9:80:11:dc:74:97:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=5b3727e0-930d-4c6c-8509-48ddcb8bba8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:d9:ab:27:4b:00:23:7b:dd:e3:73:18:16:
7f:e1:f7:b0:70:cc:de:b5:b9:09:75:89:0f:0f:b7:
ac:a4:86:51:e5:06:8d:2c:c6:03:87:5c:b4:21:7a:
b0:70:79:95:dc:a0:39:61:37:67:5d:b6:02:75:b6:
40:3e:8d:00:c3:32:4a:45:9b:04:e1:ef:26:fc:e5:
f1:6b:35:a0:e9:6a:ca:36:60:1f:eb:28:7b:a7:ef:
84:28:f9:62:fc:eb:be:01:05:e7:c2:e6:6e:9e:3d:
89:f6:d1:e8:b4:72:d5:60:5d:71:a0:4b:8b:9d:19:
23:f6:3f:71:09:a8:aa:ae:32:60:24:25:4d:0e:60:
71:3d:da:96:12:b5:64:e9:0c:37:9a:e4:bd:da:8d:
e2:2b:f9:65:5b:03:45:23:e2:a1:c0:c6:df:c9:04:
42:71:80:bb:ff:84:a0:03:d9:55:b0:18:ba:ea:1f:
53:7b:34:c1:cb:ba:48:e0:12:11:c5:17:0a:78:78:
bf:0f:e1:d8:7e:dd:df:6b:1e:dd:54:4f:d6:ff:a2:
1b:ca:c1:b1:88:14:61:47:68:85:c4:91:a2:78:38:
3c:b5:26:07:f8:53:73:e2:dd:32:b1:51:5d:93:8b:
4e:19:93:78:bb:6d:62:a9:df:8b:98:cf:93:0e:0f:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F1:BD:C5:E3:97:16:E8:F9:E2:0E:FF:CF:86:A9:A7:5A:E9:A7:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.213.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:a2:75:35:21:36:4f:e0:74:7d:f4:36:b7:6b:19:a4:59:19:
46:af:0d:2f:88:b5:92:51:0c:07:47:78:f4:56:05:58:2d:d4:
f3:ee:bc:05:ab:52:38:cf:e8:01:cd:4f:4d:1c:2a:02:c9:f5:
b3:6d:8b:70:9d:4f:bd:0d:10:9a:77:9c:f3:fc:8f:5a:84:95:
4e:de:bf:30:10:48:ff:3f:87:e4:a9:ed:ed:65:21:ba:8b:49:
88:91:8c:6b:f2:74:ca:e0:6b:ff:63:a8:5c:54:d6:1d:4d:c4:
e1:d3:4e:f6:c2:19:3b:6c:da:97:1a:05:fb:5a:ae:3b:5d:af:
2e:fc:a8:13:cb:a1:d2:89:4f:68:83:cc:34:37:30:76:99:a5:
08:00:36:cc:3e:da:2b:60:0a:0e:4b:cc:8e:3c:37:ed:61:d7:
ac:92:b2:54:6c:1a:29:57:7d:c8:3b:64:ca:cf:d4:0d:54:42:
61:92:84:29:29:1f:7c:16:6f:58:4f:31:74:b1:5b:63:90:0b:
0a:93:b4:45:15:df:96:5f:ab:55:92:ee:ae:8a:c9:45:d2:81:
18:7e:ac:4f:84:d7:e4:1d:27:6a:9b:10:76:dd:0a:4b:04:7a:
46:7b:bf:42:a6:ba:a8:c6:81:3a:86:a9:00:f6:f4:c7:94:b3:
af:99:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:07 2025 by rpki-client on console.sobornost.net