Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e3f1639-f24c-3623-9a90-168231cde9ac.roa
File: 3e3f1639-f24c-3623-9a90-168231cde9ac.roa (raw, json)
Hash identifier: ciPOkhLhUxnx2Klbc2Rn40JJtrgy4tAs+OFu1cFc8wA=
Subject key identifier: 4A:EA:8B:DA:D0:EB:90:C2:EC:57:9B:4F:87:BB:AB:86:F4:3A:F4:52
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C260828EE54E24C6E41C96A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e3f1639-f24c-3623-9a90-168231cde9ac.roa
Signing time: Mon 03 Feb 2025 11:08:10 +0000
ROA not before: Mon 03 Feb 2025 11:08:10 +0000
ROA not after: Sun 04 May 2025 10:08:10 +0000
asID: 30036
IP address blocks: 173.17.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:60:82:8e:e5:4e:24:c6:e4:1c:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:08:10 2025 GMT
Not After : May 4 10:08:10 2025 GMT
Subject: CN=8e5af7d9-37a7-4c69-9bc2-871a626dbbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:8a:f1:d8:e1:ed:c9:95:2e:cc:e2:02:5e:
83:e5:f8:43:24:20:f5:4f:fa:cf:54:9e:7f:e9:4a:
b6:3e:bd:53:63:f5:29:7c:92:27:28:24:a0:2c:68:
4e:13:5e:73:4b:e5:e6:eb:98:02:62:6c:da:04:33:
e4:5f:f8:86:dd:97:7d:fa:9c:e0:e5:e4:04:de:23:
a1:f3:fb:73:f4:4b:a2:1e:fe:72:27:0d:7e:7b:e3:
54:2a:5b:20:c0:69:26:c8:9b:3b:f4:70:2d:1b:4d:
76:97:62:1a:f6:18:35:f6:e0:79:4d:2a:7c:f5:34:
c9:55:bb:55:db:42:65:08:31:9b:e6:f0:57:61:d6:
ed:1b:83:67:9e:7c:5f:ce:e5:d8:c8:65:3a:44:ce:
f3:98:8c:90:c9:2b:1c:59:c8:b5:7f:5b:bd:d8:fe:
b2:5b:f6:26:d9:b4:5b:d1:07:88:2f:39:69:e9:1c:
e4:62:5b:41:a6:fd:9f:d4:b7:cd:3c:b5:b4:b4:ad:
e2:56:dd:c1:dc:31:28:2c:29:db:9d:ba:51:a8:f0:
ef:34:62:81:59:72:41:1d:1a:69:bf:81:c0:6b:de:
92:14:2d:8b:2b:cc:0d:e3:84:40:35:4a:2a:08:a1:
37:71:3d:dd:29:54:b6:86:84:4a:33:f7:8e:d5:9c:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EA:8B:DA:D0:EB:90:C2:EC:57:9B:4F:87:BB:AB:86:F4:3A:F4:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e3f1639-f24c-3623-9a90-168231cde9ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:7c:19:99:57:80:2d:b4:ad:2d:49:dd:e3:99:85:05:64:2e:
e4:b7:42:2c:1a:7e:97:e6:e7:e8:d3:d7:28:ad:8a:52:a8:71:
ff:b0:ac:ff:94:0b:ef:1f:d0:02:a0:8d:96:49:fc:7c:94:94:
fa:f7:58:23:c1:14:8e:44:3f:9b:ba:ca:84:71:67:2c:f8:30:
24:a4:90:82:d1:eb:09:af:9a:a4:22:87:69:34:38:36:4b:c9:
e2:d7:68:28:c3:f4:ef:01:b3:ac:1f:d7:c7:a8:25:98:3f:60:
88:9e:dc:fd:be:9a:54:76:54:61:5e:02:e2:82:a3:b6:fb:09:
22:1d:40:97:d9:d9:52:ec:34:64:22:66:f3:fd:8e:ce:7d:ae:
e4:05:48:12:88:e3:ce:0b:64:cc:83:bf:5d:a9:56:48:b9:2b:
2b:a7:68:fa:06:55:e2:cf:a4:51:2a:aa:bb:8b:b6:05:ae:12:
1f:1c:be:2c:ac:44:e5:2f:92:81:b2:b2:79:ca:66:a1:1f:b4:
20:88:b5:4f:99:a2:0a:55:69:ab:98:06:a1:da:6a:04:df:67:
12:d1:f8:13:4e:4f:85:16:f4:38:ac:6f:30:9d:c0:e8:85:62:
de:e3:26:c8:87:b1:c9:85:81:41:e4:01:4e:67:f3:8a:9f:43:
9d:f5:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:58 2025 by rpki-client