Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa
File: fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa (raw, json)
Hash identifier: w7TjWaap+hz/X7Zdme/hSSV/+i46oWmRqkSGwWeqTmE=
Subject key identifier: E1:A3:50:38:37:89:0E:BB:67:AB:CE:8A:5A:02:73:85:34:63:BA:B4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F6B0B8BEF6128E3BB240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 199.119.240.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f6:b0:b8:be:f6:12:8e:3b:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=e1eb8246-a337-443e-8bec-f0551ace21f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:f7:61:3e:fd:81:ce:26:81:64:46:4a:aa:
c8:b9:aa:78:cb:90:f4:d4:46:43:77:a1:6f:0c:d0:
e3:54:7c:c0:46:a8:bf:00:d5:72:10:fa:ab:3b:18:
68:69:5f:b2:fa:d3:bb:29:5e:f7:38:fc:5d:54:e0:
2d:ae:92:f2:45:de:90:2c:bd:fd:86:27:f1:94:bc:
ef:89:c8:3a:2c:27:03:74:a7:f6:1e:39:72:3c:d5:
93:f7:4d:f5:cf:21:6b:0c:a5:98:2d:be:c2:be:22:
0a:8b:04:fb:77:59:42:54:08:ec:3e:aa:17:6d:20:
c5:cd:e4:a4:71:c0:c7:25:21:20:1a:5e:f2:7f:fc:
57:00:e2:d4:cb:e1:99:b9:43:4a:14:0d:e7:ec:c1:
96:ec:63:e6:dc:04:34:06:62:c7:61:fa:12:17:0a:
18:0a:6a:60:54:36:55:e5:30:be:5c:78:6a:78:50:
4d:61:b7:85:65:f9:2b:ee:18:27:ee:03:53:a1:70:
ec:da:91:b2:c6:2e:d6:2a:c0:e1:a0:e7:a2:8b:ac:
f3:56:82:9e:92:d7:be:39:eb:5b:1d:44:4f:f3:8d:
07:dd:84:cf:b9:ae:7f:63:d4:5f:83:f3:c3:2f:8a:
64:e6:a0:b6:ca:a6:d6:a1:33:95:48:10:bc:16:54:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A3:50:38:37:89:0E:BB:67:AB:CE:8A:5A:02:73:85:34:63:BA:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:59:60:83:f8:19:39:66:90:5e:ea:c4:15:d8:1c:58:d6:77:
cf:fd:ac:eb:3e:d9:54:90:e7:29:53:64:f4:f7:a7:e6:95:31:
26:44:65:81:de:4b:41:5e:99:18:25:43:b0:f5:3d:45:f4:b7:
9c:71:aa:b7:88:01:67:08:f0:f5:f1:10:7c:bd:d5:23:ab:3f:
1d:8c:c0:7a:2e:34:c1:04:d4:d7:69:12:fa:b5:3d:5e:d1:1f:
e4:5b:70:b1:e2:5f:5a:e1:3b:c0:c6:54:2f:cd:cb:08:cc:49:
76:d5:cd:b6:5a:a8:e3:e9:aa:41:0b:2e:b3:38:a9:51:f6:3b:
3f:99:3b:6c:90:68:43:f9:d0:a9:17:a2:29:b1:0a:de:61:62:
6b:cd:5f:27:5e:b4:b5:c3:b3:83:f8:68:99:cb:12:be:7e:47:
7a:2c:50:99:f9:00:8c:4f:5c:78:39:78:aa:bb:50:9d:cc:be:
d8:b9:11:09:ec:61:a9:c0:2b:a1:25:4d:fa:b4:8a:08:30:e6:
8e:a9:f4:a8:a3:d0:f8:70:56:b2:2e:15:e5:9e:9f:e5:58:9e:
2f:0e:66:3c:69:a4:3a:a9:54:ab:bb:83:d7:39:97:fc:ff:95:
43:d0:77:9e:05:89:83:18:fc:33:39:4e:35:95:43:6a:9f:c5:
b4:a3:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:13 2025 by rpki-client on console.sobornost.net