Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91afe88d-f079-3905-9a9e-e8bda2bc10fd.roa
File: 91afe88d-f079-3905-9a9e-e8bda2bc10fd.roa (raw, json)
Hash identifier: dIqnIS1BpAnTbDMAAhb5PCA9z1W9ARjjKMgXvDD4py0=
Subject key identifier: 8B:CE:ED:E2:BB:C6:8A:B6:47:CC:66:E3:50:08:BF:52:D3:5A:C9:B7
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2105D8BA1BEA638BD1D1C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91afe88d-f079-3905-9a9e-e8bda2bc10fd.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397219
IP address blocks: 156.154.133.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:05:d8:ba:1b:ea:63:8b:d1:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=99b5a1f4-86f1-4760-9e24-e7f8e810770b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:12:81:8a:7b:91:81:32:3a:ea:d9:8e:d4:
b1:22:41:40:2d:cd:ba:db:80:84:81:5b:3b:e4:73:
f7:99:d5:ec:21:d2:28:e4:94:51:f6:78:32:be:5a:
94:ca:6c:c7:5d:d3:7f:8f:26:b2:13:de:fd:51:24:
2e:67:78:35:1b:56:33:d4:dc:59:99:cf:55:45:b9:
7b:d3:72:1c:61:64:e3:4e:92:24:bc:20:8f:c8:fc:
68:be:14:e2:49:4a:26:79:5f:45:d4:29:80:20:5e:
dd:c3:9e:7d:92:80:d8:68:36:ba:0f:2d:be:a7:bc:
09:33:5f:a6:62:8c:d2:06:a9:22:83:fb:46:41:77:
c9:14:80:98:ac:ac:d8:5c:7d:a9:77:a4:02:3d:56:
1a:50:24:aa:a2:93:e0:27:25:3a:43:8a:83:09:f9:
16:e4:94:bc:c5:3e:c2:04:f2:9b:07:6d:09:6a:0c:
13:d7:89:af:61:95:d0:ab:75:c4:b8:f3:21:ee:f8:
bb:83:d4:76:6e:bf:9d:d8:a1:8b:f2:f3:4d:2c:09:
fa:05:a1:56:9d:b0:9e:d4:4d:65:35:c1:b7:ec:42:
b2:e1:4f:8f:e4:67:c4:b9:23:94:7f:43:72:24:1d:
83:32:f7:c2:48:ee:f8:00:11:39:73:a1:ec:91:f0:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CE:ED:E2:BB:C6:8A:B6:47:CC:66:E3:50:08:BF:52:D3:5A:C9:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91afe88d-f079-3905-9a9e-e8bda2bc10fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:e6:da:4f:b9:5f:01:cd:60:18:12:1d:11:4e:d8:8d:5e:eb:
cf:24:f1:15:a2:7d:a5:70:b3:7c:a2:3c:78:f1:bb:e3:ba:cb:
16:97:31:f8:34:db:c2:05:57:66:a5:8d:09:a0:3e:39:28:d5:
31:f0:99:04:c3:a7:8a:ef:00:9a:ea:95:4b:0d:48:8a:55:f6:
86:b9:e5:0f:8c:05:d9:5b:e1:7a:df:08:6c:bf:b4:ca:9f:95:
05:93:35:b4:9e:48:f6:ee:26:d4:6b:3f:47:38:08:a0:db:c9:
26:97:cc:05:cd:d5:af:e7:07:4d:2d:8d:9c:5f:b5:b4:c5:57:
1c:73:ea:71:d7:a4:8b:5c:f6:ca:de:03:4e:90:de:4b:91:e0:
70:2f:b7:ef:14:b0:70:9c:2f:59:c9:23:52:5e:70:83:bc:23:
fb:dd:1a:4e:75:d5:5b:32:53:38:87:f8:73:8c:28:49:6f:e2:
c4:96:83:c4:a3:76:f3:a1:39:3a:ce:6a:09:f0:50:17:8e:e2:
6e:a0:dd:df:9e:c1:68:da:70:a0:a2:74:77:46:66:af:ac:8c:
74:db:31:49:69:99:8c:f7:67:02:8c:a1:a9:5e:3d:d9:b6:cb:
88:98:25:53:39:85:72:aa:68:f6:7f:f1:5c:38:25:3f:c6:8e:
2f:20:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:39 2025 by rpki-client on console.sobornost.net