Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e19939e-cf7a-3228-8e1a-c414e45a68a4.roa
File: 4e19939e-cf7a-3228-8e1a-c414e45a68a4.roa (raw, json)
Hash identifier: zCoyUSqLGBzhfw/E1blxWnkFbN1/Kw/NC6kiRazZs8Q=
Subject key identifier: 74:07:19:E7:FA:CE:26:18:B4:C4:07:40:A0:B2:D1:4A:10:20:99:A0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99659FCDC1B8A4CCF214EA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e19939e-cf7a-3228-8e1a-c414e45a68a4.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397236
IP address blocks: 156.154.157.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:59:fc:dc:1b:8a:4c:cf:21:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=0d2324f3-6312-48f0-93b9-73dd82886e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:68:19:f6:e7:5a:6c:e8:bf:bf:13:b8:c0:
6f:17:59:d0:6e:5f:d2:29:73:64:6f:0e:a3:36:3f:
bd:7d:7e:7b:d1:68:38:b3:da:6b:4b:0f:ed:e8:ab:
46:00:d7:16:c4:bc:a7:79:fe:f5:a2:b7:9c:d4:17:
94:6c:aa:6d:6c:c7:af:95:0a:12:d7:fd:1a:41:fc:
2e:dc:2a:7e:17:44:e0:ce:33:30:58:d2:8f:3e:30:
1a:b7:87:44:42:b9:70:f6:3a:01:3b:5a:a6:7d:70:
e9:2b:62:b2:4b:5b:a3:46:47:85:96:f8:2e:c7:c0:
29:da:b8:05:cf:8d:74:9d:ea:7d:14:27:b9:64:bd:
7c:11:fb:49:78:a3:08:c2:4d:c5:3f:cc:16:e1:f6:
d2:1f:97:c6:be:c2:d0:3c:6f:c7:26:27:ed:f8:6a:
66:a8:22:16:02:7b:a2:7a:e6:2a:55:02:de:1a:e3:
ca:36:55:54:b8:1b:38:83:5e:09:b7:1a:11:89:33:
56:64:bf:d9:e6:ec:7d:42:fb:02:ca:e0:46:95:e6:
6f:e0:94:c7:ca:94:63:a3:83:77:50:e7:c5:e8:4d:
c3:23:31:89:9b:b9:6f:5f:3a:44:32:83:6d:f7:58:
0f:fd:93:48:f0:d4:89:02:4d:22:89:89:d2:08:06:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:19:E7:FA:CE:26:18:B4:C4:07:40:A0:B2:D1:4A:10:20:99:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e19939e-cf7a-3228-8e1a-c414e45a68a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:8d:d5:56:9a:b2:1a:03:06:3c:3a:55:28:6f:70:a2:f2:83:
f3:07:55:98:0a:f1:90:4e:25:bc:02:c3:91:f1:79:90:2e:8c:
f0:f7:7b:2a:f0:d3:0a:74:73:aa:32:c9:07:e7:32:dc:4b:ba:
3c:94:1e:13:30:1b:18:1d:f1:77:9e:ae:d9:f1:0c:5a:46:5a:
ca:c3:68:1f:bd:f5:98:83:88:43:5c:d9:b8:1a:2b:b6:98:0b:
83:e9:76:ac:57:ed:38:0f:21:c1:7d:48:70:a4:8e:d8:b2:9a:
01:27:be:d3:7b:60:da:6d:6d:d5:63:48:8f:cf:0c:fe:6d:b2:
9a:44:28:b9:fc:b8:0a:7e:56:0b:df:04:51:ef:be:d9:4d:22:
9f:38:86:41:be:ce:fd:52:36:e4:d4:79:d3:1e:38:2d:5b:da:
d7:2c:eb:bf:5d:73:21:ef:a6:53:50:d7:cb:35:26:b3:2b:22:
fc:b3:e3:60:ec:bf:4f:ac:32:80:27:59:bd:f0:15:e1:ac:4a:
46:47:04:eb:a3:a2:dd:55:bb:95:00:32:ad:53:b3:69:87:06:
ec:44:b9:42:c0:c9:ad:95:9e:fd:78:c7:88:ba:16:81:25:94:
4c:4b:f3:f3:c7:29:04:c5:ef:c7:6e:27:4a:16:b4:af:94:a5:
21:85:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:35 2025 by rpki-client on console.sobornost.net