Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6debec62-1e74-3d75-b612-7239f8322514.roa
File: 6debec62-1e74-3d75-b612-7239f8322514.roa (raw, json)
Hash identifier: Oc2gJqoUcqPDRjjOEGyvZtB5eYMGvyXAhsKWePb7l2A=
Subject key identifier: 5C:5F:F3:B2:34:D8:A5:18:81:E9:DF:1F:8B:DE:EC:C1:8C:66:C2:FB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57586D78258E7D12FEC1E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6debec62-1e74-3d75-b612-7239f8322514.roa
Signing time: Tue 04 Feb 2025 13:37:56 +0000
ROA not before: Tue 04 Feb 2025 13:37:56 +0000
ROA not after: Mon 05 May 2025 12:37:56 +0000
asID: 30036
IP address blocks: 173.21.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:75:86:d7:82:58:e7:d1:2f:ec:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:37:56 2025 GMT
Not After : May 5 12:37:56 2025 GMT
Subject: CN=8b36ac16-be93-4f5b-ac87-bb3a59e1400d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:52:c0:d1:71:d8:98:67:fb:fd:98:4f:91:
61:68:e4:10:da:78:95:b9:44:f9:c3:6a:99:f0:71:
69:bd:c2:fd:94:e7:a4:63:75:c8:ba:e4:8e:53:f5:
d3:5f:03:59:da:63:0a:63:0a:b2:54:b9:87:fe:14:
c0:48:47:50:51:32:ee:66:7f:ac:24:5e:8d:f0:5f:
9f:a0:9b:e8:17:23:46:fe:e5:d5:f5:7d:b8:46:44:
8b:be:85:9f:80:03:e3:ce:c4:be:68:ad:ea:f4:5e:
35:61:e0:80:6b:8c:53:60:b1:26:a1:f0:2a:61:5a:
c1:bc:76:d2:95:e1:f3:91:2b:f0:f9:6a:22:d0:d2:
07:69:52:a8:4a:b8:29:d9:eb:45:27:96:9e:a3:3d:
57:e7:82:ab:00:ca:83:c8:7f:27:cc:41:11:13:51:
0d:36:18:91:ae:65:d5:39:c1:49:80:ed:c5:4d:a3:
5a:6d:f2:99:e3:b4:43:4b:02:a2:d3:cd:72:64:1f:
22:67:67:4a:04:a9:b1:bf:04:de:13:1b:c3:73:a1:
5d:c5:72:99:69:0b:45:dc:84:75:1c:f9:2e:9a:19:
d4:20:3a:2a:1f:a2:8d:39:4b:31:55:98:38:50:44:
e3:36:b9:35:b4:53:38:e5:68:97:55:4c:79:ce:1b:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5F:F3:B2:34:D8:A5:18:81:E9:DF:1F:8B:DE:EC:C1:8C:66:C2:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6debec62-1e74-3d75-b612-7239f8322514.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:89:09:7a:08:bc:ca:36:fb:b4:e3:99:e3:54:43:ba:de:19:
c3:b7:55:0d:f2:86:14:be:52:b0:f6:a0:8d:aa:07:da:4a:46:
91:49:6f:cc:60:82:74:08:d2:fc:af:00:f4:07:c9:42:8f:ef:
8d:36:df:25:d2:07:fb:bd:44:60:99:7f:18:2d:1e:25:5e:0a:
3b:66:64:95:89:68:7f:bb:62:6d:36:4f:20:bb:d1:6b:f4:5a:
d5:b1:67:a9:e0:6c:d6:46:02:19:3d:e0:b4:ad:c1:4c:d7:35:
8a:aa:c0:0f:c7:5c:03:71:6d:1d:21:b5:90:01:de:0b:17:e1:
88:14:57:5f:a2:23:ab:b2:c2:36:cb:6d:fd:a3:2e:21:05:00:
98:df:06:2a:aa:d6:b2:1c:c1:73:3d:4f:65:d6:a7:cc:a4:3d:
2f:fd:d2:9c:12:0d:aa:6b:12:b1:7a:4f:06:d1:a7:be:3a:9b:
d6:c2:9f:38:57:ea:66:7d:13:31:77:85:e1:a7:32:e1:2e:9b:
56:37:34:80:dc:ae:98:62:ec:27:95:28:5b:79:a5:9c:30:fb:
37:b2:48:f5:18:80:dd:87:36:eb:dd:ee:79:a1:c0:6c:aa:26:
50:0d:06:90:11:f6:b4:b6:6c:a5:9e:70:d6:a3:b2:a9:cd:0e:
24:19:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:10 2025 by rpki-client