Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4b2c025-d3ee-3281-97ee-97786b7f6c28.roa
File: a4b2c025-d3ee-3281-97ee-97786b7f6c28.roa (raw, json)
Hash identifier: uS3Q+NZe3QdaQtGrYvYtsusFmlzvk0G7XwOqFivgTNc=
Subject key identifier: A2:F1:BF:F1:1E:FB:B1:38:37:B1:8E:0E:71:27:15:03:15:4C:A6:D8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858495C24736F1442A53212B4FB80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4b2c025-d3ee-3281-97ee-97786b7f6c28.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 397234
IP address blocks: 156.154.103.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:73:6f:14:42:a5:32:12:b4:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=be764d12-be49-430b-9e92-fd1101b89d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:52:af:bb:6b:64:86:44:a4:11:21:a4:88:
ac:3b:89:10:81:f6:ce:1e:ec:c9:08:b8:d2:0d:8b:
37:52:15:9a:93:f5:53:9a:b8:e6:6a:4e:29:c9:b3:
b2:9b:7c:d5:37:20:f0:24:a1:85:c2:92:d7:1f:b9:
ff:5f:85:23:f8:83:c0:84:f1:50:3c:63:35:0e:31:
5d:d5:f1:99:79:7d:42:17:3b:e5:0b:89:c5:e7:df:
74:89:e3:65:a1:f8:c9:c6:61:3d:f7:c3:44:fb:1b:
f9:4a:fc:bf:e5:f5:c7:3e:f9:38:db:01:d8:ca:0f:
1a:a7:58:89:ce:5e:76:51:4a:42:0e:b7:70:87:2a:
52:ee:77:29:10:ac:88:94:ff:05:5b:b7:30:50:0c:
b0:ec:cd:3f:bc:c0:0e:97:a0:26:6b:2f:ab:82:64:
90:80:60:1a:ba:81:b1:e8:0c:e0:74:4d:4a:07:fd:
99:5c:a1:5b:2d:a9:12:39:fd:c1:59:4a:9f:b4:1b:
49:6e:33:0f:fe:70:f3:77:88:21:c9:e3:0b:c8:42:
78:dc:2a:4f:b3:22:c6:74:4f:57:d3:c3:e2:36:f3:
6c:4d:7a:09:53:05:f1:8c:4b:81:21:4c:0c:7a:2f:
4a:5c:78:61:a3:a5:7d:80:7b:53:ce:2b:78:7a:f0:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F1:BF:F1:1E:FB:B1:38:37:B1:8E:0E:71:27:15:03:15:4C:A6:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4b2c025-d3ee-3281-97ee-97786b7f6c28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:bb:32:72:cc:21:1c:cd:23:ac:f9:1b:fa:95:94:f8:41:bd:
d8:1d:95:89:d9:54:31:9f:8b:24:7f:3a:fa:0c:98:00:eb:e7:
56:5b:52:b2:46:ef:2d:cb:b6:0a:80:66:e8:74:68:d9:b4:e9:
58:78:60:0b:f2:7c:95:97:d0:a6:52:a2:7e:dc:e0:a1:a6:6a:
55:fe:90:de:a2:bb:51:55:e9:49:be:90:b5:6a:14:5a:23:ca:
e9:1d:c9:ca:3a:67:f9:41:df:f0:c6:f3:73:63:a8:9c:46:21:
63:79:68:bf:ff:58:d5:47:99:28:f2:b3:ba:28:fb:5e:5d:08:
ef:83:09:95:72:00:a1:54:84:b1:2c:8b:78:e0:9c:ed:a9:66:
fb:a5:64:cf:3e:1f:ef:c2:6c:71:59:e7:8b:a9:22:39:86:e7:
3c:a7:eb:41:52:b6:86:57:0f:05:65:b8:91:42:1e:24:d9:0d:
5d:8c:e1:8d:b8:c9:c0:b5:db:62:1e:63:01:84:0f:3a:4e:c7:
ed:8f:d5:a0:c3:06:11:10:95:db:1e:fc:05:7d:51:20:b2:d5:
21:70:60:06:c8:bd:8b:3a:c0:bf:1c:06:be:22:d3:87:07:6e:
75:96:7c:f3:30:7f:43:11:cf:f6:c0:9d:fe:1f:15:3d:31:9c:
7b:9d:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:39 2025 by rpki-client on console.sobornost.net