Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c1e0faa-f2cd-3ac2-8d60-c9047539c3d6.roa
File: 3c1e0faa-f2cd-3ac2-8d60-c9047539c3d6.roa (raw, json)
Hash identifier: cEeSimZb/A68135YGdgbSW/ZqhwZT9ST7MASzXLif8s=
Subject key identifier: D5:3B:18:28:99:F7:9C:B6:74:A7:40:03:B6:93:54:5B:C0:9F:2F:D6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B64289CB6547F537B1B3280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c1e0faa-f2cd-3ac2-8d60-c9047539c3d6.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397240
IP address blocks: 156.154.54.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:28:9c:b6:54:7f:53:7b:1b:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=2baf5446-a4f6-4442-b7f1-693c3bfad676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:f6:4d:2d:22:1a:07:74:77:d4:25:69:5e:
e8:a1:26:05:f0:0a:a2:10:7f:00:39:e1:be:37:ec:
d0:bf:66:53:bf:9c:00:3e:7e:2c:b5:4e:a5:c6:ff:
1f:26:b1:f3:43:10:8e:25:c1:00:ce:61:6a:e5:d7:
4d:b9:88:57:8c:c6:7c:f2:da:50:21:9e:88:5f:49:
ec:f8:f8:f3:c1:da:7a:d8:f3:cb:ee:3a:bb:ac:c4:
25:26:ad:a0:d0:e0:57:3d:43:a9:f3:b7:19:6b:b6:
b0:21:48:55:05:aa:eb:35:e4:ba:0b:c5:0b:30:01:
77:9c:72:e0:96:60:2a:52:e5:58:44:70:28:a8:73:
0c:23:54:2f:25:77:5c:00:49:51:a7:17:09:4c:eb:
ec:57:18:5a:de:67:6a:ab:ef:e0:96:eb:01:ba:4b:
22:b8:24:14:e8:fb:46:15:57:84:0f:51:59:60:47:
70:f6:c9:1b:b2:06:02:b7:85:7a:51:f2:9b:75:70:
30:e4:62:fb:b6:96:da:6f:c8:f2:c0:b5:25:30:a0:
a5:df:76:2f:f3:44:fb:ff:90:83:26:66:76:e3:09:
ac:95:a6:32:9f:f6:62:2d:1f:52:e5:07:04:ac:64:
6a:a4:cb:54:99:56:70:a9:e1:5a:56:f3:69:b3:8d:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:18:28:99:F7:9C:B6:74:A7:40:03:B6:93:54:5B:C0:9F:2F:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c1e0faa-f2cd-3ac2-8d60-c9047539c3d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:e5:b2:70:bd:a2:5c:95:f2:76:e2:f5:d0:5f:73:3b:6c:07:
80:5c:e8:e1:a0:33:b9:68:7e:9a:ad:99:a8:e4:20:2d:20:13:
75:1c:a6:6b:eb:ce:03:0d:ca:1f:89:57:80:86:a3:25:d0:a9:
20:31:65:1c:cc:a6:36:f4:03:ec:5e:ea:c1:9e:a9:f0:c8:2b:
3c:3d:13:bc:cf:d0:9b:8c:f3:91:79:8d:f4:8a:a4:8e:0a:a7:
31:60:b7:c1:01:ca:ef:99:8e:91:cd:46:f6:30:d1:6c:ac:86:
8a:ef:76:e9:6d:3b:7a:00:a8:67:c4:f2:fc:4e:6c:1b:f8:3f:
b5:a9:fd:c8:f5:71:40:19:9e:ad:c7:82:5d:41:23:7d:ee:4d:
48:f2:02:88:fe:27:ed:8f:fc:9a:21:f4:a2:72:a0:fc:31:b7:
3c:c7:ff:3e:24:89:af:17:4a:f4:66:5a:3d:fa:eb:8b:a6:18:
c5:a7:9e:dd:6e:03:99:8e:d0:7b:cf:d2:2c:4d:55:ec:d3:2c:
97:f3:14:a2:02:25:b8:fa:8e:fe:bb:ee:6f:6c:bf:93:9f:f6:
97:e7:97:f6:69:70:58:24:df:9a:f1:71:35:83:95:cb:4c:06:
83:05:aa:21:8f:46:0a:56:05:4d:b7:db:88:94:fb:d2:3a:02:
ae:56:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:35 2025 by rpki-client on console.sobornost.net