Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d062c6a8-097f-3336-87f4-a72abdec8604.roa
File: d062c6a8-097f-3336-87f4-a72abdec8604.roa (raw, json)
Hash identifier: M5LVylrKxjd7Uii+4R54f6UwWJPQescWXcfBIVK3JRg=
Subject key identifier: E3:0E:C2:21:CE:E7:5D:37:11:8F:A8:47:43:91:09:74:C7:AA:A4:CD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CDE11BEBDF9DF5ECA30478E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d062c6a8-097f-3336-87f4-a72abdec8604.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 71.31.232.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:1b:eb:df:9d:f5:ec:a3:04:78:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=b60ec74d-b71c-4b16-8b03-58b87f2fa03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:bf:61:8f:f2:fd:c5:c0:70:46:4e:1c:1e:
21:bf:76:42:89:18:e9:9f:76:94:77:5e:6a:5d:2c:
e5:3a:6d:a1:68:c4:94:8f:cd:d3:1a:35:e7:e4:65:
01:7d:af:62:cb:09:36:03:e5:32:21:e4:ba:1c:cc:
6e:1d:97:4f:31:20:50:bc:50:c9:58:5b:44:d8:4b:
67:65:54:c3:f7:d4:0e:80:e4:ac:d0:a4:95:1d:bb:
ac:b1:65:2b:fa:bc:3e:b8:16:da:f4:1f:2a:b7:1d:
b5:4b:f3:20:f3:29:94:f7:54:3a:26:af:be:6e:fb:
ce:a1:ce:45:aa:2f:15:43:b9:99:d5:9e:c9:1c:d0:
ff:4e:a9:ba:65:63:b8:8b:81:c7:e2:ab:b2:c4:1d:
cd:08:22:93:73:f2:65:ca:23:78:9c:5c:6a:1c:ea:
77:a3:57:0c:52:ac:27:a6:16:e1:48:f7:4e:29:92:
03:a1:de:91:3f:f0:f9:f9:38:2e:20:ca:c8:2a:f6:
68:00:fc:96:2c:f5:08:2e:14:b9:cd:8d:a5:af:a2:
6e:51:06:0e:0e:a8:85:b1:7b:9e:06:90:6a:df:b5:
1f:30:dc:13:16:2e:ad:3f:b4:3c:77:cf:95:13:9a:
9a:4d:f0:48:63:fb:0c:83:0b:bb:72:cd:68:2b:c9:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:C2:21:CE:E7:5D:37:11:8F:A8:47:43:91:09:74:C7:AA:A4:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d062c6a8-097f-3336-87f4-a72abdec8604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:84:02:cd:29:d3:18:43:2b:84:9c:31:34:c4:ee:1e:fe:83:
60:dd:1a:5d:b7:32:6c:b7:24:5a:11:84:d1:0e:5f:9a:f1:67:
fd:9c:a8:45:bf:04:d7:3a:46:3e:93:2a:39:2e:1d:90:18:18:
dc:68:19:a3:ab:51:36:b9:6a:f0:01:40:59:7a:38:ab:14:c8:
92:5a:2e:de:96:5b:a4:ff:f7:d9:08:34:d4:11:b6:b7:bf:22:
3a:e7:67:ab:2b:53:84:7e:d8:6d:30:8e:5e:33:7b:b7:a8:41:
9d:72:5f:f2:4a:03:4d:c7:37:57:23:6e:bb:6c:53:76:b6:4f:
64:57:64:25:3a:c2:79:7c:b2:82:ae:04:c6:fc:46:a3:fc:07:
1c:c9:32:ad:20:6e:ad:36:37:1a:00:7e:04:9a:f5:8f:ae:a2:
f3:01:5d:2d:d9:ed:24:d9:3c:66:ca:97:7b:9b:05:90:77:3b:
66:5b:32:80:87:56:d5:bd:43:d6:76:65:f1:f6:ce:2e:12:68:
df:08:68:c8:42:2b:64:97:53:d0:33:36:c3:36:c5:7d:d1:53:
4b:aa:52:b9:39:f7:50:96:5b:b7:31:3a:04:cd:22:19:72:b0:
8a:73:1f:ac:99:30:81:ac:83:19:5f:7a:47:dc:18:cb:d5:12:
63:5f:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:11 2025 by rpki-client on console.sobornost.net