Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3198e6b0-d734-3c56-b010-71a33eeb4e6f.roa
File: 3198e6b0-d734-3c56-b010-71a33eeb4e6f.roa (raw, json)
Hash identifier: MHPxnl/XFWF+hjVkLSx+TM+9rhSENsesdm5voGQFfZA=
Subject key identifier: 0C:30:C9:6D:18:1A:BB:AA:2D:2F:59:E6:3A:03:90:23:F0:D8:56:4D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C260ABCE81A0E3E985AF7240
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3198e6b0-d734-3c56-b010-71a33eeb4e6f.roa
Signing time: Mon 03 Feb 2025 11:08:29 +0000
ROA not before: Mon 03 Feb 2025 11:08:29 +0000
ROA not after: Sun 04 May 2025 10:08:29 +0000
asID: 30036
IP address blocks: 173.25.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:60:ab:ce:81:a0:e3:e9:85:af:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:08:29 2025 GMT
Not After : May 4 10:08:29 2025 GMT
Subject: CN=cd622284-ae74-41a0-9df1-d2b509f865d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:9d:ec:89:47:be:61:6c:84:3f:c9:a9:c6:
ae:cd:7c:68:8d:22:cf:22:58:50:ec:3a:cd:11:89:
80:a4:5c:9e:15:8f:ce:5d:e4:d2:a8:a4:93:0e:f6:
ee:5d:54:89:11:ef:aa:0d:66:a8:72:76:d6:79:6a:
e4:d2:b1:85:45:16:94:f1:35:b9:dc:9d:6f:58:41:
d8:01:f1:81:09:32:fe:d0:52:68:23:31:9b:4b:93:
cd:af:62:65:a5:ac:77:50:42:33:91:e1:19:31:e5:
c6:0f:16:6d:9e:00:6a:9f:46:17:79:8d:b3:1e:94:
43:cb:7b:23:5c:d0:00:26:84:73:01:75:25:2d:d9:
3a:52:58:e0:74:cb:5f:75:39:dd:d3:55:e2:07:48:
d3:28:3b:49:78:58:25:53:24:7b:62:69:b6:a6:22:
4a:d0:56:c1:de:a2:0c:f5:d0:48:d7:83:e6:51:a8:
da:2f:bc:d0:94:47:62:44:00:57:5d:95:c9:dd:fa:
89:0c:83:50:db:3f:ed:96:1b:ee:be:45:ad:76:66:
bc:18:64:39:66:c9:3c:56:fc:fc:88:4b:7e:be:04:
70:bd:6d:0c:32:bd:34:be:58:6d:20:0c:03:42:f1:
82:6a:4e:b3:b1:08:c1:00:20:4c:01:b3:25:2d:00:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:30:C9:6D:18:1A:BB:AA:2D:2F:59:E6:3A:03:90:23:F0:D8:56:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3198e6b0-d734-3c56-b010-71a33eeb4e6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:4c:1e:65:d8:16:b0:3a:52:1f:59:60:06:ab:d6:6b:75:02:
d9:dc:18:5d:e5:54:2b:1c:33:1a:91:5c:ed:94:c5:6d:ac:4c:
a5:09:aa:36:81:cd:49:6d:dc:d2:b7:15:43:8a:9f:f0:ab:d5:
aa:17:7b:cd:74:32:ee:fa:56:3b:f9:31:1c:f8:db:43:dd:ac:
30:54:16:a7:2a:45:4e:87:ba:27:ba:73:65:c9:56:16:78:84:
c5:ab:3b:a5:76:d6:16:d8:b3:35:6c:66:6b:28:fd:f8:1b:48:
45:02:7f:d0:e1:61:16:c6:3c:ca:23:30:76:df:83:9f:ae:62:
05:b9:13:14:83:37:e4:7f:97:30:90:59:c4:75:3e:ad:4b:b9:
af:61:f6:fd:88:c3:0e:d1:fb:73:16:cf:72:fb:53:68:6d:40:
7a:19:21:7b:fc:7d:02:32:97:c0:e6:39:c9:d0:f7:30:08:5d:
01:f6:5e:f3:f3:86:cc:b8:0f:5c:e7:57:f5:57:e3:ae:cd:be:
31:9f:49:48:18:66:2f:00:a8:70:51:29:3f:5e:2f:c9:47:74:
b0:26:6c:98:97:49:8a:46:fd:0c:d6:89:f7:bc:94:e3:cf:2d:
8f:74:9c:42:10:35:25:ac:56:b7:de:85:59:02:d2:78:09:ed:
00:e6:b0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:37 2025 by rpki-client