Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/120d51f0-c3c0-3aae-b9ad-5619a099ca98.roa
File: 120d51f0-c3c0-3aae-b9ad-5619a099ca98.roa (raw, json)
Hash identifier: ODcheNHCWyj6QNEFojupFUZMfQuyv8iuAlvJvb8+9m4=
Subject key identifier: B3:B5:50:F2:23:3C:EE:01:BE:97:5E:9E:CC:14:C5:42:66:F5:14:02
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858496FAF216C475CC42FE28B2600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/120d51f0-c3c0-3aae-b9ad-5619a099ca98.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 397218
IP address blocks: 156.154.104.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:21:6c:47:5c:c4:2f:e2:8b:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=2db6d928-2ffa-4ba4-b404-06bc0c1b7e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:be:3c:15:77:df:78:41:13:1c:fc:92:6e:
0c:32:31:da:0f:ce:72:08:e7:bf:d2:8c:f7:c5:ed:
07:3a:0b:9e:ca:fa:d0:b4:37:26:38:7c:c4:55:da:
30:69:c4:68:9f:35:50:73:5e:77:f3:94:0a:f4:00:
dd:24:8a:76:ec:09:fe:52:9d:0d:d8:2d:1c:5e:cc:
23:cb:33:58:fe:89:a9:36:a8:0c:c6:60:59:0b:61:
03:27:88:c2:31:11:ba:a1:94:cc:49:10:5e:d1:d9:
71:ec:e9:84:bf:86:8f:1e:2f:c7:8f:e3:ad:67:74:
64:76:a1:3f:4f:7b:5b:b0:ca:94:06:d0:65:c8:ae:
40:16:fc:7f:c7:0b:da:b1:e2:28:e9:b8:41:4f:68:
95:8f:c9:7e:d5:0b:f5:2d:03:7b:5c:4b:cc:b7:22:
3a:2d:55:d7:58:70:45:aa:4e:2b:bf:23:07:03:07:
d1:9c:fd:e4:74:7e:f6:a6:a9:cb:5e:9d:61:9e:95:
6c:ec:ce:76:86:b5:01:e9:8d:11:a8:ff:c6:6e:83:
78:e2:42:ef:91:84:49:cb:17:8f:ca:a9:17:28:3b:
e7:27:02:ae:b9:39:90:dd:87:ba:fd:bf:7f:5e:6e:
17:80:3e:be:ae:ed:1d:76:b2:e5:7f:5c:82:a0:d7:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B5:50:F2:23:3C:EE:01:BE:97:5E:9E:CC:14:C5:42:66:F5:14:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/120d51f0-c3c0-3aae-b9ad-5619a099ca98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:03:5b:1d:61:3a:98:c1:c6:1b:b5:9e:07:7c:6a:04:e1:59:
4c:43:b7:68:69:61:0b:f8:bb:f0:dd:af:5a:e6:5f:58:1a:a6:
c2:2f:ab:97:c5:1f:0a:8c:96:22:5c:66:23:0c:d8:5f:33:42:
78:3f:9e:df:6c:db:94:df:16:11:66:1e:e8:80:bb:a2:4a:ad:
5c:6f:de:0f:ed:c1:68:d6:32:00:b5:06:2e:14:54:d8:79:ec:
be:c4:ca:5c:f9:72:39:cb:a9:91:8a:be:22:8c:ce:5f:db:5a:
17:64:31:9a:06:d7:ba:32:69:cb:4d:10:a1:e6:e7:9f:41:4e:
c8:09:fd:59:7f:98:12:e6:90:4d:f5:e8:81:a5:5d:fb:93:85:
03:f4:71:14:0f:50:7c:bb:ea:9d:5d:3e:7e:28:5f:24:c8:9f:
10:61:33:7d:1f:a5:ef:2d:e9:ca:d4:76:58:8a:e4:2d:21:e6:
9d:f0:84:07:ad:03:0d:96:a4:d0:39:53:7f:e9:eb:d2:a6:15:
11:42:7f:48:76:6c:2d:9c:1e:40:29:ff:01:42:f2:c1:6d:79:
29:18:d2:74:77:0b:b3:33:84:0c:1c:0b:05:3d:f4:37:77:5b:
c3:45:dc:ca:96:23:35:a4:cf:bc:00:e9:1b:5e:98:bc:29:33:
e9:74:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:29 2025 by rpki-client on console.sobornost.net