Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa
File: f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa (raw, json)
Hash identifier: RZyRg2MYW6+yN//5klg014YZsOw90/784j9ExcNpfxI=
Subject key identifier: A8:BE:CD:52:35:DF:A1:58:31:FC:FA:0F:8E:3B:52:4C:9F:AB:A6:49
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584919E70567AE9DEC31C3181380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa
Signing time: Thu 06 Mar 2025 19:34:31 +0000
ROA not before: Thu 06 Mar 2025 19:34:31 +0000
ROA not after: Wed 04 Jun 2025 18:34:31 +0000
asID: 7029
IP address blocks: 173.187.119.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:e7:05:67:ae:9d:ec:31:c3:18:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 6 19:34:31 2025 GMT
Not After : Jun 4 18:34:31 2025 GMT
Subject: CN=bca54547-2eda-40f3-b480-3ee7ff56ccb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:43:f6:71:28:14:93:5e:7c:28:b5:a7:b9:
fe:4e:90:36:c5:7f:ea:85:4e:42:d7:67:f9:b8:2a:
e4:85:8e:45:29:93:74:9f:b6:1a:12:95:5e:52:92:
fa:2b:ab:42:0c:8f:dd:35:2a:29:83:98:7b:f9:20:
e9:68:46:ea:86:62:f9:0e:c7:e6:da:74:fb:7c:02:
c0:a2:8e:f4:cd:16:4e:38:92:57:3a:1c:8e:e5:66:
5c:46:8f:c5:43:0e:0c:b4:bd:46:70:92:79:20:2a:
f9:db:4a:cc:fa:2e:a8:1c:c0:87:69:83:bc:57:3b:
4c:b2:03:7c:42:69:c8:81:09:b6:25:65:6d:a7:6e:
97:7a:f1:25:a7:3e:3f:f7:c1:e8:a3:d7:d4:0f:52:
72:e2:68:bd:49:a7:52:74:e7:a5:ad:12:61:29:49:
0b:75:0d:d8:23:e7:50:f6:71:04:e7:7a:66:30:f7:
32:0d:1f:da:5f:cd:4a:20:8d:03:e3:b1:a0:b9:b2:
16:2b:a7:ca:3c:cf:64:44:2a:db:6e:d0:5a:b0:c6:
0f:dc:95:73:9d:1e:d2:79:00:69:28:c9:b7:36:04:
69:bf:00:56:8c:77:34:5a:27:78:5e:63:4d:1a:00:
5d:0d:13:c0:a1:d0:47:b4:04:e2:13:c0:ed:11:15:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:CD:52:35:DF:A1:58:31:FC:FA:0F:8E:3B:52:4C:9F:AB:A6:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:3c:84:41:68:89:75:ef:e4:b5:30:bd:85:b1:80:64:b8:e9:
63:1d:a7:e0:11:ad:e2:d0:ac:42:98:44:21:70:dd:22:dd:4b:
0b:d8:83:81:9e:9b:85:70:34:67:e3:40:f4:dc:0c:a0:59:49:
09:fa:32:00:44:df:e9:a3:f6:05:0a:6e:cc:08:e1:2f:a5:77:
8f:69:b6:7a:9b:28:fc:be:02:fe:54:85:12:8d:0a:18:8c:21:
94:7f:0d:60:c1:07:ca:e0:3a:49:02:c4:17:6f:e2:8f:6e:53:
5b:a1:74:31:ef:49:78:88:cd:19:cf:9e:fe:24:ea:94:9d:d8:
d2:08:cc:23:fd:b7:4a:a7:d0:59:32:c3:3a:26:7b:08:3b:51:
16:5b:1a:fd:3b:34:f7:03:28:fa:ee:00:71:8b:92:1f:e0:39:
cd:66:5a:b6:a8:89:4f:cf:9e:bc:bb:90:ba:b3:44:39:50:82:
6f:86:95:81:3a:00:34:e4:b2:27:2f:73:46:69:c1:5c:6e:7f:
d1:ed:ae:4b:e3:cc:69:f3:c6:d4:58:80:0f:40:9b:dc:f8:9e:
d0:67:62:62:3b:f2:b6:7e:66:6f:83:b2:dc:de:4c:76:08:3b:
4e:2e:2f:6f:7d:59:04:c8:19:05:5f:32:7c:9c:f0:8b:5e:d9:
b1:8a:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:12 2025 by rpki-client on console.sobornost.net