Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb884b1-46ca-3bd1-9fbe-33434208f792.roa
File: dfb884b1-46ca-3bd1-9fbe-33434208f792.roa (raw, json)
Hash identifier: Tu+6J+p82qEHUtkDaqnuYC0e98AQWhiscSe6hwY0JBE=
Subject key identifier: D7:52:93:02:CC:F5:88:63:2D:84:BE:D0:EA:C2:B1:C6:C7:77:04:74
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858496A19B9CABB3153683CF93480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb884b1-46ca-3bd1-9fbe-33434208f792.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 7029
IP address blocks: 173.191.176.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:b9:ca:bb:31:53:68:3c:f9:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=0354bf03-571e-41ef-8660-52b581892783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:89:a1:41:b1:eb:17:04:c8:5e:65:31:81:
8f:c9:de:ec:a6:56:a4:db:63:ce:68:3f:9b:77:18:
30:98:20:ff:1c:64:be:74:a6:56:d2:9b:0e:1c:57:
e8:96:1b:22:50:c2:bf:74:99:c8:6c:80:7e:72:93:
ca:c6:e4:44:fe:00:05:ed:a7:0f:e6:db:ec:18:6b:
a9:11:ca:9a:eb:a6:2e:8b:17:51:61:3f:bf:04:fa:
97:75:b4:bb:59:6e:0a:d3:3a:11:45:a3:99:f8:e1:
ee:fc:5e:41:d3:03:5b:e5:38:cf:90:d7:ad:04:84:
9c:cd:50:b0:fd:e1:63:ab:82:d5:c2:d2:e5:d0:f1:
bd:92:af:fe:dc:c8:de:19:c5:3a:64:64:32:d3:3a:
a4:28:90:a6:3a:a0:9a:55:18:ce:b0:3a:4e:f7:4b:
7b:6e:bb:69:90:86:22:da:40:21:df:6d:fe:fc:37:
5a:6e:c7:42:f2:42:98:71:92:81:a3:f0:83:69:37:
97:72:a4:a7:ad:20:47:d9:3e:43:72:10:d7:38:b8:
57:70:aa:7d:2c:35:df:36:be:dd:65:41:7e:e9:40:
a3:c0:a8:78:a7:ca:5a:41:2c:16:d3:11:c9:51:72:
01:9c:34:fd:83:66:b6:21:7e:7b:33:0c:cf:65:99:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:52:93:02:CC:F5:88:63:2D:84:BE:D0:EA:C2:B1:C6:C7:77:04:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb884b1-46ca-3bd1-9fbe-33434208f792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:67:ef:9b:aa:18:52:5f:bb:21:64:69:90:35:b1:c3:16:74:
14:49:19:14:57:8f:48:2e:c1:36:22:5e:8d:76:74:91:77:af:
bf:dd:8f:50:ba:7a:bd:3b:4b:52:4f:e4:c8:04:25:a0:57:16:
9e:1f:ae:ac:e7:d1:49:11:01:cb:0d:aa:d2:19:c9:95:c9:01:
94:7c:9f:fc:73:54:dc:cd:0b:e0:25:93:36:42:2e:69:75:f4:
e5:2a:db:eb:60:68:60:42:24:c0:ee:93:71:d3:05:80:ed:a5:
d7:31:27:28:0c:70:94:26:47:24:48:58:af:56:ca:de:26:cd:
d0:69:06:e7:0d:71:12:a0:ee:ae:5b:a8:6c:4f:40:86:96:d8:
6c:0f:f0:e2:12:7c:f0:36:39:54:b7:27:87:d5:15:31:cc:27:
45:e5:96:b0:b2:87:b5:c4:0c:67:66:29:d7:9c:d7:da:f0:03:
00:6f:00:e7:38:60:4b:8d:e0:e8:1b:9e:27:08:81:dc:3b:ce:
7d:18:23:b1:5b:9e:c7:9c:40:ab:aa:6d:e2:3b:fc:77:5f:f9:
64:90:a5:fa:f1:89:63:99:91:85:63:db:c8:80:1e:5b:01:b4:
f9:d4:a6:90:51:31:33:05:c2:98:3b:72:f1:f1:b3:1b:1e:7b:
5c:5d:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:11 2025 by rpki-client on console.sobornost.net