Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e338375-88e8-3020-bfeb-300eee415b55.roa
File: 3e338375-88e8-3020-bfeb-300eee415b55.roa (raw, json)
Hash identifier: DSWm95O1cUHRJtmSZH5fF2IdiFCKzSfOD3TUSQS4ybQ=
Subject key identifier: 47:DA:3A:2D:AB:C0:03:35:63:12:73:A1:90:B4:90:09:D8:B0:AB:81
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858495C24719E7B300A9440658D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e338375-88e8-3020-bfeb-300eee415b55.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 397232
IP address blocks: 156.154.101.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:71:9e:7b:30:0a:94:40:65:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=d2c6f489-eb61-4e11-a09c-cc52ccf8fd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:9f:b4:93:c3:7a:0b:49:01:8c:b9:87:1e:
92:7c:ed:eb:55:f8:d5:4c:e7:54:6b:d3:e3:ae:56:
70:aa:65:3a:e5:dd:ba:4f:75:d2:a7:fc:90:5b:24:
5c:2b:a0:db:0a:68:12:bf:99:81:7e:2f:17:81:d6:
c4:95:8b:af:cd:3a:5b:ba:c7:db:0e:ce:dd:5f:f4:
c7:69:ee:9a:66:45:a2:6a:51:a3:f3:f4:eb:1e:77:
04:60:54:cb:57:91:fc:ab:83:09:03:c4:92:e7:93:
ee:a4:d1:b1:3e:60:b6:81:32:df:c9:15:f7:d8:e5:
05:56:31:c5:1f:1b:a4:5d:b9:e7:fd:57:02:3f:70:
d4:db:4e:94:a2:5d:dc:56:94:39:d0:12:e9:f2:af:
a2:02:ad:79:fa:b6:cb:d9:f2:48:9e:11:b1:e7:8a:
1f:84:41:53:21:00:8d:de:24:98:92:ab:a3:84:38:
44:ba:e2:c2:6d:e8:b9:67:ed:1d:62:84:b1:2d:c7:
20:9b:e6:74:9e:31:06:d1:04:e9:d5:60:b3:2e:76:
4f:dd:db:c7:d5:a8:92:14:5c:af:4d:39:4a:c9:ed:
ad:87:59:41:01:65:48:3b:f1:52:28:25:7b:71:ba:
b2:2a:81:84:65:9a:b1:b6:67:4d:32:05:39:99:ea:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DA:3A:2D:AB:C0:03:35:63:12:73:A1:90:B4:90:09:D8:B0:AB:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e338375-88e8-3020-bfeb-300eee415b55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:9a:ea:35:3d:ee:2f:dd:db:ad:27:98:a2:27:76:3e:67:1c:
10:6b:67:08:f2:56:5b:2f:6f:30:ce:a8:18:d2:5b:01:01:70:
77:6c:34:45:fe:a0:15:ea:f4:97:15:13:6f:3c:41:38:8d:8b:
50:30:ee:c3:62:e2:2d:6f:25:e1:3f:31:b6:98:11:31:cf:94:
6c:59:44:cd:76:eb:be:d2:52:38:f2:35:88:43:02:c0:c5:15:
96:ae:eb:fb:15:c8:d2:3d:b2:bf:45:66:9d:f6:b1:bd:ad:ed:
16:10:4f:e5:c3:95:a9:41:9e:8f:cd:bb:0a:bb:28:8c:fc:3e:
f8:0a:68:29:84:7e:7f:49:94:a3:c1:39:a1:62:0d:3e:71:64:
27:e7:fd:59:c0:0a:55:6f:b4:04:98:35:09:cc:cf:74:d7:14:
dc:70:4b:4c:ad:24:1b:16:3e:5d:28:24:00:ce:99:fa:b0:45:
35:a8:80:a7:01:fd:a6:7f:83:19:c2:82:b6:72:8f:b1:fb:c2:
87:4f:90:bf:1c:7b:d3:68:bf:1b:2f:f1:53:e9:5a:19:ad:2d:
b9:97:73:5a:b9:85:b2:ba:85:3b:ee:c1:4e:67:c1:22:bd:f9:
b8:40:3f:ec:1a:b8:80:65:6e:74:35:de:eb:4e:25:d8:50:86:
43:49:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:35 2025 by rpki-client on console.sobornost.net