Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa
File: d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa (raw, json)
Hash identifier: ZyQffFM7BjG12QDyyaLHAay1p/XxzBREGnidKHrToP8=
Subject key identifier: 5B:4D:1D:F8:DC:D3:B4:B9:AD:A6:F9:F5:60:C0:8A:1C:FC:83:F7:48
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E1FD90A2E1F27A42B780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397243
IP address blocks: 156.154.126.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e1:fd:90:a2:e1:f2:7a:42:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=cf1655c9-d23d-4775-a75c-71fff2fdfc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:c8:a1:7e:f6:0a:4a:bd:30:b9:3f:f3:36:
c0:b3:46:c3:d3:76:85:ec:f9:fe:ba:83:74:cf:38:
39:93:95:fe:e3:d6:f6:63:70:95:a9:ce:d7:db:75:
16:96:b9:f6:94:ea:27:5c:4b:17:cc:10:46:ee:62:
5a:25:b7:23:65:04:d6:92:67:6c:8b:1f:91:fc:af:
48:21:4c:50:ab:65:0f:ca:4d:e8:3a:4e:1f:cd:7b:
f1:44:72:f4:28:9b:36:60:f2:9a:ae:f6:ff:b1:98:
92:2f:b5:cf:6d:77:93:0f:ab:d7:1e:21:52:07:e4:
e5:ab:10:49:f7:41:f1:94:ef:dd:18:c1:bb:92:99:
9f:f8:7c:ac:19:29:18:58:2c:60:5b:10:61:2a:0c:
c0:e0:89:fa:60:44:19:eb:6b:26:1f:85:f6:8a:ea:
d5:51:9b:33:20:ed:45:13:f4:32:c2:f7:41:ca:24:
0b:ee:46:db:f9:60:09:d1:57:eb:e8:e4:6a:f3:bb:
5b:7b:e9:28:f9:9d:a8:45:04:52:15:98:d2:3b:86:
f4:1c:61:be:c1:95:7f:04:69:bd:1c:d0:2e:88:90:
6c:2c:a3:ba:1f:a0:26:f4:e4:a9:a1:da:70:8e:87:
ec:e1:6b:f6:a6:0d:3f:02:e3:5a:06:04:05:1a:0c:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4D:1D:F8:DC:D3:B4:B9:AD:A6:F9:F5:60:C0:8A:1C:FC:83:F7:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:88:56:73:62:1f:f8:01:c8:a4:8f:2a:a5:e2:1b:ca:f1:b9:
e9:49:96:05:11:1c:ac:dd:3c:cd:d6:a3:19:4c:db:10:62:2b:
69:d9:3a:dc:87:8e:52:95:5e:a7:47:60:5a:59:0f:04:98:10:
f0:99:75:af:7a:97:ba:f6:72:95:23:f5:55:77:7b:ba:7c:e7:
1e:f5:ee:25:ac:7f:65:8c:11:89:6c:c0:40:13:4e:ad:93:34:
4c:81:d7:1b:99:d3:2a:0e:a5:ee:b8:1d:de:01:24:61:ae:7e:
09:9f:eb:aa:c8:d9:0e:e6:2f:93:f8:90:a6:ca:8e:f9:0b:34:
93:46:c6:9b:7f:1a:0c:02:65:ce:5f:96:49:af:40:35:25:58:
98:3e:0e:f5:21:88:6c:b1:74:77:4b:9d:f9:b8:32:b5:96:e6:
f9:e3:f0:77:ca:cc:cc:59:49:09:ae:5a:49:ad:fb:2e:43:66:
f4:9f:b8:bc:6a:da:d9:fe:4b:e1:90:e8:f0:ee:fb:26:51:20:
fb:b1:77:11:b0:de:80:eb:ea:79:c4:19:18:ad:09:03:16:09:
b3:ab:2d:d4:5a:a5:32:a5:33:2d:18:b2:b3:37:de:42:58:c1:
25:cf:17:65:e2:7b:bf:c9:6a:6d:45:ad:84:14:fa:33:b0:45:
50:ef:e5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:41 2025 by rpki-client on console.sobornost.net