Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a88af20-9dde-31a0-9bf5-829e231fbacf.roa
File: 5a88af20-9dde-31a0-9bf5-829e231fbacf.roa (raw, json)
Hash identifier: Ds0zgwa82meW1dI6Vm7vmPrWAY1DIOP8gCCB3v27U+E=
Subject key identifier: 43:75:D7:D6:58:2D:28:BF:3E:9A:C0:85:77:E5:53:72:1B:B6:C5:2A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858496FAF21090DE659EC01283800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a88af20-9dde-31a0-9bf5-829e231fbacf.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 12008
IP address blocks: 156.154.104.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:21:09:0d:e6:59:ec:01:28:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=073fa941-c9ed-43e0-926a-39ae21c433fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:4b:b4:5f:1c:d0:bf:04:14:23:72:15:12:
a8:76:4f:ab:32:80:34:85:72:4e:6c:12:83:6d:54:
e0:06:94:aa:ba:80:97:83:00:e7:36:db:01:17:41:
5f:b2:14:c5:82:4a:ae:08:37:dc:e4:c2:e6:64:6f:
04:c3:b7:87:39:c1:84:46:73:56:aa:22:f4:ad:26:
7a:58:0c:9b:ee:bc:3b:fa:45:e8:21:03:72:2a:aa:
ee:b7:b6:ac:76:7c:a1:b4:b0:ed:3b:b7:bb:54:c9:
7a:03:14:42:16:1b:cd:2f:55:f2:a5:42:21:56:e5:
31:02:90:80:32:8c:c5:06:3d:78:99:8e:0f:fe:40:
51:03:31:83:53:d6:20:bc:86:60:fc:dd:80:d8:8e:
e7:07:31:52:2b:1e:5f:3b:55:78:5d:d5:0d:38:f1:
c5:37:09:ca:45:c0:a2:b8:6d:7b:b5:62:e3:86:00:
9d:a7:1c:09:b1:e5:d8:57:b9:44:3c:51:b6:0b:ec:
7b:b2:fd:7e:99:b5:ca:ba:83:59:7b:b0:45:33:3c:
85:f5:55:29:4e:d6:fc:9e:1d:5f:68:20:64:5e:3b:
03:98:1f:d9:c1:f0:75:35:79:a6:10:14:18:d6:bc:
cd:be:2a:1a:ce:c4:cf:6a:ef:69:d6:63:f3:8e:db:
bb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:75:D7:D6:58:2D:28:BF:3E:9A:C0:85:77:E5:53:72:1B:B6:C5:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a88af20-9dde-31a0-9bf5-829e231fbacf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:bd:42:22:bf:17:e9:44:d9:b3:4a:93:ce:66:e6:c6:2d:ba:
e8:45:2a:65:b3:a9:07:57:c3:58:b7:48:c0:21:f2:e1:4a:8c:
7d:4c:38:c8:80:bb:a0:dc:1a:cd:63:f5:4f:df:a8:59:67:45:
79:b2:e0:6b:e0:ac:5e:3f:54:10:2c:8f:9e:df:d4:59:55:e0:
55:21:1c:4d:da:87:47:05:76:c4:01:da:7f:50:f5:2f:59:cf:
cb:01:7a:af:f6:b6:1a:05:30:39:80:9b:d4:8c:fd:df:cd:82:
41:8e:5d:8f:b0:b6:7c:18:a8:8c:64:e9:a0:3a:b3:1f:83:0d:
31:e8:47:c2:8a:80:3c:1f:0e:9d:19:38:a7:e9:34:32:77:41:
07:ca:50:96:01:1d:4f:de:55:fa:6e:ff:f5:55:92:5e:33:44:
25:3a:c0:ee:41:00:70:7b:ca:ae:38:fa:79:50:99:95:ed:0c:
04:1a:54:37:81:11:e7:db:03:bb:06:8f:19:df:3a:d3:66:f2:
b8:68:91:5d:d3:72:d4:e0:60:32:3f:aa:30:1a:0c:6d:0b:e7:
42:4f:2c:78:b5:1c:36:77:71:9c:38:c2:51:3e:50:9a:df:e5:
6a:0a:25:9a:83:d0:41:d2:30:b6:44:bf:4f:81:ec:51:58:f4:
14:5f:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:36 2025 by rpki-client on console.sobornost.net