Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa
File: 9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa (raw, json)
Hash identifier: Cf5DmVV3wrhOpvTgu8OZ/87sL56dWCM1oegu4nysRTA=
Subject key identifier: 49:46:DF:EC:65:99:24:7E:0C:C0:C9:7F:F6:61:69:0F:C3:1B:65:1A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996585DA17C5F5302594480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397236
IP address blocks: 156.154.159.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:58:5d:a1:7c:5f:53:02:59:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=edf971ad-5523-4bf8-8d25-eb7b5f48cc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:b3:d3:9f:58:d5:cd:43:5f:e4:41:16:7e:
46:53:ba:76:84:d3:98:1d:50:a5:e8:36:b5:31:c4:
35:28:e4:27:4a:af:2d:94:62:84:04:a2:48:fd:55:
bb:19:a0:c7:e8:90:b4:a0:8f:0e:cf:1b:97:69:58:
65:a2:2b:e6:24:8d:9c:8b:5e:39:cd:b7:20:d5:f7:
66:1a:41:8c:99:24:c0:03:21:8e:3d:be:c2:4b:78:
8d:47:d7:aa:18:f7:09:3a:f4:cf:18:15:6c:7b:86:
a7:08:9d:8d:07:5e:48:a3:c7:15:99:cb:2c:50:df:
be:c9:cc:3f:5c:01:74:cf:b3:ee:e2:9a:e4:62:47:
82:d1:3e:66:b6:c4:2c:d3:f1:e7:af:3b:59:55:71:
2f:a0:78:05:09:50:fd:3c:01:9b:46:b3:cd:ab:b8:
b5:e9:8a:eb:30:56:d7:3c:8f:0e:c0:08:fd:7b:34:
70:ca:d4:a1:00:8f:db:6a:c2:a1:5f:e3:43:c2:23:
51:cd:6c:c0:83:e9:26:e8:cf:f0:5c:21:f6:84:f7:
14:2d:df:e8:12:96:7a:bf:56:b5:ca:df:b5:c6:c4:
ae:48:59:30:d9:a5:14:e6:8e:ef:f8:84:cc:43:80:
02:41:55:0c:0f:86:79:92:4a:5c:eb:a6:55:ec:8d:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:DF:EC:65:99:24:7E:0C:C0:C9:7F:F6:61:69:0F:C3:1B:65:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:ac:d5:a5:97:40:6c:d3:37:a8:ae:15:62:12:b9:8a:99:57:
86:02:f1:52:ca:34:70:2f:b6:30:ff:2c:5f:7d:06:3e:56:43:
b9:f3:be:a8:3f:bb:58:0c:d7:16:8f:c8:ac:d8:cb:8e:69:30:
de:51:7c:fb:d7:5b:d5:dc:27:d9:31:dc:c5:8d:67:d0:75:39:
61:9a:47:3e:f0:32:81:9b:70:44:e6:9c:a1:18:d9:4a:50:d4:
c2:ae:1c:18:17:4b:cf:07:78:cb:d2:b7:4b:23:61:2e:bd:6d:
6f:d6:b6:1f:06:3d:98:05:9e:11:d4:f9:61:0f:a4:56:8b:af:
da:63:d5:c0:69:f8:16:f1:b1:2e:c2:38:a0:41:f3:e3:2f:51:
24:47:19:c3:33:81:50:b1:e0:2b:33:64:a0:71:ba:7c:ef:d3:
ec:3e:4c:b8:55:71:f4:c0:78:a8:e1:d8:d8:ab:79:2a:37:6a:
f6:d1:eb:9e:9a:5e:eb:d4:cc:80:90:bd:09:a0:9a:11:02:e7:
a4:34:05:48:e9:16:62:59:ca:11:24:55:99:18:a8:08:ab:0d:
34:0c:c3:65:e1:6c:0d:16:73:be:5f:77:03:4b:9f:9e:30:fb:
91:fd:c8:ef:58:7d:cd:f4:da:5a:fa:f6:99:0b:07:2f:e4:b9:
09:7f:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:39 2025 by rpki-client on console.sobornost.net