Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d6ddffb-97f0-382d-9435-ceb4e844f428.roa
File: 0d6ddffb-97f0-382d-9435-ceb4e844f428.roa (raw, json)
Hash identifier: EFABAQESE7EMGrDvnxgRH+Pa5PIEcbfRGGD5vq01efk=
Subject key identifier: 8A:54:B9:ED:EE:1A:04:72:56:19:32:A1:58:8E:34:E7:4D:95:D0:55
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C576AB84E48683D7F9E3BE28
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d6ddffb-97f0-382d-9435-ceb4e844f428.roa
Signing time: Tue 04 Feb 2025 13:40:14 +0000
ROA not before: Tue 04 Feb 2025 13:40:14 +0000
ROA not after: Mon 05 May 2025 12:40:14 +0000
asID: 30036
IP address blocks: 173.17.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:76:ab:84:e4:86:83:d7:f9:e3:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:40:14 2025 GMT
Not After : May 5 12:40:14 2025 GMT
Subject: CN=3c309d63-8657-4ff2-9489-08aabe5d5cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:01:75:d2:92:a6:22:7b:d6:95:87:c2:01:2f:
43:4b:7d:4f:12:48:30:77:dc:ae:27:79:9a:81:f4:
89:69:36:b6:48:d7:f2:ec:c7:05:79:26:39:5e:40:
78:1a:81:d9:f7:a2:3c:e9:f2:2b:3c:d1:4b:84:2d:
e5:ba:4e:30:da:e4:a5:e1:fb:a1:ec:ba:45:3e:14:
87:db:4b:a4:fd:c2:94:b6:c7:9e:2b:49:29:cf:f3:
fb:51:04:4c:97:24:8c:5a:49:db:c7:84:73:82:38:
d5:90:2e:21:4d:36:44:3b:cc:f7:2b:24:6f:aa:36:
13:46:e2:77:a5:d3:09:48:64:a1:4e:f7:84:3d:5e:
74:92:8f:23:e4:16:64:4d:40:5e:f1:fa:15:f5:40:
a7:05:bd:0e:42:89:77:30:a9:57:2d:ff:f6:ed:04:
9a:94:f7:c6:6f:7d:02:83:c1:ed:29:30:44:a4:6b:
48:9b:b3:ec:1c:32:0c:15:f5:bd:33:a3:24:0c:44:
67:04:d2:69:d0:2f:03:1a:28:eb:be:a3:1f:14:05:
e5:d5:c8:21:7d:35:a7:40:a2:47:16:91:c8:dd:1f:
8e:5f:47:23:f8:66:64:f3:a9:c6:2e:2c:71:4f:2a:
5a:24:bd:3f:d5:92:2b:68:96:3d:8d:3b:01:f5:1c:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:54:B9:ED:EE:1A:04:72:56:19:32:A1:58:8E:34:E7:4D:95:D0:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d6ddffb-97f0-382d-9435-ceb4e844f428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:42:d0:2d:7b:5b:51:55:f2:5d:12:05:5f:ce:bc:26:d0:6a:
81:cf:ee:d2:ea:c6:e9:5f:f0:0c:74:65:b5:f9:ee:16:a8:d7:
6a:58:4b:f6:f5:3f:db:4e:ab:74:97:2e:91:4e:03:e9:9d:78:
18:ef:9b:58:fb:18:c6:e9:24:70:87:c5:cc:6a:08:76:a6:12:
7a:b9:ea:1f:e7:89:b0:75:1d:a5:ba:fe:a5:4c:bf:00:fd:b9:
58:10:01:db:15:2f:90:f9:d7:b4:a2:3a:fc:6d:2c:bb:a5:3b:
33:17:0d:ea:91:6f:55:25:50:98:bb:c6:06:11:41:9c:cb:7e:
90:38:81:f2:03:c1:83:52:8f:d3:d1:11:f1:56:d3:a9:14:d9:
16:95:ca:01:e1:f7:83:38:c4:8c:f4:dd:6c:d3:73:1e:d8:8b:
8b:f2:5a:20:7c:f3:a7:eb:d8:24:92:04:d5:49:f8:46:6f:c1:
1e:d2:9f:96:70:b7:07:82:06:10:fa:94:24:db:28:2d:86:d1:
9f:2c:42:86:87:65:a8:c3:a3:f0:ff:84:9d:65:bd:84:a7:97:
6b:02:be:cc:4e:93:59:15:4f:c6:89:e4:6b:71:3e:76:26:9f:
f3:20:4b:5a:d9:24:39:77:8e:3d:eb:d8:6d:bd:51:e1:b9:cd:
e8:dc:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:59 2025 by rpki-client