Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa
File: d7c658f8-55f3-37c9-b25e-b9627488fc03.roa (raw, json)
Hash identifier: F7k3tjpmL+8bcw3nnnrcl6EV5JL79gyC/umLPccXvQs=
Subject key identifier: 0E:20:8F:44:B4:B8:03:AD:95:B0:22:25:1B:6A:BA:3F:70:D8:7F:0A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CDE1195823209358CE3A1700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 98.16.224.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:19:58:23:20:93:58:ce:3a:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=ebe08e28-ba72-4b42-9c61-7da73b25f7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:63:e5:b8:f8:87:5d:25:06:15:fd:04:2b:
ac:b8:a2:2a:c6:33:fa:1e:bb:5e:a4:29:8a:8c:b7:
0f:fb:08:bf:c3:bc:fe:41:a2:94:0f:f9:13:0b:de:
ce:93:54:4c:d6:af:18:89:b0:d4:c3:17:a4:8a:4b:
75:27:df:16:3d:7b:80:c9:4a:92:f8:ce:1a:e3:2a:
02:f0:a3:34:eb:af:7e:d2:e1:83:c2:dd:6a:09:ce:
f8:a0:78:f9:43:79:2b:a7:65:57:ad:02:77:80:6a:
f0:4a:c8:f3:8d:e8:62:a0:c1:b6:8f:f4:60:50:27:
b4:57:62:77:67:c8:d5:ff:55:52:b0:c0:7d:71:f8:
e6:23:f1:e8:0f:d8:e2:51:5d:7f:73:9d:93:d6:1e:
14:2e:d3:51:38:20:11:0e:65:bd:18:ed:21:73:29:
0e:95:6e:97:f8:a5:4e:52:ef:88:7e:08:90:aa:06:
57:2d:75:90:f0:3a:1c:15:71:0c:a8:e2:c9:4c:72:
fd:f9:e1:c6:76:39:2c:9e:23:60:e3:61:3a:16:75:
ab:28:69:ca:9f:6c:7c:4d:e0:3e:8e:1d:81:ae:25:
53:98:9d:31:e2:c9:90:66:49:0a:83:3c:c8:d6:ed:
1c:de:d7:c8:34:52:e4:97:fc:77:17:6f:0a:d4:5e:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:8F:44:B4:B8:03:AD:95:B0:22:25:1B:6A:BA:3F:70:D8:7F:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b4:50:96:bf:78:2f:7e:2f:48:57:aa:4f:26:17:c3:d2:39:
61:d3:8e:3e:d9:fb:c7:eb:c7:b8:6d:be:ad:3c:fd:c5:80:83:
85:9c:14:27:a5:6f:f6:06:93:a5:7c:26:19:23:e9:f3:57:72:
0d:dc:31:82:18:de:36:c3:d3:95:c8:55:27:9d:17:bd:6c:10:
6d:23:d4:b7:a3:2a:6e:60:98:5a:fc:f8:c6:ef:d0:80:6e:90:
51:80:06:13:03:a1:2c:4a:a0:26:22:11:59:78:f4:1a:82:3c:
e6:72:26:1c:af:14:f3:85:dc:6e:af:bd:78:03:29:c5:4c:fb:
17:85:6e:6f:6a:82:91:f6:30:dc:e0:1b:2c:75:32:5f:2a:87:
0e:93:00:36:3f:93:37:fa:4d:eb:c7:6f:cf:e9:56:79:cc:b3:
57:55:1f:cc:68:30:ec:fb:27:84:0a:c3:4d:92:0d:48:6c:95:
71:89:82:e7:53:1e:6b:23:1a:49:9d:59:16:4e:e0:39:5f:1f:
e3:16:78:b1:43:5d:20:9b:67:90:41:d9:80:94:1a:43:e7:73:
6e:35:14:4d:8e:51:45:52:6d:c6:b6:c2:79:0c:e4:9c:c7:01:
8e:a0:04:13:28:96:61:f2:bf:93:a0:0a:7e:4e:26:e2:76:1d:
b3:47:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:11 2025 by rpki-client on console.sobornost.net