Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7340892-8be3-3db7-989f-dea7bafa04bc.roa
File: b7340892-8be3-3db7-989f-dea7bafa04bc.roa (raw, json)
Hash identifier: lFW0cHXXKKDc/YVYGs3qqyubaV09oKjsoT6TFky5CCo=
Subject key identifier: E8:85:2B:99:7A:68:DE:A3:B0:2C:A4:93:62:B1:7B:FD:56:CD:C4:83
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858495C2465FF67B855A92B6E8080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7340892-8be3-3db7-989f-dea7bafa04bc.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 397232
IP address blocks: 156.154.71.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:65:ff:67:b8:55:a9:2b:6e:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=1110ab6a-9083-4f4c-b01a-a2f8db0acfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:a7:26:b6:73:cc:2f:51:03:a6:39:e2:b6:
f2:3e:8d:2c:59:6f:56:af:22:32:18:19:06:4c:96:
15:96:d0:96:4a:f5:47:94:7f:b0:8f:71:30:ed:f8:
40:08:65:97:a3:00:ef:6d:72:8d:d3:d9:8a:3c:2d:
bd:d1:67:13:25:0a:55:33:82:76:79:19:8b:11:50:
c7:d8:c7:5f:f8:e2:e4:c1:ee:23:91:00:5d:dd:c6:
47:80:91:28:39:8b:5d:ba:e0:a6:bf:27:94:e3:40:
fe:47:7c:1b:b9:c0:69:60:37:38:5e:ec:4f:44:12:
22:72:61:37:e5:3c:3b:05:54:f9:b2:60:31:60:36:
e8:59:0d:ac:e3:59:7e:4e:26:f8:d2:5c:27:04:f4:
57:c9:67:79:17:44:c5:ac:4e:7f:80:2c:31:a4:78:
9d:94:4d:3f:54:45:5d:ff:9f:ba:d0:5a:2a:8a:b0:
c4:27:19:1a:70:07:f6:18:a9:04:59:8a:6e:79:2b:
98:c8:e4:cd:a3:17:52:01:b6:87:bc:06:53:25:e9:
66:2c:bf:dc:7a:1c:cc:fe:9a:e7:7a:2a:b3:5d:3c:
83:db:5d:ef:b9:07:cc:42:83:c0:e8:82:b3:db:54:
57:d4:6a:5b:fb:ad:ee:2f:47:c9:43:8a:d8:39:42:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:85:2B:99:7A:68:DE:A3:B0:2C:A4:93:62:B1:7B:FD:56:CD:C4:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7340892-8be3-3db7-989f-dea7bafa04bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:bc:21:b9:1d:f9:5c:8e:9b:7f:66:34:5a:07:1b:f3:9c:16:
2a:b0:dd:24:8c:21:38:50:d5:0a:c6:e8:8b:a2:59:85:f1:bc:
5b:17:61:4e:0c:94:87:f4:db:86:ba:c8:09:74:c9:46:0d:ab:
e7:ff:a3:13:fc:87:15:e7:75:28:e3:a5:13:9a:61:55:34:5e:
68:8a:e3:61:d9:68:97:d4:63:b6:41:3b:86:2b:0d:f4:3f:23:
1a:96:7c:d2:f7:05:8b:7d:3b:dc:63:d0:81:25:57:f6:77:b0:
a8:09:94:62:6f:f3:26:e6:f3:de:ef:10:da:2d:3b:e6:3c:62:
df:3d:f4:ac:7b:c3:a5:54:87:98:26:12:a5:56:72:28:cd:9f:
a6:c5:60:c0:36:cb:f1:ab:4b:9e:e2:c2:d3:e5:ce:f2:9f:c8:
46:38:0c:95:f3:6a:bc:66:b9:49:91:51:27:f7:b3:c3:56:58:
0b:16:b7:b9:9e:93:bf:7c:9b:d0:03:5a:42:98:9f:1f:92:4d:
09:6c:d4:65:70:a4:33:ff:11:0d:64:f3:b0:f6:49:17:ad:b2:
8f:d7:d2:05:7f:fb:c4:a2:45:80:d7:43:b4:77:30:f2:79:4b:
7c:aa:68:15:c8:4a:43:26:dc:a6:40:c8:55:3c:17:0f:3d:b9:
03:3e:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:40 2025 by rpki-client on console.sobornost.net