Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01852ba5-8925-3888-a836-b42b606ff413.roa
File: 01852ba5-8925-3888-a836-b42b606ff413.roa (raw, json)
Hash identifier: LdQkhBlNdkamfCOKQSAjn0fuWbyFWr+dvHSpMDpu9Cs=
Subject key identifier: A7:B5:D8:13:D4:E4:2E:43:1A:18:4E:47:CA:E0:87:6B:25:D1:0A:DB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57624879EC442F20F511B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01852ba5-8925-3888-a836-b42b606ff413.roa
Signing time: Tue 04 Feb 2025 13:39:10 +0000
ROA not before: Tue 04 Feb 2025 13:39:10 +0000
ROA not after: Mon 05 May 2025 12:39:10 +0000
asID: 30036
IP address blocks: 173.29.116.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:76:24:87:9e:c4:42:f2:0f:51:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:39:10 2025 GMT
Not After : May 5 12:39:10 2025 GMT
Subject: CN=9e1b9bd9-192d-460c-8ec3-402ba048d879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:b9:aa:fc:00:06:b6:e3:b9:26:14:ae:ed:
e4:3d:0e:13:4d:88:b5:1e:92:cf:4d:42:69:88:c7:
68:5e:13:76:eb:11:c9:92:84:51:96:81:f6:0d:74:
c2:22:93:1e:a8:de:57:45:d3:a6:1b:58:62:bf:b3:
86:48:b8:72:a1:8b:a1:01:82:27:5b:a3:a7:3c:57:
bd:1b:b7:53:2c:0f:ff:3b:2c:37:f7:1d:fd:63:f6:
41:a7:5c:8b:cd:00:c2:a7:c9:8b:46:ea:1f:a4:51:
3d:49:3c:11:29:c2:76:1e:a0:1b:93:a4:69:9b:bf:
6e:c6:0a:50:b6:b0:ae:bc:b3:01:7f:0e:18:77:f3:
94:b0:39:9b:1c:b7:dc:09:ff:e6:5a:b9:4c:23:ec:
7a:8c:e3:ff:ef:dc:66:47:72:86:45:22:0f:0f:15:
f9:83:9f:76:51:43:82:df:e1:19:02:b8:55:e2:ae:
32:4d:40:b3:13:73:a5:9f:83:b6:e1:9f:4d:a6:fe:
fc:ea:b3:88:cc:6a:18:76:41:f5:f9:c4:73:cc:c3:
4a:5c:21:80:99:0d:e3:6e:fe:cc:c1:db:0e:ca:89:
dc:63:70:10:f3:68:9f:92:ca:8c:ad:4c:8c:c0:85:
74:98:4d:f1:2c:f6:75:de:fc:d4:65:66:99:86:aa:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B5:D8:13:D4:E4:2E:43:1A:18:4E:47:CA:E0:87:6B:25:D1:0A:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01852ba5-8925-3888-a836-b42b606ff413.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:5e:f9:3b:db:fd:d9:84:88:e0:9e:7b:60:f4:10:41:39:b8:
a8:25:57:86:f4:a0:6a:51:bb:21:03:8b:29:45:f0:fa:72:e8:
b0:2b:30:50:af:f6:f5:43:54:4d:7c:de:be:1c:f1:50:8a:30:
a5:44:a7:15:df:16:30:be:40:c9:74:53:28:8f:a9:88:3c:14:
ee:c2:01:92:9d:87:77:0b:c8:d0:1a:c9:08:2f:e7:bd:54:23:
6e:20:38:00:16:c3:71:2c:70:c3:50:7e:74:88:2e:92:f2:6a:
e5:03:06:77:b5:25:df:6f:28:56:f8:ec:56:b5:75:8e:97:67:
80:1a:8f:80:61:10:77:36:08:a2:42:d4:b2:db:29:7d:c3:25:
de:6c:0a:51:24:28:76:d6:84:57:94:64:c9:2c:e4:5d:0a:dc:
89:b0:8e:c3:d8:61:9e:bd:f4:eb:9f:f4:d0:1f:37:2c:33:46:
2b:4e:36:81:27:73:f1:ab:f3:0f:46:42:fc:f5:7e:e2:96:ec:
d2:0c:8b:95:be:e6:23:17:c0:59:32:31:26:17:f1:0c:a9:78:
91:0e:2f:9f:5f:c2:a4:bc:f7:50:2c:1f:1f:0f:8d:cd:9b:b5:
a9:91:00:cf:95:ae:4c:34:2c:45:9e:88:b6:c2:0d:03:94:3d:
87:0c:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:59 2025 by rpki-client