Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/434c7427-6be5-3858-9180-74984e83d767.roa
File: 434c7427-6be5-3858-9180-74984e83d767.roa (raw, json)
Hash identifier: BoJVCw8Z1UTrY4WmWk2pW1/gZ6lyFSZt7Wq5giI6G8Q=
Subject key identifier: F5:03:BD:93:B9:93:F0:5C:E4:4D:6C:6B:49:4F:AE:D7:75:31:65:AF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858495C24741576C17E8E1D5C5F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/434c7427-6be5-3858-9180-74984e83d767.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 397215
IP address blocks: 156.154.105.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:74:15:76:c1:7e:8e:1d:5c:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=5c5178bc-35e6-4e42-9102-96a835c821e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:a9:db:05:b7:3d:0b:af:2b:8a:6b:8e:c4:
1f:26:ba:6e:57:e9:58:a5:5d:5b:b9:8b:fc:45:75:
35:7c:9d:79:c9:9e:ff:24:f4:ee:bd:36:3a:78:d6:
53:ca:2f:25:83:b3:fe:ee:6d:48:68:0b:76:d3:bc:
6c:1e:63:2a:b8:11:82:f1:7f:f3:ba:61:4e:a2:66:
94:3c:38:a2:96:47:a4:b0:aa:c8:2d:d9:06:64:16:
9f:68:77:3c:74:dc:21:33:3c:1a:19:fc:5e:d6:01:
b0:1f:e2:9b:36:fe:1d:3e:cd:87:b7:d7:13:ee:29:
26:9e:44:25:5e:17:60:2f:b5:35:f7:d0:ab:e0:8d:
44:72:6b:d8:81:39:91:86:ad:67:9e:13:4c:cf:ca:
ea:de:78:6a:30:da:32:bc:66:94:da:f6:d2:89:be:
63:be:26:5c:ef:a3:ee:c8:83:1b:63:cd:25:a8:1b:
c7:ad:73:ad:56:95:6a:aa:cd:5c:2d:b9:10:c6:27:
a6:9b:10:6e:94:80:8b:2a:b5:7c:60:80:81:26:58:
a7:c9:fa:f6:77:fa:fb:ca:74:7c:55:17:43:a0:e1:
5a:2b:2a:62:8b:60:cb:3a:f0:4e:23:8e:77:42:e2:
76:a9:64:e5:0f:0a:d8:4b:01:a7:24:10:9a:d3:77:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:03:BD:93:B9:93:F0:5C:E4:4D:6C:6B:49:4F:AE:D7:75:31:65:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/434c7427-6be5-3858-9180-74984e83d767.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:7f:06:22:74:90:e7:00:e3:49:11:9b:97:b4:26:fb:12:e5:
41:2b:e1:85:b6:1b:4b:f2:07:58:46:ae:44:94:53:96:3f:97:
a2:61:e2:af:9b:20:ac:cd:51:7c:69:0a:77:30:ba:0e:45:c7:
65:f3:f6:f0:74:6c:6a:50:c9:60:1c:2b:f8:f1:45:3e:7d:5a:
92:1a:90:8c:aa:9e:69:57:a9:a2:e1:13:97:56:7c:ac:b7:3f:
d5:76:d7:8f:d4:37:59:a3:50:5b:f3:6a:48:58:58:f7:2f:af:
d0:40:9d:7f:bb:2f:8d:37:2f:be:d1:ac:1e:c3:f5:7a:ac:3f:
d7:73:f6:bd:58:3c:d2:d2:59:a1:fb:06:c4:d6:34:89:5a:f2:
67:19:5f:2c:90:e8:f0:1a:0d:1c:00:a1:ff:97:a5:7a:38:a5:
b2:e6:e2:8a:bf:9b:24:ad:eb:fc:ee:3c:63:b9:f3:de:31:6d:
a9:f5:76:ca:91:92:8c:6a:69:46:f8:68:c4:11:0f:93:67:74:
69:31:d5:98:69:5b:51:84:81:06:6a:66:14:46:ee:bd:88:4b:
b9:f8:6a:49:cb:10:8c:ce:ff:08:c8:aa:0c:72:25:47:16:b4:
64:ac:f1:f2:b4:02:31:13:84:d3:84:2c:9b:6a:7c:34:93:c5:
6e:86:50:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:35 2025 by rpki-client on console.sobornost.net