Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2d6b49f-84f9-3767-a951-39d47d9c7220.roa
File: b2d6b49f-84f9-3767-a951-39d47d9c7220.roa (raw, json)
Hash identifier: onSqmTGdinpN3J5Jdw5sGbOH0yCNh4Vk4MziF8FUgMY=
Subject key identifier: 05:2F:9C:04:69:13:90:6F:B8:F5:53:5D:9E:2B:B2:7E:C2:E3:3E:11
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DDF81D3320C92CA88480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2d6b49f-84f9-3767-a951-39d47d9c7220.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397234
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:dd:f8:1d:33:20:c9:2c:a8:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=58687390-0771-4eb9-a0d2-bf5b84354d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:69:46:ce:f6:95:5b:46:82:12:3b:aa:ec:
7d:fd:17:8a:74:a9:20:f7:66:c6:49:8c:b2:c9:c8:
46:b5:dd:a0:dd:4d:d0:39:68:14:8a:b9:2b:a3:83:
76:60:56:9e:ec:f4:ef:ed:ba:df:de:4c:1f:5e:1c:
9c:5c:23:29:65:39:8d:e5:05:61:98:e0:68:68:18:
6c:65:88:e9:14:0b:bc:54:7d:ae:d4:7f:e0:b4:5a:
e1:03:24:8a:1a:6d:54:eb:f8:29:42:fc:98:77:0d:
fe:ff:79:bc:30:3d:89:bd:7a:71:93:2b:e4:0a:06:
55:dd:c8:3f:df:52:e6:e5:a2:f4:a0:5c:7f:83:8e:
c9:4d:1a:e0:0b:62:9d:1b:e9:c6:69:19:d8:2e:8b:
60:17:ef:a9:d3:c2:04:1b:b1:ce:ab:23:7d:5b:ee:
23:bb:16:e6:fc:38:f6:2a:85:9e:87:39:80:97:3f:
83:09:1a:7a:f3:0b:3f:a0:f8:02:42:5e:6e:56:28:
e6:54:38:97:cf:2b:9e:56:63:06:04:c9:c2:07:cf:
77:c6:ce:99:ad:70:8b:b3:73:30:23:ec:aa:9a:0a:
0f:2d:64:e1:d3:46:c9:a7:0e:f7:4f:3e:e6:5b:7f:
c0:f3:5c:6b:b8:9e:fe:e3:b3:cc:0f:69:b4:59:a9:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2F:9C:04:69:13:90:6F:B8:F5:53:5D:9E:2B:B2:7E:C2:E3:3E:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2d6b49f-84f9-3767-a951-39d47d9c7220.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:f5:22:42:4a:97:0e:5d:d1:70:99:26:a8:1a:3d:74:0a:18:
db:ee:99:61:d6:7b:1e:24:2a:a2:ee:5a:76:67:5d:ac:a7:74:
61:5d:dc:a8:e2:a4:8f:f5:96:cc:7b:11:d4:91:09:3b:b6:37:
5d:ce:9f:b0:ae:f5:c2:ae:eb:53:15:71:73:8f:2a:00:85:b7:
26:c7:32:e8:69:7b:ac:8a:61:27:a2:34:5b:01:63:66:b4:05:
06:2e:da:82:89:cb:bd:66:6f:a5:88:18:c5:53:14:c9:10:b6:
a4:e9:eb:54:15:88:98:9e:dc:c0:69:00:15:9b:7c:05:fb:7e:
da:45:59:11:0a:bd:54:c5:5f:40:9a:1f:f8:21:0f:99:f0:e1:
68:b6:c1:0f:a5:8f:ca:0d:bd:69:72:0d:3a:53:82:8f:b5:f9:
89:d3:14:dc:41:37:b1:dd:d1:8d:73:45:dd:7b:ea:75:94:a3:
3a:06:b8:6f:aa:e2:2c:c9:92:21:a1:c5:4e:ff:ec:20:17:2d:
4c:3e:c7:49:e0:07:b2:7f:88:ef:3a:b8:e7:09:bb:63:40:76:
f5:36:72:95:8f:ac:65:9b:d3:3d:66:a5:82:d3:c5:de:f9:b4:
80:d4:3c:a1:4c:64:6b:75:94:ee:e7:86:98:fe:78:d0:c6:fb:
e5:36:af:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:40 2025 by rpki-client on console.sobornost.net