Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be9254d4-a76c-3e34-86c2-4a1020eac210.roa
File: be9254d4-a76c-3e34-86c2-4a1020eac210.roa (raw, json)
Hash identifier: E/E5iZLVgwooz2NdKJalNn3iV0IJrAY/wcxsDwB/MEs=
Subject key identifier: 25:78:F3:E7:7F:F2:D9:A2:51:4D:31:FA:42:73:45:27:B9:AD:62:97
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E4AC610264D49BB9BA60
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be9254d4-a76c-3e34-86c2-4a1020eac210.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397222
IP address blocks: 156.154.128.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e4:ac:61:02:64:d4:9b:b9:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=2cb1b7ed-f996-49ba-9c78-58aefdd36bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:fa:51:a2:a2:80:39:2e:d3:1c:3c:aa:2a:
65:cd:75:b8:ff:ae:12:fc:c0:3a:2b:2a:65:e6:56:
4a:6a:e5:d2:a3:72:54:5d:e6:ca:ae:b6:24:07:95:
88:0a:b1:60:cc:ed:3a:29:d7:10:9d:f3:54:e7:a3:
b5:64:85:8b:06:1d:3e:0e:7d:f3:36:d1:1d:5d:f1:
20:a0:6e:fc:1b:f4:fc:0e:76:ef:72:f1:bb:34:4b:
77:a2:3e:97:de:9d:47:ed:63:cd:14:64:8e:2c:cc:
9a:44:31:f9:a3:f5:ad:ce:0f:51:f8:73:70:f8:24:
1c:d2:95:85:91:f1:14:cf:fc:9f:26:5d:c2:35:30:
ed:e1:0a:3a:d5:b8:9f:32:5a:29:c9:6b:cb:ab:5e:
a5:59:50:a3:67:93:bd:f4:2a:af:82:d8:31:81:f8:
e3:8b:97:79:7b:24:a4:3c:7a:d2:b5:13:87:47:f8:
6e:ae:0d:96:34:6a:4d:af:c8:46:fb:de:e4:00:9c:
55:10:5a:e8:9c:d3:f9:6f:23:59:b9:da:c6:07:8f:
5d:3d:23:e5:49:c3:be:1a:6f:db:5c:8f:fc:c8:af:
db:35:12:de:16:6a:7f:44:fc:64:88:ed:ba:71:74:
e3:d3:ad:dc:26:12:00:12:2d:30:34:97:38:d8:20:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:F3:E7:7F:F2:D9:A2:51:4D:31:FA:42:73:45:27:B9:AD:62:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be9254d4-a76c-3e34-86c2-4a1020eac210.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:8f:cb:e2:e1:0e:d2:16:ba:12:06:dc:14:26:99:7f:33:08:
0e:cc:e8:aa:9e:32:e6:a5:61:65:68:af:b7:70:cf:7e:45:8b:
3d:24:e4:49:65:b0:50:62:61:bb:7a:2e:71:57:c6:98:b8:a5:
92:a2:f9:01:d7:d2:cf:ca:67:ed:97:1a:5b:c8:8d:77:b0:a0:
99:d1:1c:47:a3:85:ec:ec:49:97:06:19:50:a5:75:b5:2e:5f:
75:5c:b7:49:e5:e4:e9:cd:77:6a:7d:71:76:17:b5:8a:f1:b1:
d8:a8:76:07:d7:f9:39:fb:93:ca:f2:1a:6c:f6:05:85:7e:83:
d4:22:73:7d:03:d6:b7:da:c2:0a:83:f7:2d:02:6b:76:24:cf:
00:f2:a2:74:a8:97:ba:f5:22:09:81:e3:97:a7:c5:50:09:50:
16:f5:1a:fd:81:8f:94:36:25:c8:cf:53:99:5d:a7:e9:56:91:
37:51:2c:88:f8:42:9c:f7:50:35:6c:2e:82:e2:38:70:c7:9f:
6e:ad:68:87:84:83:c7:e8:f3:1e:41:db:64:72:d6:aa:90:a2:
f6:d8:cc:fa:91:14:28:44:f6:1d:99:bd:84:59:ac:76:2c:6a:
fd:8f:93:10:d1:c1:9c:34:e8:4a:37:c2:9f:fe:d8:0f:7d:00:
e2:ed:fe:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:40 2025 by rpki-client on console.sobornost.net