Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23a7274b-db36-3fba-bf74-687bf2da64ef.roa
File: 23a7274b-db36-3fba-bf74-687bf2da64ef.roa (raw, json)
Hash identifier: kdLSRl/ziG+FFXAIy55lv53DZgpkhfbwJ6N9yRMH/eU=
Subject key identifier: 99:54:C3:41:E3:28:0F:50:13:C2:FA:C7:5A:33:53:1C:73:B8:09:F4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5757D87DE75D4FD0CA148A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23a7274b-db36-3fba-bf74-687bf2da64ef.roa
Signing time: Tue 04 Feb 2025 13:37:52 +0000
ROA not before: Tue 04 Feb 2025 13:37:52 +0000
ROA not after: Mon 05 May 2025 12:37:52 +0000
asID: 30036
IP address blocks: 173.18.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:75:7d:87:de:75:d4:fd:0c:a1:48:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:37:52 2025 GMT
Not After : May 5 12:37:52 2025 GMT
Subject: CN=0afe0506-86f3-4ba1-97dc-e6b7003b09b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:06:e0:1c:7a:00:04:9c:0e:b4:c0:cd:12:
be:b1:3b:83:3f:e4:01:e7:31:e8:e0:ce:6f:ec:e3:
a6:0e:95:f6:8d:3c:70:1c:70:0f:a0:6d:53:47:aa:
3d:10:29:59:df:87:b0:f2:86:ab:68:98:e9:2f:70:
d2:db:9e:31:7c:90:3b:4b:5b:3c:c3:a0:c0:03:3e:
7a:e4:b9:d2:93:b0:94:e0:f3:6a:dc:72:8e:c1:00:
4e:55:1d:ba:01:b9:da:3a:20:e2:d9:09:a2:14:50:
49:a0:3c:38:3a:04:27:98:c6:e1:f2:0b:fa:67:74:
ec:1a:9f:39:f0:0f:e4:27:24:27:df:0a:ac:e0:a1:
93:8f:d1:8f:c5:a8:97:0b:2d:b4:25:68:b9:aa:09:
28:9e:36:c1:72:32:ee:8b:68:37:17:ce:39:d3:29:
64:da:52:66:96:32:ec:4d:d9:d8:c6:68:6f:62:82:
b8:92:17:27:fd:70:2a:04:1e:79:3b:03:7a:be:2c:
93:ec:1c:0e:74:15:6b:5a:6c:fc:45:19:e1:fe:20:
9f:28:fb:16:5f:a8:67:4c:ba:68:44:87:4b:40:ca:
60:29:9f:1f:0c:58:e7:ad:bc:f9:fc:85:ca:d5:20:
68:d4:f6:cd:c5:df:56:65:18:28:87:da:56:29:f3:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:C3:41:E3:28:0F:50:13:C2:FA:C7:5A:33:53:1C:73:B8:09:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23a7274b-db36-3fba-bf74-687bf2da64ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:5a:13:4b:6c:32:dd:53:65:91:6d:c1:ce:03:6e:7b:7d:a9:
1b:74:e9:fd:c0:97:f4:50:0c:12:d9:d8:9e:b5:36:a5:f3:84:
fc:35:dc:9d:71:b1:75:6c:f7:ce:be:1d:56:30:58:52:7c:2c:
b0:4a:2e:b0:81:1f:1e:d5:5d:e9:58:c1:43:84:4d:ef:f2:89:
5b:90:50:9f:78:9b:e2:a0:c6:2c:b2:72:b8:8f:21:3a:d6:7b:
e5:66:41:fd:36:68:06:e2:d1:6f:5e:b1:20:03:21:75:ff:20:
d4:ca:eb:bc:cb:40:f5:12:c4:20:4d:44:66:02:ce:41:ad:5f:
2b:e8:d6:21:0f:a5:7e:c9:a2:a4:ee:be:da:91:bb:31:e9:e7:
5e:ee:fc:ec:24:62:19:82:cc:75:95:60:95:3d:76:64:56:f1:
72:ac:f7:7b:6b:33:9b:7f:74:22:8d:a5:b1:93:10:48:42:03:
be:90:52:8f:b4:25:6b:03:f4:16:0c:29:55:f1:34:61:e3:f5:
41:4a:b9:e4:2e:94:3f:6c:52:66:af:7a:6b:54:28:9e:70:77:
eb:dc:df:95:d7:d0:22:53:19:20:6d:ed:1c:7f:c3:6a:c0:83:
7c:cf:9d:ef:89:eb:aa:01:1c:24:05:43:d8:2f:98:96:7e:62:
f7:f2:e7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:40 2025 by rpki-client