Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03a3bc48-2edc-336b-a7ea-51fc3b3e34bf.roa
File: 03a3bc48-2edc-336b-a7ea-51fc3b3e34bf.roa (raw, json)
Hash identifier: F0NWF0LSkf9jISskDLXNEdbvrulXMvBcgdaQSZgJLpM=
Subject key identifier: 73:C2:B4:C2:B5:BB:7E:AF:BC:88:21:86:2B:2D:66:01:63:91:6C:4A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858495C2473D9DD6D6DBB761D0680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03a3bc48-2edc-336b-a7ea-51fc3b3e34bf.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 397243
IP address blocks: 156.154.103.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:73:d9:dd:6d:6d:bb:76:1d:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=74beef95-d5ff-405a-a5a4-7cef99bd1623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:2d:fe:1c:f4:1d:5b:9f:25:0e:32:4e:ab:
09:48:07:f6:d1:fa:e3:b0:07:02:aa:a9:e0:bb:69:
8c:69:1e:6e:ed:1d:45:89:e0:74:46:00:eb:a8:c9:
55:b1:46:80:cc:23:16:a5:b9:17:5f:44:f9:39:81:
b5:dc:4d:44:1c:a2:cb:be:33:30:2a:4c:4f:f5:8e:
40:04:6a:43:87:97:cb:47:23:6b:1f:4c:76:c5:3e:
bd:b9:72:bf:0c:5f:fc:26:ee:86:e2:71:65:51:99:
64:1a:79:88:1b:e1:19:8f:6f:4c:46:51:bc:4f:99:
c6:02:56:98:51:b7:b1:0a:e4:4c:fe:1f:c8:a0:a1:
a8:77:ef:fb:5d:32:c8:ee:af:5c:10:69:90:80:1a:
6c:ff:76:48:df:e2:a5:b6:3d:25:2b:b6:ea:c9:30:
38:a3:1b:17:81:0b:43:e2:3d:5a:45:0f:c5:cf:4f:
43:02:f9:76:b6:ba:97:0a:21:ec:22:72:4f:25:76:
e0:37:61:85:cb:95:fa:13:9c:f8:af:00:ce:d2:95:
cc:92:d1:47:ac:cc:ce:07:b5:c6:df:6d:74:fa:77:
b8:a2:6b:81:c1:10:16:22:3c:e8:e0:68:51:cf:0e:
91:27:95:7b:c6:a0:8e:fa:50:1b:1b:b8:2a:09:45:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C2:B4:C2:B5:BB:7E:AF:BC:88:21:86:2B:2D:66:01:63:91:6C:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03a3bc48-2edc-336b-a7ea-51fc3b3e34bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:9e:e6:e6:41:6b:3d:0a:d4:3a:dd:3a:fc:e1:b6:b6:f1:06:
1e:c6:43:72:fc:f0:88:ff:c2:81:4c:1d:b8:df:b4:d8:ff:8f:
d7:01:37:aa:56:af:56:9e:6f:c3:c0:39:02:0a:3f:87:8a:44:
be:a9:76:7e:fb:31:f8:69:0f:28:9d:e0:3e:f3:c4:0b:83:c5:
f9:8e:b9:6a:89:cf:d0:73:f8:de:c8:d7:a1:87:ac:ae:40:ec:
65:af:9f:55:8a:f6:d2:43:bf:1f:26:35:57:ca:e5:75:c8:2f:
97:3a:b3:03:c3:ca:6c:9e:29:34:bc:43:23:a8:19:f1:9c:24:
cb:4e:2e:76:79:2e:8a:1a:27:2f:bc:46:13:6f:39:a8:13:c3:
7b:b6:08:db:ab:9f:23:a2:a8:dc:b4:f4:d9:21:fb:2b:8f:84:
44:71:a1:11:e9:8e:56:2e:75:4f:fa:d1:c5:87:8a:11:d5:4b:
3a:d6:3f:51:70:2b:eb:3f:2d:70:3e:f6:73:21:a7:4a:59:07:
be:01:ff:7e:e9:71:4c:7a:b7:35:a8:ca:24:34:41:34:be:2f:
23:6f:f5:c3:84:69:7b:06:20:ae:e8:e2:5e:7f:1c:68:49:61:
e4:a3:e5:25:4e:e4:74:a8:bf:94:75:ed:14:f6:73:0e:98:29:
fe:b9:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:28 2025 by rpki-client on console.sobornost.net