Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71a79833-4142-333c-9611-7965be8ab923.roa
File: 71a79833-4142-333c-9611-7965be8ab923.roa (raw, json)
Hash identifier: S2EZKKo3POpSjAFEAdp0Qau7mzZC0KlJMsf2zBqLeLY=
Subject key identifier: D6:4B:A6:C5:AD:F8:7E:B6:98:83:71:8E:E1:6D:1D:05:A6:D5:2C:A2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858495C24746B25B5CA7E43772200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71a79833-4142-333c-9611-7965be8ab923.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 397222
IP address blocks: 156.154.105.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:74:6b:25:b5:ca:7e:43:77:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=6478769d-55b1-4b7b-8902-2fb37e40d2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:57:10:6b:dc:75:d6:52:bf:9d:71:fe:48:
71:49:4d:61:64:1a:d3:30:08:e3:7c:66:33:17:46:
82:a2:d1:8f:6f:1a:01:3f:21:f4:ae:aa:76:b2:32:
ca:6e:18:62:34:f3:45:04:af:33:32:05:de:88:53:
df:ce:c3:d2:52:c0:da:98:e0:97:98:1e:4c:71:cd:
55:51:aa:59:be:2b:d6:3d:9c:fc:92:ee:4a:b3:78:
32:cc:98:1b:29:51:2b:1e:d4:45:42:9d:eb:8c:d4:
31:e2:da:ef:4e:9b:aa:c5:81:8e:a6:33:d9:ca:af:
9e:67:9a:be:8a:3d:c1:bf:39:14:f4:5a:68:6a:0c:
b9:0b:cc:21:ce:97:a8:82:72:97:ca:bd:74:5d:08:
70:39:32:71:ff:52:b2:68:d5:80:38:30:70:6c:d1:
c4:e8:2b:c7:fd:fc:25:5d:a4:be:db:7f:25:45:64:
c5:04:35:4c:9e:96:4a:0f:c6:1b:8c:1f:b0:6e:d6:
39:32:27:b2:00:89:df:01:55:2b:ef:61:9c:44:8e:
5d:32:6f:79:e9:0e:8e:bc:94:27:cd:31:cb:8f:26:
30:f5:e5:fa:b4:c2:9d:52:55:89:cf:a6:3b:70:01:
4d:e2:d2:75:a3:fe:57:50:2f:95:17:86:58:a7:dc:
79:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4B:A6:C5:AD:F8:7E:B6:98:83:71:8E:E1:6D:1D:05:A6:D5:2C:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71a79833-4142-333c-9611-7965be8ab923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:da:d8:d2:cf:cc:9c:22:37:3c:10:2b:f3:dc:c7:cf:cd:fd:
41:ad:1f:cb:5e:df:da:59:6c:1f:89:9d:04:99:95:1a:6a:c4:
2c:b8:c9:5c:f1:84:bf:6b:2d:25:78:45:0c:b1:d3:e7:6e:19:
c3:0a:2a:23:5d:a6:3f:7c:d3:c7:72:09:79:a2:6c:5c:a5:3f:
93:51:c4:f9:f1:f6:46:56:f0:c7:33:a2:02:05:00:d2:a4:2f:
99:48:1c:79:9a:74:0b:c2:e6:ad:fe:67:1f:32:92:8e:f4:a0:
82:54:3f:6b:9f:e7:d2:9c:0a:bb:ee:35:53:5e:56:2c:85:e5:
b9:ae:f7:b7:29:5b:2a:21:a9:f3:52:f5:59:9c:b9:ed:72:e2:
3b:82:e2:b2:f7:aa:1c:41:97:af:6e:fb:98:34:9c:de:8c:9a:
f4:de:a6:89:f5:6a:e4:b5:16:42:05:76:0d:16:9a:ab:9a:cb:
65:df:56:e3:f9:f8:f2:27:4f:d7:db:96:86:b2:7f:3a:ec:a4:
1e:4a:e1:c8:db:69:a1:5c:a9:80:19:2c:95:f0:5b:59:bc:b6:
a2:30:96:e6:87:89:a2:00:86:56:bb:44:f3:80:4e:30:fc:f7:
e6:e4:6a:48:15:83:cb:54:af:a6:d9:52:09:91:e1:6c:39:33:
2f:89:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:37 2025 by rpki-client on console.sobornost.net