Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0976502a-f131-3d7a-a31f-fc656ea083be.roa
File: 0976502a-f131-3d7a-a31f-fc656ea083be.roa (raw, json)
Hash identifier: KEjdl+cbeV7QcUFRBqWPjojDSU8Vg5ZfWmuBfyhU2U4=
Subject key identifier: 8D:D0:A6:A3:DF:EA:B3:04:66:E9:E7:98:11:66:E2:AC:ED:81:B0:4A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F737ECAB200248E4B954A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0976502a-f131-3d7a-a31f-fc656ea083be.roa
Signing time: Wed 05 Feb 2025 11:10:52 +0000
ROA not before: Wed 05 Feb 2025 11:10:52 +0000
ROA not after: Tue 06 May 2025 10:10:52 +0000
asID: 30036
IP address blocks: 173.20.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:37:ec:ab:20:02:48:e4:b9:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:10:52 2025 GMT
Not After : May 6 10:10:52 2025 GMT
Subject: CN=0cdbbbcd-9402-45d5-81a6-bd90d3ceea29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:73:dc:09:0c:e3:22:d1:2e:ad:4f:03:fc:
b6:06:5f:dc:eb:79:d7:a6:97:62:af:64:7b:f9:07:
04:8f:39:e3:ee:e5:7e:a2:ff:50:79:2c:e9:62:32:
d9:0e:bd:83:9d:4a:2d:b7:1d:78:1a:57:d1:69:77:
f1:b5:43:23:5f:62:4a:4f:6e:83:ec:76:ba:60:52:
23:4d:39:98:b8:0f:7e:e8:69:54:e5:44:1c:9d:52:
31:17:11:c3:1c:19:d1:c9:e0:87:de:68:99:14:1e:
d8:34:0b:78:76:2a:41:f6:cb:d0:de:2a:38:13:d0:
cd:93:ef:95:cc:06:60:25:eb:21:b1:4f:27:d9:d6:
0d:59:62:df:20:e6:49:1d:e4:d6:13:c5:63:c3:38:
ec:8e:93:22:7e:ee:bb:e5:5b:d8:e5:7a:6e:5d:27:
c8:3d:6d:c1:49:2d:31:5e:d2:00:29:bd:5d:28:ae:
d7:b8:60:80:d4:96:68:78:f6:ef:1d:7d:d3:a9:1e:
a2:54:f1:73:d1:87:c2:44:9f:44:46:e4:f3:00:27:
18:e5:f8:02:13:7b:a6:d3:36:67:4d:05:e0:51:8d:
b7:ef:d5:ee:40:7c:c1:05:52:7b:2b:b1:30:d3:ad:
d3:ef:e0:d0:b2:4a:5c:dc:67:8d:a9:8f:36:48:c4:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:A6:A3:DF:EA:B3:04:66:E9:E7:98:11:66:E2:AC:ED:81:B0:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0976502a-f131-3d7a-a31f-fc656ea083be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:b4:77:50:a9:11:e0:54:76:af:f6:98:a5:88:64:d0:a0:c9:
bb:e6:0e:da:58:c2:a3:0c:83:ec:95:3d:0b:80:6d:67:d9:ee:
05:ae:dc:36:27:cd:cf:53:dd:92:0d:b0:84:33:d4:42:51:9f:
e4:36:73:12:d3:5b:a4:9b:93:e5:c1:14:57:58:66:76:5a:14:
00:ab:12:c0:8b:98:ad:c7:d0:9b:26:fe:cd:93:72:20:80:61:
94:fd:79:82:da:1b:43:e7:03:2c:1a:14:0f:39:29:ba:09:45:
41:07:4d:79:e3:b1:10:fa:4b:23:ce:72:87:20:bf:e0:b3:63:
50:1b:f9:a7:ce:87:c7:2c:37:74:88:f0:24:89:dd:d7:fd:a9:
dd:b4:ee:65:99:75:25:0c:da:18:4c:97:17:ca:17:0f:da:7d:
9d:a6:80:ea:11:0b:b7:6e:74:ce:4f:71:42:b3:b5:4e:cd:c9:
79:b0:40:a5:dd:1c:e8:92:c5:e9:e6:7d:4a:5b:61:4b:19:02:
57:5b:c0:0c:f3:cd:fe:be:ab:b5:e9:5d:b4:a0:5f:41:76:88:
59:60:2b:34:57:91:dc:e0:b1:58:30:22:92:41:0c:d3:bc:93:
d4:0a:98:28:40:68:4f:00:6d:50:15:28:65:16:30:49:4f:6b:
68:e5:8c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:49 2025 by rpki-client