Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa
File: 33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa (raw, json)
Hash identifier: lPfqFLx1BwfpP/TacOgR08tDEfkrzDBr11hUZUOMWWQ=
Subject key identifier: 67:BE:F6:02:AF:09:CF:A8:73:C5:AE:64:5F:F2:CA:BB:A2:46:27:FC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246EBC1289764A7B9E9E920
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397219
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:eb:c1:28:97:64:a7:b9:e9:e9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=e99bedc3-184a-453a-921d-21135d433c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:f3:d3:ee:fe:97:4b:c8:6a:b8:ec:1c:58:
75:78:d4:05:46:a3:bb:9d:b1:14:5b:ec:02:f3:b5:
2c:fa:97:89:91:8c:54:13:21:a2:2b:5e:b6:90:f9:
b6:8d:ca:76:77:c4:27:1b:0c:46:19:98:ac:41:dd:
da:fd:fa:e6:53:fb:bf:cb:40:93:2b:c4:46:70:e8:
06:87:00:ef:aa:35:49:46:ca:e0:cb:a7:63:22:87:
ad:bf:2a:c9:34:ed:6d:66:29:3f:31:03:1d:1a:8c:
f5:ff:57:54:20:0d:8e:3c:d6:1e:eb:6d:45:56:4a:
db:38:1a:4d:28:27:26:31:f5:0d:ca:bf:5d:d9:59:
56:65:64:3f:58:8d:2d:79:64:2d:a3:6f:6b:c5:3c:
67:86:5c:6c:bf:dc:b6:88:f7:4d:14:ab:a2:17:89:
e8:07:fc:7c:1f:4f:59:c9:57:15:38:fa:1b:42:21:
dd:ea:8a:0b:91:ad:16:9a:91:2c:01:bb:46:70:5a:
2e:15:01:1a:b7:3c:c8:56:22:82:07:d1:fa:75:6e:
2a:76:d6:f1:18:83:f0:9b:da:3d:d1:cf:9a:bf:7e:
07:43:14:3e:45:7a:9c:ff:2f:c7:7f:db:c9:6a:07:
ac:0b:af:8b:37:53:98:cb:36:bd:34:f6:bb:c5:9f:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BE:F6:02:AF:09:CF:A8:73:C5:AE:64:5F:F2:CA:BB:A2:46:27:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:0c:17:64:0e:c7:21:6d:11:c0:ad:e7:cf:8d:06:87:e2:02:
94:a7:7c:62:21:a0:fb:9a:8e:03:b2:80:7f:ef:70:da:85:df:
55:02:0f:87:54:f6:2d:9b:bc:ad:f9:b5:9a:43:37:bd:8b:1f:
eb:5b:e4:72:20:1b:51:c8:84:cc:3a:6b:c1:1d:9e:8f:3b:1a:
7e:f2:ad:e8:f5:c8:bc:3a:9c:1f:51:2d:4f:95:9f:d6:b3:71:
54:d8:6e:35:fc:92:c8:cb:44:0c:d1:a4:53:60:ec:05:4a:2b:
ca:4e:38:7d:74:db:22:fe:85:39:cf:ff:d8:39:e3:eb:17:6b:
9a:8a:75:e4:95:d0:11:bc:0e:bf:fa:4b:a6:0b:06:95:f1:3f:
1e:e6:c9:0a:4a:02:c9:62:ae:3b:51:16:c1:fd:d4:4c:8a:22:
0a:99:c9:5c:a8:e2:cd:91:e7:2b:9f:3c:b7:af:26:88:7d:a6:
e9:f4:27:4d:27:37:8a:d6:59:63:46:69:e1:e1:7e:65:4a:30:
29:f1:52:10:03:ae:69:2d:80:5a:6b:68:bd:1c:eb:68:8b:9e:
95:64:76:83:1d:ae:18:08:b4:35:d3:0b:6b:95:7d:a4:e5:08:
5e:ab:79:ad:df:fa:4d:3f:3a:a8:29:32:e1:63:a3:53:8a:0e:
6a:f9:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:34 2025 by rpki-client on console.sobornost.net