Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa
File: a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa (raw, json)
Hash identifier: fSkdhlDh21mgakrfmEVUEZ5t1fomb34ddxP8XmxMeZE=
Subject key identifier: 85:41:13:AE:2F:BA:BE:2B:35:44:27:1E:48:24:C6:CC:92:B1:59:8A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CDE11CF0144387F2D9C35FC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 67.140.88.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:1c:f0:14:43:87:f2:d9:c3:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=2a1c5de5-a08e-402f-897d-78f8f50526a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:34:88:8a:1b:e0:a1:27:1a:f3:ee:fa:5c:
64:bd:00:d2:af:31:c3:9c:7a:b0:c5:42:89:33:60:
75:23:da:07:ca:0c:c5:8c:9e:d8:7f:c9:c9:0c:2b:
20:ba:9e:0b:67:ac:d0:c9:55:47:4b:e9:5f:9d:89:
93:a4:e3:d7:b8:b1:a7:52:c5:37:dd:8f:64:fc:e1:
91:92:ed:62:e9:c0:af:fa:ea:d4:23:10:9e:0b:22:
b6:e6:d0:3d:86:1f:72:a4:51:3e:f5:fb:6f:9e:31:
a6:90:f3:e3:ca:34:22:21:8c:8b:bd:04:1d:b0:ca:
c2:d6:6d:e5:a9:69:1e:d8:ae:6b:76:1f:43:20:0d:
eb:05:29:5a:49:79:46:c6:75:08:09:bb:8c:03:65:
10:5a:66:a8:95:1e:75:3b:18:98:ad:36:e3:ee:82:
ba:66:8f:56:03:f6:eb:7b:87:b0:cf:12:58:ee:1a:
b5:88:d8:c2:35:19:64:55:fe:51:e8:ca:dc:21:e2:
be:dd:31:c2:06:f1:97:de:2e:cf:50:72:fc:1f:0b:
e1:80:9d:4b:15:01:f2:d9:57:0a:82:7a:87:95:6d:
0b:4e:e6:bd:a5:d7:f2:9a:67:5a:4c:de:70:89:29:
8f:d9:40:2d:94:c2:90:c8:10:c8:3c:1e:6c:26:b9:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:13:AE:2F:BA:BE:2B:35:44:27:1E:48:24:C6:CC:92:B1:59:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.140.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a8:b8:40:23:a6:43:1c:b2:12:1f:a1:4a:02:34:a6:2f:37:
53:2a:65:a6:37:82:fb:e2:50:94:e5:58:b3:c0:15:96:ad:a3:
f7:71:93:10:64:d2:4b:f9:4c:04:10:a8:07:68:cb:1b:51:7e:
d7:37:56:8d:c2:18:8b:87:66:79:71:7e:95:fa:00:ea:a3:23:
e3:1c:90:f3:1e:48:ec:7c:99:6a:44:2f:94:07:a1:6c:81:4b:
db:97:30:bc:82:c2:2d:a5:2b:97:89:12:26:3c:78:42:69:72:
a1:f8:5b:10:c9:cb:b0:d5:a2:2a:6a:ac:f6:dd:5b:66:5e:1d:
45:47:5e:63:48:4b:c0:f6:b8:6a:01:20:b5:2d:ea:85:ab:1c:
91:66:73:77:e4:d1:cb:16:b5:b7:f8:d0:91:e2:f8:a4:94:b8:
30:cd:c2:0d:16:15:11:25:37:27:17:ab:1f:8f:44:70:be:fe:
08:4d:28:d4:76:e5:16:fc:a5:e9:d9:ca:7a:19:8b:b8:45:5c:
5c:a6:a3:2d:dd:96:a3:e6:b5:b4:4e:83:7a:75:a6:7f:24:cd:
b4:af:d8:80:cb:e0:8d:fd:c4:1f:e7:65:fb:4f:7a:89:cd:54:
77:44:f8:d7:b1:79:a3:5d:e4:4d:6d:58:48:54:57:78:20:d9:
bc:10:42:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:08 2025 by rpki-client on console.sobornost.net