Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e817b1b9-3f9b-3655-9d61-c05b57f2184e.roa
File: e817b1b9-3f9b-3655-9d61-c05b57f2184e.roa (raw, json)
Hash identifier: wA21bZkHiLnaUsPNqCHExsKr2zKFYKdwMeruowqahcs=
Subject key identifier: 16:75:76:10:F7:78:35:EA:83:FB:17:DD:97:8A:47:EE:80:95:2C:D5
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E8C92D4EB96B01820F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e817b1b9-3f9b-3655-9d61-c05b57f2184e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397231
IP address blocks: 156.154.107.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e8:c9:2d:4e:b9:6b:01:82:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=170a5faf-39cf-442e-9530-dbc56a3c93b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ae:45:51:ea:01:16:8d:89:69:f7:e2:49:1b:
6d:be:a5:85:d0:32:a3:00:5a:6e:e3:bc:ae:5a:a7:
da:ba:7f:b4:69:7f:2f:a0:61:73:48:f9:55:fb:b6:
b2:8b:ca:43:10:d3:0a:89:ec:96:4f:15:4e:29:32:
41:b0:23:23:cb:43:05:d7:51:d6:85:e6:5b:53:aa:
a6:68:72:92:4a:5b:2f:23:f8:be:17:9d:57:aa:80:
da:22:54:60:16:2b:de:0f:72:39:ff:0d:bb:42:77:
80:8f:27:10:8b:f6:c7:e3:1d:71:01:c1:50:21:8a:
46:e4:98:f8:d6:50:05:51:20:fc:15:ea:11:2e:65:
6f:37:9e:61:9f:07:04:3c:35:ee:0a:a4:c2:d8:b7:
7b:8a:a2:fa:1d:bc:1f:15:8d:b6:0c:8b:96:92:da:
7d:05:24:fc:3e:db:94:ea:b6:88:e8:f7:8e:ad:55:
6a:09:ba:e8:01:8c:4b:ee:96:b9:21:42:05:6e:ba:
02:95:da:a6:db:24:70:d3:f0:f1:0d:3c:63:96:d9:
d8:31:51:7b:4d:26:3f:78:f0:d9:ee:ea:ce:38:7f:
32:c9:ee:c9:80:4a:f6:6e:4b:77:89:d5:23:fb:be:
8d:ed:81:bc:b5:d9:39:57:d8:e2:8a:61:f9:e4:4a:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:75:76:10:F7:78:35:EA:83:FB:17:DD:97:8A:47:EE:80:95:2C:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e817b1b9-3f9b-3655-9d61-c05b57f2184e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:48:36:59:e2:5b:07:06:b5:c0:2e:d8:e9:82:66:9e:5c:08:
96:5b:60:b8:6c:5b:38:77:3b:80:3e:6f:04:a6:a3:7f:06:98:
dd:f6:42:30:c9:82:e9:3a:1b:21:5e:5b:c6:97:ab:f7:12:2c:
94:23:96:47:7c:80:de:45:e1:93:02:a5:22:97:aa:64:ac:f8:
ea:6f:cd:6c:2c:70:97:14:b4:85:4e:d4:9a:be:37:06:27:ef:
cb:87:65:de:b7:86:da:12:79:01:51:12:0d:bf:50:d5:22:62:
96:ba:1b:61:ab:6e:18:3d:f0:9b:89:4a:df:02:73:28:80:e9:
a5:8f:93:2e:6e:5c:47:c2:70:e1:80:9e:0f:25:86:d3:f8:da:
1c:31:f5:10:a2:54:61:6a:33:32:58:e7:ed:25:40:d2:8e:8b:
32:a1:b1:cd:fe:fa:de:f3:9b:9b:cc:06:43:24:af:92:cd:b4:
01:18:86:03:94:ef:b8:73:aa:9c:fc:7f:5d:3b:f9:91:3a:99:
21:63:79:98:63:99:18:19:22:3d:71:00:ad:06:21:87:95:13:
78:76:4b:a9:d6:3b:c9:e3:2f:63:2c:2d:2e:03:a6:ed:77:3b:
42:0f:bc:40:12:ab:41:60:0e:ea:c4:c0:aa:61:42:51:67:3e:
d4:50:b9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:42 2025 by rpki-client on console.sobornost.net