Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa
File: a661af9c-80ea-344c-ac05-94e45117320a.roa (raw, json)
Hash identifier: D+6RGmuXdPoWknBTFFnw5UAjRpAY+xwpVS//obMoLfA=
Subject key identifier: 04:94:61:0C:CD:F4:E7:BC:5C:A5:A6:65:18:E7:33:4F:D8:5B:78:22
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D7160367183486BDB63AD80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 71.30.209.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:60:36:71:83:48:6b:db:63:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=49981f75-e9a0-4c2e-bcf8-33d82614b031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:29:3c:90:8f:6a:26:74:87:eb:04:0b:50:
99:9c:55:62:25:f7:17:18:10:c0:a2:e8:52:10:04:
e0:8c:f1:da:43:62:00:bd:b3:24:b2:5f:3d:64:75:
32:d2:81:1d:55:29:8d:97:72:e7:26:5d:a2:25:54:
f0:93:86:69:0f:ca:c2:f9:67:45:fe:58:26:66:bb:
e6:c3:02:a9:d2:48:05:24:fa:33:f9:a8:1c:1d:ad:
09:09:b9:a6:9f:6d:07:4c:58:28:f8:67:71:a5:f1:
94:9d:a0:fc:37:5c:ab:d4:50:b8:d8:33:39:d1:4f:
e3:8e:1e:f4:7d:fc:7f:64:a9:a9:af:66:83:44:b3:
25:af:90:6a:53:38:e5:f3:61:89:65:ba:d8:e5:b5:
2f:11:df:cc:0f:da:7d:07:60:1a:6d:6f:96:54:f0:
02:33:1a:a3:5e:f9:5e:51:0c:9c:92:8d:9e:d0:ec:
8c:01:0a:e8:b4:fe:bb:06:9b:01:ee:dd:8f:91:5a:
0d:72:4b:29:7c:a7:dc:fb:3b:11:9e:8b:c4:e7:72:
03:d2:af:d7:a9:7c:e5:92:f5:fe:f8:98:21:ce:d6:
ca:4b:52:30:f1:2f:a8:29:cf:45:4b:fa:02:6a:b9:
57:52:bf:ce:0c:94:f1:ab:48:8c:8d:6f:7c:ab:61:
e7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:94:61:0C:CD:F4:E7:BC:5C:A5:A6:65:18:E7:33:4F:D8:5B:78:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:53:be:8d:f5:74:67:6c:af:a9:59:63:b3:c6:60:73:b1:ca:
d0:6c:98:9a:db:f2:61:08:d3:18:0d:fc:13:b3:e1:fd:41:00:
89:c5:66:72:f7:3d:b4:a0:2a:4d:4e:e9:84:b1:5f:f9:7a:4c:
0a:7c:af:f0:c6:e8:d7:da:c8:93:3c:5f:85:74:45:db:9b:96:
63:c1:1b:85:39:f4:17:d9:90:d4:5c:24:be:e7:43:c2:49:14:
2d:a8:34:31:31:01:85:3e:82:f6:ab:d2:64:1c:77:81:9b:2c:
5c:55:ef:9a:86:3d:e6:25:6e:b5:12:0d:ac:27:f5:66:ed:8c:
38:d2:d5:42:54:e6:29:34:45:e2:b5:50:ae:2c:f4:e5:62:9a:
d7:81:e2:f4:51:e0:ea:44:8f:58:eb:be:c6:c6:83:c3:5f:4e:
46:c3:8e:51:f3:15:81:f7:7d:a2:92:e2:1f:4f:90:67:ac:19:
45:26:67:02:13:0d:c7:f8:2f:36:95:49:8a:17:88:76:5b:04:
fe:fc:6b:b3:a6:8f:31:a6:d6:78:1b:5d:b6:4a:a8:bb:f6:2f:
3e:cd:b2:a0:a8:38:dc:e7:a6:fb:e5:9b:2a:cd:c3:2f:a0:64:
6a:48:f4:59:f0:56:ac:b5:27:70:74:4b:ef:cc:f5:63:12:9b:
61:29:cb:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWA2cYNIa9tjrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
NDk5ODFmNzUtZTlhMC00YzJlLWJjZjgtMzNkODI2MTRiMDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9kpPJCPaiZ0h+sEC1CZnFViJfcXGBDAouhS
EATgjPHaQ2IAvbMksl89ZHUy0oEdVSmNl3LnJl2iJVTwk4ZpD8rC+WdF/lgmZrvm
wwKp0kgFJPoz+agcHa0JCbmmn20HTFgo+GdxpfGUnaD8N1yr1FC42DM50U/jjh70
ffx/ZKmpr2aDRLMlr5BqUzjl82GJZbrY5bUvEd/MD9p9B2AabW+WVPACMxqjXvle
UQycko2e0OyMAQrotP67BpsB7t2PkVoNckspfKfc+zsRnovE53ID0q/XqXzlkvX+
+JghztbKS1Iw8S+oKc9FS/oCarlXUr/ODJTxq0iMjW98q2HnNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFASUYQzN9Oe8XKWmZRjnM0/YW3giMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY2MWFmOWMtODBlYS0z
NDRjLWFjMDUtOTRlNDUxMTczMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJTvo31dGdsr6lZY7PGYHOxytBsmJrb8mEI0xgN/BOz4f1BAInFZnL3
PbSgKk1O6YSxX/l6TAp8r/DG6NfayJM8X4V0RdublmPBG4U59BfZkNRcJL7nQ8JJ
FC2oNDExAYU+gvar0mQcd4GbLFxV75qGPeYlbrUSDawn9WbtjDjS1UJU5ik0ReK1
UK4s9OVimteB4vRR4OpEj1jrvsbGg8NfTkbDjlHzFYH3faKS4h9PkGesGUUmZwIT
Dcf4LzaVSYoXiHZbBP78a7OmjzGm1ngbXbZKqLv2Lz7NsqCoONznpvvlmyrNwy+g
ZGpI9FnwVqy1J3B0S+/M9WMSm2Epy2M=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:09 2025 by rpki-client on console.sobornost.net