Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa
File: a900db9d-6c9c-3739-b1a1-9441dc45040e.roa (raw, json)
Hash identifier: dMi7M0oIyMQot3wTcq7DrDYXThapqrPdzBg48PxTK/s=
Subject key identifier: 6F:B2:B8:42:B1:73:80:C4:8B:F7:AA:E4:7D:12:EE:FE:54:9D:C0:78
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858497F099EA6FEA75025491F8F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa
Signing time: Sat 12 Apr 2025 01:00:48 +0000
ROA not before: Sat 12 Apr 2025 01:00:48 +0000
ROA not after: Fri 11 Jul 2025 01:00:48 +0000
asID: 7029
IP address blocks: 98.19.72.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7f:09:9e:a6:fe:a7:50:25:49:1f:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 12 01:00:48 2025 GMT
Not After : Jul 11 01:00:48 2025 GMT
Subject: CN=7564f0a7-7027-4bb4-8569-5ca47cfe53d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ac:94:b4:b0:ce:0f:bc:12:64:f6:55:ce:5b:
66:d9:ff:d8:1f:c1:59:f8:b6:ef:d0:66:3a:9f:e8:
86:3c:d6:fa:8c:3b:86:52:11:96:5b:bc:3a:5a:69:
aa:4f:b0:90:a6:70:21:db:bd:a0:f3:41:73:82:68:
54:00:5e:d0:33:56:0f:1d:0a:09:a0:a8:dc:dd:81:
1a:a2:12:37:f4:d6:17:7a:88:14:0b:0c:a1:70:49:
78:1a:2e:37:2f:2e:a6:5c:b0:86:3b:76:fc:86:d8:
43:36:82:43:13:c4:a7:68:9a:c1:16:c1:07:d0:02:
f9:cc:e4:6d:69:08:a8:83:b7:0e:d7:73:b3:56:03:
c7:be:93:a8:24:58:30:99:8f:c0:0c:69:af:3a:7d:
c7:e0:82:00:cd:2b:1e:99:fd:b3:0d:ae:6a:26:78:
02:1b:65:6d:32:39:4e:b2:12:66:36:c4:6c:ce:88:
38:e9:6b:53:39:87:dc:e4:1f:fd:5b:f0:b8:2b:e2:
1f:50:f0:60:4f:61:e0:18:a5:cf:78:e8:24:4b:ac:
e3:b6:cd:1c:6f:2f:82:24:31:ab:3e:ac:ab:7a:10:
64:05:3f:fe:f1:5c:24:4a:f8:de:08:b8:f9:e0:e0:
3d:b0:81:99:f5:0c:bd:9c:f8:a4:74:53:3c:86:47:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:B8:42:B1:73:80:C4:8B:F7:AA:E4:7D:12:EE:FE:54:9D:C0:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:df:3d:21:7a:99:b1:e0:1b:cc:0a:77:ea:69:35:8d:ca:0f:
dd:46:2d:62:96:da:e5:50:64:02:a9:79:43:fa:37:fd:90:41:
5d:bc:90:19:0c:6f:fe:c8:2c:78:48:ac:de:46:a0:df:0c:92:
72:1d:7e:2d:28:7e:05:56:94:3d:8a:aa:ab:d6:3d:0d:d2:a4:
86:b1:7a:42:54:24:6a:29:b5:51:eb:0c:b5:6f:47:28:40:40:
d6:de:88:30:03:76:ee:96:b8:a6:a6:be:09:9a:e7:5c:8d:49:
f5:d7:1c:89:4a:d3:41:49:92:e7:91:f9:8f:a9:3d:79:19:aa:
1b:e1:2a:a9:91:8c:ea:fe:53:20:a8:80:48:26:f9:b4:5b:78:
ff:75:71:fb:5b:a1:12:6b:ab:cb:3e:e3:8c:e9:44:81:f8:6d:
c6:b2:23:7b:ff:ba:91:71:a3:b8:7e:03:7a:9f:fa:94:cd:91:
e2:f8:f6:b9:db:25:c6:0b:c5:fe:9f:9c:b7:68:74:28:52:41:
fc:43:aa:d2:f7:e4:e7:72:c6:8b:53:72:0b:84:36:22:0b:b8:
f6:6e:55:3d:a7:99:15:fb:00:7f:d6:54:ef:a3:2b:13:82:1b:
ed:79:79:2f:bd:44:40:35:d3:38:7a:2d:7b:94:4f:05:43:bc:
53:7d:14:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:09 2025 by rpki-client on console.sobornost.net