Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa
File: 23957716-4faa-35cf-b99d-97d2f25c2a2e.roa (raw, json)
Hash identifier: ayQQnuw+exRIHPNz5AaxnjKfkSnX7ogeM2hntk7IGDA=
Subject key identifier: 5D:74:6E:F5:89:72:E4:9D:2B:01:B1:21:D4:01:F4:D2:47:42:31:B9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57FB4D4EF48D86EFCDE25A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa
Signing time: Tue 04 Feb 2025 13:58:27 +0000
ROA not before: Tue 04 Feb 2025 13:58:27 +0000
ROA not after: Mon 05 May 2025 12:58:27 +0000
asID: 30036
IP address blocks: 173.29.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7f:b4:d4:ef:48:d8:6e:fc:de:25:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:58:27 2025 GMT
Not After : May 5 12:58:27 2025 GMT
Subject: CN=83d92661-9bbe-4f93-bf76-2040dc1f1170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:10:61:80:d9:0d:41:a5:33:eb:14:27:02:
51:14:a8:9d:60:e7:8a:62:68:f2:26:26:eb:dd:96:
84:99:5b:1b:18:aa:16:67:e9:45:a6:50:05:8a:61:
ea:31:38:c7:cd:e8:7c:d9:87:44:0b:24:4e:7b:a0:
56:cb:9d:a1:17:b1:7f:15:c6:1a:14:cf:be:7a:67:
08:b4:e1:e2:84:45:e2:01:76:a2:54:c1:af:39:53:
af:75:22:eb:9b:80:8c:fb:f9:88:4a:7d:fe:13:49:
1e:25:57:84:5b:0f:ec:aa:e5:2c:e4:bf:c8:3e:3c:
0e:e4:22:e4:49:28:2c:67:c7:ba:45:87:88:2e:c9:
0b:8b:29:60:9e:e5:d0:c2:fc:47:1e:13:89:a1:16:
43:3d:d2:7f:0d:ab:14:33:a4:0d:9c:b5:86:77:a7:
0f:fc:c6:6c:b8:74:20:c3:67:11:5a:4f:1b:3a:2d:
e9:7e:89:d2:b1:19:ba:40:02:5c:90:cd:48:0c:22:
7d:f5:57:fc:6e:1a:b9:36:65:fa:db:a7:0b:6d:aa:
03:91:23:77:c9:60:d0:3f:28:cd:56:ce:24:62:6c:
ee:8d:cc:98:ea:ce:c6:00:dc:13:57:92:e6:a3:3d:
99:cc:29:96:3c:c9:64:c4:bd:4a:db:fe:22:c9:e1:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:74:6E:F5:89:72:E4:9D:2B:01:B1:21:D4:01:F4:D2:47:42:31:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:58:57:dc:1e:f5:e6:0a:be:0d:4b:07:83:c2:a4:bf:8c:e8:
69:cd:79:a2:59:44:ae:92:08:a0:99:f0:09:10:f4:46:5b:72:
7c:d8:c8:c7:fd:3b:bc:1e:11:49:5c:9b:d8:0c:49:0a:c2:19:
4b:0f:5e:7a:5e:d0:5b:59:bf:4c:3e:8d:02:bb:98:7b:0b:7d:
0a:f3:2f:a9:38:14:a7:cd:81:19:b8:83:3c:ec:21:65:40:dd:
e4:16:a9:6f:93:98:19:dd:00:33:32:5a:e1:48:0e:26:ee:c5:
da:fb:2b:87:c5:2b:0f:d1:49:32:ba:15:30:aa:c9:8c:4e:50:
a9:c2:b4:83:70:62:04:26:f2:1d:b8:bd:fe:9d:65:90:92:cf:
22:79:1f:a0:2e:63:27:26:10:48:d4:1c:d0:4c:9c:f8:f8:c2:
b3:5c:17:b3:fa:6c:c5:bc:af:ce:9c:87:53:2c:41:9b:73:0a:
e5:fc:5e:f8:81:8a:45:b5:a0:41:5e:b8:8c:9b:be:95:68:79:
dd:c1:d7:85:43:db:3e:a0:96:9e:16:40:65:65:4e:45:fa:85:
fd:2a:34:9f:44:42:61:dc:bf:93:0d:86:0f:02:d2:f6:29:47:
02:6f:3c:96:9f:41:8f:91:35:d8:c8:8f:58:ed:bd:2f:6b:76:
0c:c4:a4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:28 2025 by rpki-client