Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b540ec3c-5d72-3219-8a7e-e548cfd2ef29.roa
File: b540ec3c-5d72-3219-8a7e-e548cfd2ef29.roa (raw, json)
Hash identifier: +K83zfSsWh72KHyVaeU9F9bt+FkYaAkTZJk4/83J88s=
Subject key identifier: 37:DB:FF:82:9B:0C:F5:37:3B:04:82:C9:8B:2F:F3:67:D0:6A:24:C5
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858496FAF1F072978561B11A34400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b540ec3c-5d72-3219-8a7e-e548cfd2ef29.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 397243
IP address blocks: 156.154.100.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:1f:07:29:78:56:1b:11:a3:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=149e50cc-2852-450a-b01a-6cf17d25f5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:2e:30:8c:29:62:24:07:ce:e1:a3:d5:8c:
3c:ac:51:75:bf:d4:2b:3b:08:de:c9:10:e7:d7:e5:
cd:0f:c1:68:fd:4e:b8:7f:27:24:4c:d4:09:11:70:
69:6c:96:0d:b4:06:11:ab:ea:a4:0b:3c:c8:a8:90:
82:b8:8f:06:fa:49:39:b3:c3:b1:ef:54:10:7f:64:
cb:d3:ee:e3:26:31:53:ba:33:52:a8:f5:02:36:67:
43:65:c8:2a:d3:65:f0:f0:c7:73:74:2c:8e:73:df:
74:68:cf:8a:26:95:27:a8:8a:d1:45:48:1f:8e:3a:
77:ba:31:c1:1a:9f:37:8c:70:56:69:d6:e0:a4:08:
bb:df:09:d8:4a:3f:f2:84:32:d8:bb:c1:79:d7:73:
8d:11:4f:84:9c:54:4d:c9:67:12:c0:44:41:07:0a:
6a:f7:1b:f1:56:f2:85:e1:29:35:cb:8b:19:fd:76:
2c:15:3d:71:78:3b:97:4e:64:46:23:4e:69:c3:c7:
e9:d3:88:2d:b0:79:c4:60:63:40:ae:81:9f:49:4d:
6c:88:9a:63:79:f2:e6:ba:70:17:2b:00:39:0b:05:
45:ed:b0:6a:44:0f:4f:b6:ed:0f:7a:54:10:74:c7:
fe:fb:77:d0:06:a9:90:31:e4:ec:45:31:24:29:62:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:FF:82:9B:0C:F5:37:3B:04:82:C9:8B:2F:F3:67:D0:6A:24:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b540ec3c-5d72-3219-8a7e-e548cfd2ef29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ae:02:f6:49:4f:7c:7f:93:e5:e4:d5:4c:4b:aa:d1:04:c2:
67:be:29:dc:28:e9:79:e0:ce:41:9f:91:41:44:5b:7d:cb:91:
a0:c6:52:b7:a8:4c:bd:34:e1:67:a9:2f:c0:08:5c:ba:51:87:
ea:80:92:bc:09:1b:8c:dd:e4:04:f9:30:03:ad:53:8c:9c:35:
68:30:37:27:05:ce:fc:9b:1b:1e:be:0c:7a:46:fa:4a:74:ce:
30:a3:88:72:89:1b:7f:c5:c9:3a:6f:fc:6a:ef:65:54:24:76:
a6:bf:a1:0e:0b:2b:e8:5d:c4:d1:09:75:72:d3:d8:06:9c:1d:
1a:41:f7:5f:a2:40:01:cb:e8:1c:68:59:82:f3:50:e4:16:5c:
aa:1f:52:95:d7:57:19:33:44:2a:ef:fa:92:40:07:b9:da:8f:
f3:08:09:b5:8b:fb:ac:a9:56:21:0f:06:8e:a0:bf:9b:39:93:
53:7f:bb:45:bb:78:da:09:e0:a0:23:6c:c0:65:12:fc:75:b7:
e7:de:11:8d:11:69:f5:7b:c5:12:a8:37:94:3b:b4:3f:a3:4e:
10:6d:d3:dd:70:be:5b:ef:be:6a:25:84:6b:86:9c:1e:d5:15:
e1:51:c3:19:64:be:3e:70:c0:57:a3:c3:16:4c:02:2d:01:1f:
8e:5f:6d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:40 2025 by rpki-client on console.sobornost.net