Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70ac2e0a-b1d4-3f70-92da-9c298349b8c7.roa
File: 70ac2e0a-b1d4-3f70-92da-9c298349b8c7.roa (raw, json)
Hash identifier: d2gLY0OG59OEPJNoxj9sxMX2/AtTv2sdOdQmX3z+hFQ=
Subject key identifier: 2C:28:A2:10:11:F7:9C:5E:44:C7:A3:4C:B9:FD:82:EC:35:37:A7:49
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858495C24717A20949F176AB181F8
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70ac2e0a-b1d4-3f70-92da-9c298349b8c7.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 397229
IP address blocks: 156.154.101.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:71:7a:20:94:9f:17:6a:b1:81:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=7fb3cb9a-db7b-4ce0-96b3-6b37da89edc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:ee:52:03:04:10:df:2e:39:02:82:d1:d5:
e4:10:89:ba:42:e1:30:8c:fb:48:d5:e9:9b:37:00:
c2:36:5d:b9:6f:bd:55:51:78:e9:5f:b9:43:95:25:
21:35:a0:d4:81:b7:7b:1f:90:04:4f:81:2f:fb:3b:
b9:ae:d0:c3:81:ef:cf:2a:a6:61:28:fd:b7:98:5a:
88:b3:86:b3:a1:aa:c6:b0:68:09:eb:37:b3:eb:9a:
34:83:0f:d1:f9:cb:16:9c:00:24:c2:3f:f4:bb:9a:
57:57:58:a3:37:c9:cb:87:10:07:2c:37:84:75:1b:
01:31:4c:fd:59:91:05:37:c8:eb:a4:aa:ad:4d:fa:
92:58:a7:ab:7c:eb:ab:cf:1c:9f:c7:bc:ba:0a:16:
87:71:fe:8d:89:68:9a:de:ee:c6:2d:64:d5:cc:bb:
f8:11:25:0d:e3:89:0a:0b:56:fa:d1:b9:bc:88:ce:
75:3c:d2:43:f6:92:e3:4b:a4:94:63:10:25:05:e9:
c3:f7:a4:59:4e:7b:84:8d:21:71:f4:67:22:42:9c:
41:64:d5:63:2c:a5:37:2f:ba:fd:d7:32:17:2f:76:
76:db:7e:5f:fe:94:6b:a3:1a:ee:19:18:b5:c8:d9:
5b:30:43:15:66:68:73:47:47:19:9c:f3:dc:0c:2d:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:28:A2:10:11:F7:9C:5E:44:C7:A3:4C:B9:FD:82:EC:35:37:A7:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70ac2e0a-b1d4-3f70-92da-9c298349b8c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:ca:35:f4:4f:fe:19:b2:9b:bf:a3:aa:68:32:0e:09:45:6b:
0d:68:f6:df:47:ef:be:7f:d2:7a:e0:74:8b:a4:1f:ce:1f:2d:
27:a0:b9:93:10:ff:7c:4e:fa:8a:7d:6f:05:4d:e9:2e:ea:43:
17:a8:fa:84:bd:eb:73:45:24:ad:b4:d3:da:79:38:48:8f:f9:
9b:12:43:00:47:7b:95:cf:9b:9f:22:10:6d:ae:81:b4:00:40:
3c:9c:6c:0d:e7:a3:af:b2:11:70:a3:fa:14:a1:b4:89:11:5b:
7c:13:8c:79:44:83:cb:a2:75:72:fa:e7:b4:7b:ed:17:d8:11:
7f:09:4d:09:10:43:a9:7f:00:8b:44:02:d4:26:cb:bb:ae:1c:
1c:b5:82:01:52:8b:0a:c4:dd:e4:89:94:d1:16:3f:0f:ff:d5:
70:b0:d8:a7:61:61:3c:5d:d7:8a:e4:43:c5:48:c8:3f:56:25:
b6:05:04:00:74:35:91:9a:50:f3:2e:65:18:a2:cd:07:d7:e7:
1f:a6:29:88:08:77:8b:c2:34:03:5c:92:9b:49:5f:97:db:46:
8a:30:bc:e4:db:42:02:41:a4:55:95:d9:28:76:c1:58:6d:72:
4c:b1:50:6f:0b:e4:f7:f9:55:49:6a:76:1f:e1:fd:be:45:9d:
5c:51:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:37 2025 by rpki-client on console.sobornost.net