Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be0fbd35-c968-3b45-9f6d-43d064cb9e3d.roa
File: be0fbd35-c968-3b45-9f6d-43d064cb9e3d.roa (raw, json)
Hash identifier: GATb7IuzXUKmYn3cAqEBPtYuFPb2HbInmuMF5GHMGak=
Subject key identifier: 98:93:6B:70:AA:0C:EF:2C:F0:56:15:07:3E:13:DC:D8:0B:D0:09:9A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858495C24716E3AD8D6E9F75FE900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be0fbd35-c968-3b45-9f6d-43d064cb9e3d.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 397228
IP address blocks: 156.154.101.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:71:6e:3a:d8:d6:e9:f7:5f:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=960994a1-d8f3-4a0d-bb90-5f211f4de85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:1f:74:76:19:73:92:dc:13:f4:30:a3:cf:
32:68:86:41:4b:59:e2:b9:43:1d:98:29:35:a0:1b:
44:44:77:37:bb:80:4c:ef:b6:51:bc:f2:25:eb:22:
2e:65:29:32:ed:56:74:8c:d6:a6:4f:e8:59:80:fb:
90:e1:93:87:93:86:38:b5:e8:2c:0b:b3:63:ac:f3:
5d:1a:6b:eb:da:29:51:77:8d:ef:86:70:4b:47:a2:
c3:a2:aa:1d:62:a8:9a:72:dd:a5:43:4a:0c:8d:57:
a2:9c:55:48:3f:0e:ff:7d:0e:a5:1b:34:d2:60:d1:
61:45:d5:e9:03:42:65:f5:b5:0b:51:4b:29:41:01:
26:5a:ea:7e:3d:b3:c8:d1:eb:c4:5a:0b:38:c0:39:
c2:a7:10:f6:c9:94:0a:90:60:bc:c5:cc:c7:15:0c:
bc:bb:6a:4b:36:13:84:fa:fe:3d:3a:89:60:43:d8:
1f:4c:f9:d8:52:8a:9f:06:a6:76:ab:7d:da:b4:7f:
28:75:32:24:98:60:fe:8b:b8:8d:0e:08:08:fb:e7:
18:d6:ea:dc:5d:e7:97:37:5b:64:6e:5e:40:97:fb:
d6:cc:87:b7:8a:d0:93:7b:6c:df:20:73:2d:64:85:
40:28:0a:09:57:bf:65:cd:7b:da:4a:a6:b8:11:d0:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:93:6B:70:AA:0C:EF:2C:F0:56:15:07:3E:13:DC:D8:0B:D0:09:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be0fbd35-c968-3b45-9f6d-43d064cb9e3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:ec:47:ca:43:bf:88:8d:a0:cf:5d:56:56:ee:e0:a9:44:9e:
09:3a:73:3c:32:fa:5d:3c:db:cc:91:82:b0:75:66:c6:ee:42:
cf:56:85:e4:1f:4f:6b:6c:fa:96:a2:71:27:04:73:44:fe:ef:
4b:72:0c:c7:51:83:22:27:66:dc:c4:69:0e:bd:9e:32:b3:d4:
3a:5a:65:00:97:48:33:d7:07:95:b5:9d:1e:29:c0:fa:e7:5a:
96:1d:50:4e:d9:a4:b5:93:b4:94:42:b5:12:cd:b2:2b:c3:46:
7f:d4:b1:c7:da:ba:0a:d3:b6:68:a3:da:e3:28:74:b2:58:3c:
38:1c:9f:39:d5:76:52:15:e6:9c:47:2b:06:1f:f6:77:a4:d4:
40:21:28:91:19:25:0d:d1:52:8c:93:65:e5:70:4a:70:10:8c:
b3:06:d2:bb:61:cc:fd:ef:dd:c5:75:d8:21:bb:db:bc:19:4c:
59:84:46:b1:7f:dc:5a:25:76:dc:8c:97:74:55:17:bd:03:62:
e2:90:5a:b3:f1:a7:0f:9c:80:54:07:f6:80:72:09:88:04:0a:
b5:13:eb:8d:3f:22:ed:e2:e6:83:6f:77:96:f4:2e:d1:49:08:
89:fb:80:86:b9:45:1a:3b:8b:23:1a:75:fc:8b:5a:75:d7:a7:
bf:7d:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:40 2025 by rpki-client on console.sobornost.net