Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa
File: a1a78e31-2fd1-340f-9abd-830bb997d842.roa (raw, json)
Hash identifier: yuWc5aglWw+2g68DC3nI8ZtRwYNM5KTVfhpA6nCMrBo=
Subject key identifier: 6A:E8:EF:68:F9:FE:AB:0D:E3:DF:06:09:5F:0B:56:94:15:A3:66:8F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D716B63143F97D1CE92A004
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.19.0.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:6b:63:14:3f:97:d1:ce:92:a0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=7943b29b-d6c5-487a-b0a3-1eaf0e138c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:04:14:fb:41:78:4e:14:b4:7c:8c:16:25:
63:5e:0c:13:e0:0a:ec:fa:0c:36:29:41:e9:87:ed:
3c:bf:50:f1:9b:f7:77:b0:0c:5e:df:2b:d3:ad:c7:
92:80:6c:19:91:40:40:36:53:bc:4d:24:bc:a8:c0:
53:73:4e:b2:5f:29:1b:02:55:23:d2:86:01:1b:97:
38:f3:7c:34:a6:fd:60:7e:7e:52:3f:8f:85:5e:de:
68:90:7f:c6:12:f5:46:cd:16:28:af:19:0e:60:14:
62:97:22:de:a4:68:b8:42:0e:99:63:65:59:8d:80:
b5:da:a3:a5:56:1f:bf:a9:25:d3:c4:d0:75:8f:8f:
6e:8f:02:a8:4c:d2:45:83:3c:08:06:3f:4f:b0:fe:
58:9b:3b:af:85:47:5a:a8:c9:45:c5:20:5c:3b:96:
54:d1:f8:93:7b:e6:00:2a:98:ae:50:8a:2d:85:7e:
e0:3a:8b:79:f0:a9:56:38:76:2a:9d:ad:15:19:60:
f1:f3:fd:78:f1:d7:7d:79:90:c1:5a:6b:e4:b8:13:
f4:3e:96:60:a1:60:a6:e6:b9:71:ba:01:92:17:03:
1c:53:56:fd:d7:b1:d9:cf:a8:d3:3f:9f:18:b8:3a:
b2:b1:1b:54:c6:8b:39:8a:4c:17:83:29:22:24:75:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:EF:68:F9:FE:AB:0D:E3:DF:06:09:5F:0B:56:94:15:A3:66:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:16:ca:8c:ed:f2:7f:ef:aa:c2:4e:93:ad:48:5f:ba:66:b5:
66:49:ee:31:52:25:36:89:85:8d:bf:3d:d8:c1:57:1b:63:d9:
ca:f7:72:eb:38:aa:d3:15:3f:d9:00:f2:fe:3c:e2:c8:19:aa:
54:d0:3b:10:d5:92:7e:b3:a1:c3:e5:16:cd:71:a7:51:b7:d1:
88:18:6f:db:0e:71:32:c5:a3:4b:4f:80:08:8e:4d:ea:7b:62:
09:f7:0c:7b:46:e4:7e:87:1a:02:ee:42:4b:73:bb:c6:63:cb:
f0:82:36:bc:7c:8b:eb:ee:dd:2e:fd:87:fd:d3:31:df:40:ee:
ff:dd:7e:51:ec:15:90:f3:81:be:8e:ce:99:b2:a6:40:dd:2b:
da:a3:16:08:e8:fb:e3:c8:90:9d:d5:db:ba:75:a8:2b:55:96:
7b:16:a0:b0:17:d1:0a:e3:59:2d:c5:68:b9:a7:0d:20:c3:84:
d0:05:58:5c:8e:ba:d7:5c:2d:49:80:46:ef:a5:aa:59:50:48:
07:35:1f:91:50:b3:c4:80:7d:78:6b:60:d5:4d:7e:ac:f0:7c:
46:80:af:b8:cd:4f:8c:59:a3:6a:c0:7f:57:fe:86:a2:cb:c2:
b0:df:65:cd:30:96:21:dc:c9:71:6f:9b:77:ef:1a:ab:0a:21:
88:62:53:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWtjFD+X0c6SoAQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
Nzk0M2IyOWItZDZjNS00ODdhLWIwYTMtMWVhZjBlMTM4YzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos0EFPtBeE4UtHyMFiVjXgwT4Ars+gw2KUHp
h+08v1Dxm/d3sAxe3yvTrceSgGwZkUBANlO8TSS8qMBTc06yXykbAlUj0oYBG5c4
83w0pv1gfn5SP4+FXt5okH/GEvVGzRYorxkOYBRilyLepGi4Qg6ZY2VZjYC12qOl
Vh+/qSXTxNB1j49ujwKoTNJFgzwIBj9PsP5YmzuvhUdaqMlFxSBcO5ZU0fiTe+YA
KpiuUIothX7gOot58KlWOHYqna0VGWDx8/148dd9eZDBWmvkuBP0PpZgoWCm5rlx
ugGSFwMcU1b917HZz6jTP58YuDqysRtUxos5ikwXgykiJHWGlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGro72j5/qsN498GCV8LVpQVo2aPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTFhNzhlMzEtMmZkMS0z
NDBmLTlhYmQtODMwYmI5OTdkODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsWyozt8n/vqsJOk61IX7pmtWZJ7jFSJTaJhY2/PdjBVxtj2cr3cus4
qtMVP9kA8v484sgZqlTQOxDVkn6zocPlFs1xp1G30YgYb9sOcTLFo0tPgAiOTep7
Ygn3DHtG5H6HGgLuQktzu8Zjy/CCNrx8i+vu3S79h/3TMd9A7v/dflHsFZDzgb6O
zpmypkDdK9qjFgjo++PIkJ3V27p1qCtVlnsWoLAX0QrjWS3FaLmnDSDDhNAFWFyO
utdcLUmARu+lqllQSAc1H5FQs8SAfXhrYNVNfqzwfEaAr7jNT4xZo2rAf1f+hqLL
wrDfZc0wliHcyXFvm3fvGqsKIYhiU88=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:08 2025 by rpki-client on console.sobornost.net