Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8984fc-3da7-3396-baa3-109af56e8af5.roa
File: 3f8984fc-3da7-3396-baa3-109af56e8af5.roa (raw, json)
Hash identifier: s7VH3i9pOxZnIVCZMxD0xX6RAl4nVmXdd0BDu+O3J0M=
Subject key identifier: E3:65:98:32:32:E2:0F:AF:10:DB:6A:14:05:40:E2:12:D4:27:A1:6D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DCECD9183BB20CE69E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8984fc-3da7-3396-baa3-109af56e8af5.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397214
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:dc:ec:d9:18:3b:b2:0c:e6:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=0009c941-0385-4658-a9c8-3bbdde30ab00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:3f:00:14:2d:74:1e:ce:be:f2:55:74:95:
ae:26:6a:b7:33:32:6b:c2:5e:75:e1:83:d2:fa:3d:
d5:38:b8:6a:8f:44:45:fc:c4:bd:4b:a5:09:34:df:
39:a7:7b:e2:71:bf:36:7c:9d:06:59:19:b3:af:df:
b3:9d:30:15:dc:ff:25:47:14:79:93:e8:84:f0:47:
f4:31:4a:d0:64:73:5d:cd:94:0a:a7:bc:8f:5b:c0:
49:9e:43:af:16:46:31:76:2a:de:18:fb:2a:f5:38:
3f:ea:c1:fe:95:c2:e4:0e:0b:80:82:42:ae:3e:a9:
d2:8d:c9:ab:f1:b0:05:b2:4f:ab:81:18:4b:ff:06:
b7:f0:fb:a0:c5:f0:08:cd:b7:2f:fa:91:87:d9:e0:
11:12:be:f9:44:8e:0a:e4:17:57:1e:9b:4e:84:16:
1e:1f:15:fa:c1:3f:fc:9a:8d:a8:22:75:c4:27:22:
6d:16:cb:4b:1e:e8:fa:da:fb:96:0c:fc:2f:54:1c:
b1:3e:7f:f9:82:e3:ea:24:bb:d3:ff:f7:e0:12:bf:
cd:fa:38:e8:d3:d5:34:3e:b8:29:26:aa:04:62:a6:
ca:be:ad:2d:79:24:cd:d5:be:7e:c7:5a:2f:d9:25:
f7:17:0d:bd:5e:1f:da:ff:98:b3:b1:a3:c5:70:f3:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:98:32:32:E2:0F:AF:10:DB:6A:14:05:40:E2:12:D4:27:A1:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8984fc-3da7-3396-baa3-109af56e8af5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:c8:d8:7c:90:b0:82:37:1e:d6:5d:0c:b0:13:71:6d:04:1d:
9f:29:b3:37:74:3a:ae:83:9c:bb:db:fc:1a:20:62:8f:89:25:
b4:8d:fb:a6:87:3a:3f:de:18:e1:d0:9f:6e:69:8c:0f:82:60:
c8:07:7d:ff:f7:e7:41:0c:31:60:88:a3:bb:41:07:ca:78:51:
33:51:fa:75:2a:01:da:59:00:79:a7:6f:ba:2c:0b:ca:cf:e2:
17:28:1a:b0:83:88:98:f7:ad:31:0e:25:54:e3:4c:d8:30:f6:
9d:14:10:26:4d:60:f3:bc:61:1e:23:4e:b3:7c:6a:d9:46:68:
4d:60:e2:ad:f1:21:9a:fc:3a:44:21:bf:1a:60:fe:a0:07:15:
00:c2:88:ec:8d:b9:be:51:80:ec:98:46:5c:d7:7c:31:6b:0a:
ac:cf:68:9f:cf:98:37:87:78:21:82:95:52:b2:58:e5:a2:e0:
f3:cd:c4:8d:d0:59:d6:d6:6c:07:c5:d0:d8:f8:57:cc:7e:70:
64:ad:60:59:99:a2:c6:91:3a:a8:02:16:c1:2c:62:67:ec:a3:
06:58:2d:59:cc:0d:7c:93:bc:ad:18:91:ab:b9:9b:3c:ae:ea:
db:06:0f:2c:e5:ef:f5:5b:c2:97:91:c7:39:ce:6d:c3:1b:40:
de:90:58:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:35 2025 by rpki-client on console.sobornost.net