Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6667b337-699c-315a-9ac6-ee1509be617b.roa
File: 6667b337-699c-315a-9ac6-ee1509be617b.roa (raw, json)
Hash identifier: RzNmbq2Z7CSUQerqKTyFWX+YawsFVaTZJa1OZhGplQ8=
Subject key identifier: A7:71:1E:BC:75:3F:43:62:04:51:BB:7D:5F:E1:B6:A1:43:32:9F:DA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246EBA360CC36A9C1CFCB80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6667b337-699c-315a-9ac6-ee1509be617b.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397217
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:eb:a3:60:cc:36:a9:c1:cf:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=def27e18-fc91-4042-8bde-b90207d0871c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:91:2f:3c:b8:71:48:d7:5e:3a:80:d9:da:
d6:98:fc:1c:24:e6:ec:1a:93:8c:f9:87:eb:10:fc:
48:22:88:37:1d:77:0d:3a:6e:59:9d:65:5c:0a:86:
72:1b:96:10:f1:ea:a3:0a:52:4e:90:c1:1c:b5:c2:
dc:61:6e:f4:2c:55:0d:fc:03:70:f2:d9:76:95:9b:
5f:34:71:e8:3d:66:b1:18:10:ff:c1:b4:df:e9:31:
11:33:d3:96:cc:f3:bc:4b:ce:4f:bc:f6:81:7c:8f:
a2:f6:15:7b:f8:b5:89:cf:35:92:9d:1b:ab:10:3f:
00:45:09:3d:9e:b1:57:55:37:89:bf:10:7d:2d:59:
f6:c2:00:4d:31:79:56:8b:a4:bc:a8:a4:45:bb:bf:
d5:7f:65:0a:07:0a:aa:38:c0:36:f3:88:8f:34:70:
29:e3:b2:ad:47:46:30:09:45:b4:35:a5:11:d4:05:
e5:99:bc:de:8e:4a:c1:34:c3:15:ed:0d:2c:a3:15:
9c:06:bf:f2:12:0b:46:2f:f7:dc:df:7f:b1:a0:23:
5d:ef:0d:77:e5:13:71:a4:45:84:e0:23:ab:cd:e6:
14:06:31:1c:08:26:c3:46:aa:24:3b:ca:85:16:41:
c0:c8:fd:84:8e:f7:e5:54:c4:4a:67:89:85:10:6b:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:1E:BC:75:3F:43:62:04:51:BB:7D:5F:E1:B6:A1:43:32:9F:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6667b337-699c-315a-9ac6-ee1509be617b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:95:c5:bd:ce:62:cf:a2:59:d2:47:fc:3a:f8:d7:e5:d0:56:
de:11:d9:28:94:c9:54:88:34:aa:88:f9:03:85:df:8f:70:8f:
84:06:63:11:b4:d3:e6:92:41:34:f0:53:e9:55:36:d4:13:88:
d1:b8:e1:8e:f5:3f:2d:94:90:bd:cc:e7:b4:e7:65:23:f3:dc:
42:fa:40:34:f8:8a:4b:b3:9f:f6:55:0a:17:ca:3a:7c:27:0c:
1f:0f:e7:e2:3c:d3:fc:2e:7d:34:33:ea:ec:e5:d4:47:10:45:
a7:50:23:d3:f2:50:bf:a3:e9:55:8e:5b:d8:15:10:9d:0f:7b:
d1:37:ff:bf:33:5e:42:42:5b:09:3b:91:5d:af:af:1d:3b:43:
80:bf:90:c1:16:ac:ae:18:58:f3:9b:9f:3a:7e:c3:a1:c9:f9:
31:43:cd:cc:a7:ca:1e:6f:f8:4e:86:e0:e5:03:df:27:e7:c3:
9b:20:43:6b:4a:6d:9c:7d:5c:75:d1:bf:fa:1b:39:28:24:6c:
e4:c8:cb:af:ba:43:d9:e9:c8:04:3e:09:b3:8f:d0:16:fa:cf:
62:38:4f:2d:34:3d:22:50:85:0e:fb:d0:d6:b4:be:f5:12:26:
8d:f1:84:5d:1d:5e:3e:4a:cb:27:24:e1:af:eb:7f:51:8a:32:
4f:82:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:37 2025 by rpki-client on console.sobornost.net