Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa
File: dfc46e75-2524-374a-bccb-2391f95825df.roa (raw, json)
Hash identifier: Iz2P9qZE5VDJFqY9fygJ7jIBtP+ZpVBvy4yHIgzZk5s=
Subject key identifier: 56:E2:1C:89:17:19:FE:7F:5E:81:44:28:CB:88:3D:BE:76:76:8E:4E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210E9B62FA3C2083896FB40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 40.142.12.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:e9:b6:2f:a3:c2:08:38:96:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=0cb34794-8e84-4a94-8be4-acb70cd42109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:96:9b:0d:47:7f:71:23:7c:7c:8c:ca:a2:
96:7e:48:d7:30:0f:c3:fd:12:15:54:fa:ab:91:16:
6b:21:d6:93:3c:89:e7:8e:a7:ab:64:ea:13:ad:b0:
1b:bc:da:ad:06:e8:2c:39:d7:b7:8b:48:91:84:fa:
bd:c5:d2:25:22:25:17:9c:73:f9:1e:eb:5a:e6:b2:
fa:aa:06:2a:f1:6f:72:1c:63:95:77:01:b2:9e:5b:
b2:b3:eb:b0:52:a6:ac:2e:38:5c:19:a7:4b:02:94:
9d:e9:d9:13:4f:f8:75:0c:71:9d:86:be:9e:3b:00:
ba:93:19:dd:c7:f0:6e:5a:42:8a:3f:22:13:cb:75:
97:2a:ef:1e:4b:ec:3a:9e:94:b7:8a:2a:22:6e:7a:
c1:8d:56:bf:d5:33:ae:19:2b:e4:84:70:8d:9b:af:
f4:f9:9f:b8:88:ed:94:07:d1:f1:d1:90:a1:f5:6b:
f3:d0:c9:a9:a2:ec:60:d5:e9:fa:61:08:d2:b0:74:
7c:e3:40:8e:bf:70:69:1e:ff:ab:89:35:a5:aa:6b:
43:80:d0:2c:9c:a1:ac:2f:40:ea:2d:c6:2a:92:c8:
ca:4e:2e:e5:97:7e:10:18:9c:b3:e3:68:a4:6f:59:
ce:97:79:e0:bd:eb:ab:2d:a8:79:7e:df:f3:c0:90:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:1C:89:17:19:FE:7F:5E:81:44:28:CB:88:3D:BE:76:76:8E:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:5f:1a:6c:71:bf:af:80:c7:7e:18:76:3d:61:3c:da:1c:e6:
b3:76:9e:07:f8:b4:2b:52:85:41:7d:d3:a0:65:b6:bf:8d:5f:
60:66:a8:e6:f4:ff:6d:32:45:1e:e1:c0:2d:a9:cf:50:55:78:
2f:c2:0a:5d:c4:ef:87:5f:0b:d3:8a:bb:53:fb:1e:2a:0c:0a:
56:46:67:f5:43:c1:4b:81:0e:93:eb:23:17:e0:52:ad:0c:51:
21:00:eb:63:0b:4f:8d:bc:1e:61:a1:9b:bb:ce:6d:f4:98:75:
cc:ac:a1:6f:6d:64:4c:7d:6c:13:77:b4:63:ba:00:89:ac:ef:
b4:22:71:fe:8c:79:d3:0e:12:c4:2a:64:4f:fb:f0:23:d5:b9:
b3:d5:04:f1:70:04:cd:6b:ab:dd:05:ad:43:0b:74:ce:05:52:
67:23:68:4b:d9:15:06:e0:9a:ba:6b:98:3f:90:7d:55:00:cf:
3b:42:09:33:9e:7f:f0:ee:f7:45:81:7e:e0:e8:9b:10:23:3c:
2a:cf:10:fd:4c:42:b8:ca:38:ad:67:c6:8b:96:8e:b8:11:5c:
a2:e8:ee:bc:e1:3e:06:a5:67:6f:3b:d9:3e:f0:00:c8:e1:0c:
b8:58:c8:9a:36:e7:f6:b1:78:e2:f9:b7:70:19:6f:35:a0:80:
e2:18:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:11 2025 by rpki-client on console.sobornost.net