Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/293673a8-9d67-381a-9fbc-ddc621ad7393.roa
File: 293673a8-9d67-381a-9fbc-ddc621ad7393.roa (raw, json)
Hash identifier: 8zwjBE0u9vMqKCoYqpDgrK2AIxn1ASJAVSACjm8I2gI=
Subject key identifier: CF:31:83:68:8C:09:E9:BC:07:EA:C0:44:9B:0C:7B:7D:D4:0B:A6:A8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD21004D80753D0751D7DC40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/293673a8-9d67-381a-9fbc-ddc621ad7393.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397223
IP address blocks: 156.154.66.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:00:4d:80:75:3d:07:51:d7:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=87cbfe84-6003-4a82-9487-e7b38375ba22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a7:33:64:1e:97:2a:98:cd:0d:8b:d6:50:df:
e3:10:d2:57:8b:33:45:6b:f1:d4:2b:39:f5:c4:18:
13:58:9a:34:53:be:23:f2:60:5a:a0:b7:b5:29:72:
b7:2d:34:eb:01:35:bb:41:44:2c:15:58:c7:2a:fa:
81:3c:f4:18:1e:9b:e6:20:d0:a5:48:b9:33:19:e8:
64:94:1f:d9:c1:78:69:8b:d5:ba:66:8d:27:ec:6e:
88:42:c6:ed:a5:8f:02:89:33:6f:2d:98:cb:26:f1:
15:bd:ed:2b:f0:a1:97:5a:82:f0:dc:0e:1d:aa:6c:
49:61:1b:5a:ea:68:b6:d6:32:f1:6f:b1:2f:bc:0e:
b1:c6:b2:f7:3d:b5:86:85:a5:4a:8b:8c:41:ea:62:
97:88:a3:86:0e:b8:46:f7:53:82:8e:ee:93:41:bb:
c0:b5:d9:5e:d4:8c:ee:55:2b:46:ad:a2:08:15:ff:
03:ca:79:bd:c9:a2:e7:80:14:f6:ac:c0:c0:2b:13:
ae:c4:4a:95:9b:ab:3a:16:a8:64:5e:37:33:bb:13:
be:47:f9:77:7d:be:da:60:45:f4:2c:7f:43:e5:fc:
96:0c:15:28:33:9f:4f:af:07:fc:37:a8:d5:73:6c:
9a:12:b9:16:e9:a8:8e:48:da:98:43:76:1d:2e:38:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:31:83:68:8C:09:E9:BC:07:EA:C0:44:9B:0C:7B:7D:D4:0B:A6:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/293673a8-9d67-381a-9fbc-ddc621ad7393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d6:a1:c4:16:d4:a9:de:21:5f:34:b4:35:1f:95:d7:7d:44:
94:0a:73:db:40:c0:6e:51:71:0d:f8:91:13:b6:84:41:6d:00:
e5:e3:73:5f:39:59:79:f2:2f:51:dc:31:37:50:05:dc:3c:b4:
a6:43:bb:bc:13:d2:5c:2b:7f:17:34:39:08:1c:8e:c6:46:97:
4e:47:b0:20:9b:4f:aa:58:fd:3d:80:58:dd:6b:0b:f0:46:d6:
0a:c3:d8:17:61:9a:c4:ec:24:59:5f:0b:25:b6:98:6f:ee:92:
d8:29:78:a7:aa:77:d9:f4:00:47:77:da:b0:f7:b6:1e:fb:cf:
58:24:19:73:fc:f8:71:75:a4:f2:c4:90:e3:fa:fe:59:5d:1b:
77:ce:0d:3d:9e:43:ba:40:5b:46:62:18:4b:b4:3b:8e:2c:ab:
a5:4f:36:b0:09:22:45:8d:54:82:ee:1f:af:05:91:ca:1c:13:
ca:ac:84:c3:66:06:a3:5a:0e:d7:35:7e:70:80:6e:84:27:f9:
fc:fc:45:3f:2e:2d:e1:39:47:d5:94:ea:ab:48:f5:65:2e:32:
70:6f:b7:eb:e2:32:ac:61:fb:15:7d:f2:4e:ac:d2:8a:0f:e2:
d7:58:15:d2:c0:6f:f9:a1:35:cb:aa:48:9c:8c:22:38:01:ce:
e0:b0:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:34 2025 by rpki-client on console.sobornost.net