Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/40fa2b11-a741-3a7f-845e-b9d2ae070461.roa
File: 40fa2b11-a741-3a7f-845e-b9d2ae070461.roa (raw, json)
Hash identifier: FRpWLV/FKEBW3Ezn6lI8aFMuAOND5LPMvXJuYeFvv/k=
Subject key identifier: EA:39:F5:71:6F:D4:29:37:A1:E7:47:82:01:5E:EE:DB:E1:81:D7:D3
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B642681DDCA0CBFFA3F9B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/40fa2b11-a741-3a7f-845e-b9d2ae070461.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397237
IP address blocks: 156.154.70.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:26:81:dd:ca:0c:bf:fa:3f:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=697f5eca-5440-4f0c-9da6-dceedccddf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:73:64:7c:ad:b0:f9:50:ec:d2:ea:b5:63:
f4:3c:45:90:ca:fa:bd:8c:3b:05:b1:b3:93:45:dc:
4b:d3:6f:4e:8e:d1:0d:75:94:07:18:01:f4:cd:a6:
d5:49:5a:88:7f:63:7a:d7:f0:c7:0e:92:d0:7c:55:
20:dd:84:86:e5:66:6f:e9:55:fd:f4:ee:5d:ea:bb:
66:8e:b6:ec:a8:90:58:65:ac:e4:f1:2d:de:33:a3:
78:83:cf:06:f4:06:e5:0c:e6:f6:54:d1:46:e4:b7:
5e:f2:d1:7c:bd:1b:03:33:6b:8e:63:ca:72:3c:3c:
14:0e:9e:85:f0:ee:57:bb:dc:02:c1:d2:b6:97:ab:
3e:86:d7:a5:49:ca:05:97:46:a2:29:5d:00:67:2a:
85:b5:41:85:4f:f6:1b:16:6c:25:1a:ef:68:62:6f:
29:f5:2c:9b:74:fe:db:82:8b:4e:23:82:12:44:fe:
e6:52:c5:75:bf:08:8d:2c:a0:dd:aa:57:dd:85:51:
8b:e0:1b:5c:ef:f1:cd:8a:cb:b0:10:11:7f:10:09:
4d:0c:31:2a:dd:a2:8e:c4:61:81:81:b6:61:7b:d8:
46:51:35:b2:b8:6e:30:d9:82:16:82:25:f6:a3:ed:
fc:32:24:34:d3:af:8a:86:10:92:6f:16:d5:4b:a2:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:39:F5:71:6F:D4:29:37:A1:E7:47:82:01:5E:EE:DB:E1:81:D7:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/40fa2b11-a741-3a7f-845e-b9d2ae070461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:13:26:4b:9b:f6:6e:c2:7a:ca:20:e8:ae:dc:01:42:1a:02:
ce:80:7e:71:03:f5:ab:af:cc:ed:ba:3e:ff:e9:56:df:6f:a4:
6e:08:64:5f:35:86:fa:ed:a8:0b:e9:1c:94:3b:4d:80:7a:f0:
4e:41:36:e9:5b:c3:17:ba:8c:b8:57:9d:df:b4:a5:f8:29:9b:
ba:9f:f5:45:66:55:ee:e4:3a:5d:92:69:7a:f2:b5:b2:12:0a:
d2:0b:56:9d:4e:8d:7b:74:c2:d6:6d:88:52:c9:f0:90:be:54:
6b:28:15:87:77:de:cc:4e:99:19:fc:a4:21:e5:09:f1:8f:a7:
f8:9a:3c:65:ea:d1:e3:63:50:27:d0:a8:9a:81:a4:14:0c:92:
da:80:0d:f7:fd:11:b8:01:0e:ab:10:e3:dd:eb:9a:39:6b:df:
18:f4:d3:d7:a0:b8:b5:3d:72:23:85:ed:62:75:91:22:4b:97:
72:42:b0:0b:41:6b:88:dc:d4:78:18:46:2f:3e:ec:ed:26:ae:
1f:e4:88:cb:37:d3:37:b3:b4:e4:c2:32:7b:99:14:8d:8e:b8:
85:97:30:c7:54:df:e9:77:ef:88:58:ba:86:57:c1:8e:e6:65:
96:65:33:38:4f:42:1a:4c:18:9d:02:eb:14:5f:77:31:4b:28:
80:63:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:35 2025 by rpki-client on console.sobornost.net