Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c7651b7-6269-38fc-be0d-4443a7402b0f.roa
File: 4c7651b7-6269-38fc-be0d-4443a7402b0f.roa (raw, json)
Hash identifier: o/ZlOYPWWkz57Us0p04KRauxR/Cha5owcpbKuPEk1so=
Subject key identifier: 85:2A:38:17:A3:EC:9D:CA:06:7E:68:66:EF:0A:EC:E8:13:9A:2F:40
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5328F5A328B0595ED738F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c7651b7-6269-38fc-be0d-4443a7402b0f.roa
Signing time: Tue 04 Feb 2025 11:23:00 +0000
ROA not before: Tue 04 Feb 2025 11:23:00 +0000
ROA not after: Mon 05 May 2025 10:23:00 +0000
asID: 30036
IP address blocks: 173.23.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:32:8f:5a:32:8b:05:95:ed:73:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:23:00 2025 GMT
Not After : May 5 10:23:00 2025 GMT
Subject: CN=103ff11f-d83f-4d14-b141-ca611d0ed283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:ee:0a:2d:a1:05:43:a1:5f:47:c0:b8:1e:
cd:8e:f7:f0:ec:2f:97:4d:5f:20:45:9e:b5:6c:91:
e5:d3:c4:7e:67:0b:42:fa:ee:16:cc:37:b6:c5:c0:
49:f7:4e:06:0c:75:18:37:25:2c:38:ab:87:3d:88:
89:23:c1:5f:8c:72:e5:8a:dd:ff:8d:0e:40:71:d3:
30:e8:50:0e:ea:ff:3c:39:2a:1f:fe:b8:4a:b7:da:
e5:7f:35:0e:07:a6:ac:7b:56:14:e4:18:d5:21:83:
65:e9:ff:37:7f:7c:be:59:f1:15:41:af:9a:e3:90:
bd:9a:92:c6:22:a4:e0:22:5b:ce:8a:01:a3:60:7c:
28:52:c8:82:b3:7c:84:50:75:1a:5c:f8:51:21:ab:
e4:a9:30:54:c2:32:77:05:c9:06:ac:8c:5b:6a:fe:
4a:8d:43:e5:13:7e:2b:42:01:58:b1:37:05:ec:8c:
e4:82:b4:c4:b4:02:0b:f4:9e:a8:2f:dc:01:c2:dc:
c3:65:a9:c8:9b:e6:82:7b:ec:cd:cf:67:f8:31:bb:
ad:df:6a:c4:1d:d5:cd:9a:dd:a9:9f:74:a7:b8:36:
1a:89:a2:aa:fe:1d:6b:94:cb:a8:4b:2d:96:f4:37:
36:b0:44:3f:10:e7:de:d7:6a:09:30:54:c2:1a:2b:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2A:38:17:A3:EC:9D:CA:06:7E:68:66:EF:0A:EC:E8:13:9A:2F:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c7651b7-6269-38fc-be0d-4443a7402b0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ff:e1:e8:d0:47:04:c1:3a:c2:94:5d:3a:2d:70:91:5a:9d:
8b:8b:c8:11:74:ec:b2:8a:4f:f5:90:ae:9c:10:cd:9d:fc:66:
64:53:2e:dc:22:0b:42:4c:a7:b0:5f:a1:e2:6c:fa:3d:b5:9f:
82:55:67:1b:89:2f:09:39:22:41:c5:16:13:c0:c3:81:e7:b2:
64:25:32:6e:ea:fa:9f:49:82:94:b5:e2:0d:3a:45:d6:19:03:
f5:e1:13:bb:a4:fd:bd:5c:f4:72:31:a8:aa:a9:32:c7:60:b7:
82:e6:a9:96:5c:88:be:bd:a6:d0:8c:25:0d:57:fd:dc:66:7d:
9b:9d:8a:42:33:22:7f:c1:5a:7a:73:6c:ba:d3:25:cd:41:32:
2b:0d:76:14:45:e4:09:6e:05:88:e9:3b:87:5a:e4:f1:1c:47:
52:9a:8e:eb:5b:54:86:12:89:f8:f3:1b:85:21:d3:44:ea:9c:
32:28:f8:06:ec:2a:00:73:98:91:89:b3:7f:88:a3:aa:de:fe:
a8:74:7b:ef:37:ae:5f:95:1a:95:11:70:56:1f:3c:3f:95:79:
d2:e0:b5:1a:59:15:24:7a:81:f6:73:8a:9d:48:93:95:42:9c:
db:4c:2a:ea:03:12:34:91:e0:22:88:4f:92:1a:3b:e5:bf:a9:
ab:de:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:37 2025 by rpki-client