Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa
File: ea85d689-f412-3ca9-8467-a0a4c846db6e.roa (raw, json)
Hash identifier: K5enZaOMHqSrqkwcHQx09FiEEWEvnSXeZlBL2hw7WUg=
Subject key identifier: 49:00:8C:E8:E5:C4:72:E8:D3:34:A5:2F:11:7E:97:26:9B:7B:CD:58
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2106DFA8CF9A0F11900A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397237
IP address blocks: 156.154.133.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:06:df:a8:cf:9a:0f:11:90:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=670cd932-0b1a-4c62-b8f9-dff558888609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bf:a9:ea:8d:ce:12:e3:6e:08:5a:16:bd:03:
f6:09:bd:4f:9a:2d:e2:c3:25:a7:02:25:18:6b:68:
e7:c6:4f:c1:29:9c:1d:48:f5:8b:75:80:3f:b4:fc:
07:2e:b4:64:e0:2f:57:0e:26:3b:6f:f1:e1:0b:47:
6c:02:4c:ad:bb:45:f2:71:c2:a4:df:84:34:55:8e:
02:88:aa:c1:69:c3:4b:dc:b5:36:8e:8c:cf:57:53:
ea:6b:bc:fa:06:03:85:87:c1:96:1d:be:1a:14:56:
97:31:ee:2d:91:c5:91:5b:7e:39:e6:bc:09:99:57:
47:31:e3:9e:68:8c:39:1a:82:e1:0f:46:d1:1f:ce:
88:05:36:28:2d:a3:48:1c:67:ed:2a:ee:31:66:d1:
9e:16:c0:fa:88:23:49:13:8e:1b:61:0f:27:02:16:
87:7c:e4:c7:fc:80:7a:88:4f:06:7e:c7:38:49:44:
4d:0d:42:16:42:7a:ff:5b:c3:2e:c1:a9:80:58:7e:
09:43:a6:50:82:0d:f3:8a:81:cf:78:58:62:19:11:
2d:86:60:3b:ba:c9:87:75:89:8c:af:36:bb:ab:ec:
51:7e:fa:68:e2:ef:0f:a5:d7:4a:ec:df:c8:e7:a8:
19:95:e7:78:70:a6:1c:75:b4:9d:0a:05:3c:0f:f5:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:00:8C:E8:E5:C4:72:E8:D3:34:A5:2F:11:7E:97:26:9B:7B:CD:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:9a:1d:30:d9:36:81:14:9c:d2:b5:3e:1d:82:df:3e:56:70:
75:27:f6:b3:14:42:32:86:2d:33:7f:eb:7c:7f:27:8d:d5:b0:
62:54:e2:07:ab:15:3a:02:12:81:f1:c1:12:f1:f4:f8:e9:bf:
bc:29:ef:5c:5c:8f:d4:a7:e3:35:a0:20:05:66:79:a2:51:68:
18:8b:f7:7c:37:c6:65:ae:c1:76:18:0d:40:20:a7:d2:32:83:
0b:81:b6:d9:8c:65:80:6e:2f:f2:3d:7d:73:19:bc:81:e8:ec:
3d:d7:a5:07:8c:e9:00:14:80:36:37:62:6b:22:7d:2a:da:b3:
36:d7:f2:b5:0e:a9:5c:4d:21:10:98:1b:61:47:b8:9c:34:12:
92:2b:6f:17:5e:33:1c:04:76:27:f8:62:68:c6:d0:23:16:b1:
11:7e:c1:33:23:b4:a6:46:76:78:3a:26:73:01:81:70:de:ab:
c6:fc:28:a3:b4:91:a4:82:a1:a6:9e:0c:cd:2b:44:c3:8f:60:
df:68:c6:99:6f:11:bd:42:3b:26:bc:1d:e8:bf:31:0c:24:51:
74:68:d8:d2:f8:7e:2d:46:94:7c:14:a7:fe:c7:27:71:4c:0a:
ab:9b:6a:2d:b3:55:7e:fa:88:c4:e3:bb:d8:6f:8d:c1:dd:7a:
a4:d2:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:42 2025 by rpki-client on console.sobornost.net