Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/706e1885-7d7c-31b1-84fa-53bce16e9157.roa
File: 706e1885-7d7c-31b1-84fa-53bce16e9157.roa (raw, json)
Hash identifier: x2HyPuxhwLiLvEkaezdNwNOvv89UnQv1N/nLWG0zcQI=
Subject key identifier: 32:AA:14:AE:6D:D3:60:65:1A:FF:E8:34:84:BE:BD:3B:A9:C0:C1:B4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858496FAF21887401E24722DF4780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/706e1885-7d7c-31b1-84fa-53bce16e9157.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 397220
IP address blocks: 156.154.104.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:21:88:74:01:e2:47:22:df:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=6fdff59c-a5c4-4f88-8637-1940546e0075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:cb:b1:e2:a9:fb:d6:37:69:fe:bf:e0:87:
bf:04:9b:d3:d5:33:f4:68:68:86:74:75:12:f2:48:
42:30:25:df:29:52:5f:28:bf:9c:b8:8a:fc:de:bc:
78:9c:09:d8:af:a2:5a:8e:0f:fb:2f:c4:77:0c:cb:
0b:74:27:b4:6d:f1:f9:35:9e:e2:32:a7:5f:e1:17:
4f:71:97:0b:39:7b:02:25:0e:87:ea:ca:a1:b0:38:
fd:31:80:42:04:01:c8:70:1a:21:37:91:98:78:c1:
5f:c4:9a:6c:9a:f2:46:b2:46:91:2b:9f:73:54:0a:
b8:66:0a:ef:70:90:91:ed:1c:57:df:77:fa:4e:67:
89:10:2b:9a:aa:8e:30:63:47:5b:d3:8b:3c:ed:53:
60:63:28:16:60:b1:24:51:32:8d:4f:f4:2e:f9:49:
73:d8:55:8f:d2:0a:85:44:8c:a0:97:2d:16:a1:23:
e4:8e:e2:df:ca:25:4c:8a:b0:4d:af:eb:46:0b:66:
ad:e6:0d:3c:dd:63:51:60:c1:9e:e8:ad:e3:c4:08:
b8:7c:57:62:3b:0a:b1:04:df:08:fa:56:27:a7:65:
a8:75:a6:04:a6:8a:cb:7f:9f:6f:3d:c7:e0:86:7a:
2d:c8:e5:33:6c:2b:e5:58:d9:c5:76:00:6c:ce:56:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:14:AE:6D:D3:60:65:1A:FF:E8:34:84:BE:BD:3B:A9:C0:C1:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/706e1885-7d7c-31b1-84fa-53bce16e9157.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:4d:c3:6f:a2:6e:f3:56:61:a7:87:e9:32:8c:4e:50:81:71:
c2:08:42:5a:d8:7b:c8:9b:d2:0a:a7:90:b7:1e:82:46:6b:ac:
a0:1e:63:dd:a6:c6:c3:4c:a3:cc:1d:a1:fa:ec:c0:f8:9b:1c:
3b:69:64:c8:9a:87:14:04:03:e4:4c:75:7f:8e:e5:ac:84:6a:
7c:24:09:32:97:3c:52:17:e3:e6:29:02:e8:fb:0b:c9:f7:36:
9f:11:5a:c9:f1:8a:f7:40:2f:45:75:02:48:6d:1f:b8:d0:35:
25:53:38:57:ac:11:a1:74:7f:e4:f0:17:f7:ce:a1:ff:1f:02:
02:fd:5b:2f:02:f7:43:d4:37:93:78:d8:5b:43:08:b7:c7:f1:
da:d6:30:b0:0b:54:bb:92:aa:68:0d:af:09:16:b0:cc:be:25:
d1:2a:b1:4f:a4:b0:52:86:1d:39:42:7d:25:0b:04:0b:4f:61:
d2:36:a0:1b:3a:5f:b7:13:a1:93:12:4e:44:8f:eb:dd:de:f5:
de:a9:42:7b:fd:2f:69:74:52:7c:9d:93:c6:62:8a:55:ed:c2:
a1:8d:a6:73:f0:32:b2:8d:d2:b5:a2:27:f0:ad:f3:d6:5f:a9:
73:fd:0d:a0:f7:e0:d6:c6:9c:9d:dc:fa:c7:24:52:f4:49:53:
b4:4a:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:37 2025 by rpki-client on console.sobornost.net