Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/356d2633-4906-3015-a77c-067a5ba0d7c8.roa
File: 356d2633-4906-3015-a77c-067a5ba0d7c8.roa (raw, json)
Hash identifier: lcuUDX0a6GO9KXM63Xy99X0S4H51O8Ict7c/2W6B+/M=
Subject key identifier: 2D:3F:1F:B5:5A:41:EE:E7:7B:31:97:75:3F:77:20:24:0D:ED:BC:41
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964EF5A0B3B3AF421A7900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/356d2633-4906-3015-a77c-067a5ba0d7c8.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397237
IP address blocks: 156.154.67.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:4e:f5:a0:b3:b3:af:42:1a:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=c1e88e7b-5d5c-44d7-9113-e9b4aab2ada6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e3:a0:d1:0c:fd:fc:a7:a5:26:02:76:62:84:
69:71:3c:86:28:9e:14:21:b1:bf:1a:b0:4e:ab:93:
85:67:dc:cf:85:0c:b6:ec:d1:74:cc:73:31:89:75:
c1:fc:05:07:90:97:bd:b9:01:7a:38:08:d0:ee:2b:
26:a1:86:2f:8a:df:00:9a:85:e6:02:8c:2d:00:e5:
70:f6:03:81:d8:11:17:7c:b6:71:18:80:01:cc:27:
05:31:1f:33:1d:e0:fb:91:2a:e1:f9:d6:de:6c:1a:
d1:11:b3:66:30:c5:89:b7:01:ca:f5:da:ac:e2:ab:
02:24:29:67:59:7a:42:c4:3c:d1:c9:96:10:81:ad:
66:04:d2:82:00:41:bc:81:b0:08:36:31:65:ab:52:
cf:28:01:97:57:a4:cb:04:3b:9c:23:ef:ee:61:54:
69:27:9b:ea:20:31:03:9a:df:c6:a8:9e:7c:ff:91:
b6:a5:ec:96:43:62:5d:db:59:84:f9:5b:63:b8:5e:
1e:c4:ee:a3:ac:fa:df:0c:99:be:1e:c5:da:1b:93:
3d:48:62:e3:e9:3f:19:28:26:df:f7:42:43:ca:87:
60:ca:74:bd:fd:92:6e:eb:23:84:a3:ee:99:eb:46:
62:35:6c:74:f8:59:c9:e2:a0:cb:fc:1f:36:2f:47:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:1F:B5:5A:41:EE:E7:7B:31:97:75:3F:77:20:24:0D:ED:BC:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/356d2633-4906-3015-a77c-067a5ba0d7c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:d4:a6:1f:dd:8e:5f:92:68:fd:d1:1c:02:26:53:13:01:48:
e8:3c:ab:e9:f6:4a:c0:85:5e:27:c2:f7:30:93:39:14:48:c4:
ff:f9:e1:b3:79:46:97:f4:99:37:fc:24:39:3f:0d:5b:36:f9:
5d:7a:f1:52:86:0c:eb:23:9e:7f:d5:6e:c0:4d:49:b9:09:f7:
5f:56:a8:34:dc:00:9c:07:46:c1:c2:1e:ad:f3:b3:85:44:66:
94:fa:8f:b4:33:c6:8b:65:4e:7b:11:57:6f:a8:a0:78:02:dd:
f8:dd:50:76:d9:79:25:f8:26:09:1a:31:68:92:56:2e:73:81:
bf:c8:7f:aa:e8:c5:c4:c0:e5:19:15:21:03:66:a4:19:18:be:
9b:8f:d0:30:b8:85:6a:53:e2:fb:58:ec:8e:29:97:26:bd:06:
3e:0e:30:0b:22:fe:d2:fe:90:6b:e0:6c:cc:66:4a:c7:c7:f6:
d4:72:c6:fc:76:a3:ac:fe:a6:8d:a6:97:49:36:42:f5:90:12:
37:2a:cd:0f:1e:be:0c:bb:4f:92:f9:dd:c4:3e:e6:15:c2:39:
b9:de:06:6f:e8:78:79:89:59:92:85:14:6d:f0:48:f9:62:65:
b7:81:e0:db:59:cc:3a:65:6e:34:21:32:4f:e4:a6:68:52:4d:
c8:9e:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:34 2025 by rpki-client on console.sobornost.net