Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0aba6cb5-e9fd-3bb2-8f42-a6a9f66d5f2a.roa
File: 0aba6cb5-e9fd-3bb2-8f42-a6a9f66d5f2a.roa (raw, json)
Hash identifier: 8c7mMAR7kkvjLZCpqWNY4adI+UAa6x0etQ9ugSKlJL0=
Subject key identifier: 14:72:7F:DE:45:52:9E:07:B5:A0:53:BB:58:C1:0C:46:94:E2:14:01
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C263320B4CDF69F45633BC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0aba6cb5-e9fd-3bb2-8f42-a6a9f66d5f2a.roa
Signing time: Mon 03 Feb 2025 11:13:34 +0000
ROA not before: Mon 03 Feb 2025 11:13:34 +0000
ROA not after: Sun 04 May 2025 10:13:34 +0000
asID: 30036
IP address blocks: 173.20.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:63:32:0b:4c:df:69:f4:56:33:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:13:34 2025 GMT
Not After : May 4 10:13:34 2025 GMT
Subject: CN=2d125344-61a9-4e91-8b3b-893fe904f17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:b8:90:6f:f4:dc:32:44:37:bb:77:3f:58:
49:77:88:03:18:7a:c1:10:88:8f:0c:f1:ee:59:3b:
d5:35:09:3e:d8:de:66:8f:cd:b1:77:6d:39:b7:13:
c6:60:bb:21:c2:53:f7:f3:dd:a5:7c:69:07:75:de:
51:0e:9b:2d:b4:42:c8:c8:dc:6b:c9:39:69:b8:e1:
9b:1c:b7:34:fc:71:b8:42:e5:20:fe:71:d8:34:35:
43:d2:6d:39:54:9e:fa:87:e1:8e:f2:17:59:7f:89:
41:5c:0d:3f:9a:20:14:58:6b:2d:13:1e:e6:8e:77:
7b:59:0a:93:ea:da:fb:be:51:69:b8:f2:d9:87:26:
10:7b:5f:2c:46:4d:c9:07:a7:fa:35:f7:51:02:31:
18:65:a3:a2:5c:f1:fd:f1:ae:4f:8d:d4:c1:24:85:
76:13:8d:5c:75:a5:26:b4:3f:b3:2c:18:18:ad:c5:
05:57:05:69:c5:a2:2a:4a:bb:43:74:c6:c7:9f:ed:
d6:27:0a:c2:4e:c8:4c:69:e8:e3:eb:da:da:e2:30:
29:8d:e3:5c:bd:0a:af:9f:ee:45:61:d8:7e:ae:a4:
5a:ad:11:2d:9f:31:c4:a4:dd:52:ff:92:70:37:06:
46:fb:0a:56:fa:13:22:1c:ee:3a:0e:22:d2:42:52:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:72:7F:DE:45:52:9E:07:B5:A0:53:BB:58:C1:0C:46:94:E2:14:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0aba6cb5-e9fd-3bb2-8f42-a6a9f66d5f2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:2e:00:82:48:67:b6:eb:b7:39:50:f8:2c:05:da:93:69:7c:
52:0a:55:4f:53:3f:90:c2:ae:66:3e:8c:d0:8f:cc:ba:7c:37:
73:44:6f:8f:c0:e3:0f:4a:d4:4d:c9:ac:81:c9:cc:5e:f5:f6:
34:25:e9:cc:61:99:fa:f7:c9:ad:b6:39:b5:63:eb:ad:78:df:
09:d8:98:6e:5c:e8:a0:12:05:16:3c:30:01:d8:8d:40:35:c1:
9b:6a:23:a4:a2:bd:f2:58:ac:d2:14:65:46:6a:d4:32:09:dc:
ca:7e:f9:bc:e3:56:07:76:eb:2e:a1:31:96:a9:36:3d:f8:4f:
da:45:af:4d:65:00:ed:89:50:ae:b0:15:b9:3f:58:8c:6b:c7:
51:5b:b6:ed:b6:1c:46:4d:c5:9e:b0:ca:33:26:a3:3d:bf:ac:
01:4b:90:e0:76:0a:50:29:7b:47:1d:d6:55:4a:ac:1f:05:73:
66:c3:ca:a6:ae:76:f4:c2:e1:28:1e:0c:9a:fd:f8:70:a0:2f:
ef:fb:13:4a:9b:e6:f1:24:b6:e5:dd:57:27:23:ae:27:9e:5a:
95:00:b1:43:af:f4:3b:8b:9d:71:60:c1:67:ab:42:83:f5:14:
08:f9:c1:6e:c0:be:8f:8b:b4:24:cb:14:d8:b9:a0:5a:85:00:
45:2c:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:58 2025 by rpki-client