Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7553b270-c5df-3a92-b929-e3c53cfda064.roa
File: 7553b270-c5df-3a92-b929-e3c53cfda064.roa (raw, json)
Hash identifier: 3l2KDG0OmQCgtvtFY6qV/tVOXvDl8M7zjXdnJFoKEG0=
Subject key identifier: 68:9B:24:1C:C2:81:08:8D:A0:E1:D2:72:17:25:1B:79:99:F6:EE:3E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F432858495423689C0DF43364316139C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7553b270-c5df-3a92-b929-e3c53cfda064.roa
Signing time: Thu 27 Mar 2025 16:13:04 +0000
ROA not before: Thu 27 Mar 2025 16:13:04 +0000
ROA not after: Wed 25 Jun 2025 16:13:04 +0000
asID: 30036
IP address blocks: 173.30.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:54:23:68:9c:0d:f4:33:64:31:61:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 27 16:13:04 2025 GMT
Not After : Jun 25 16:13:04 2025 GMT
Subject: CN=85fa2800-04b4-45a6-a3da-9e8320887cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:ac:31:0a:23:0b:21:e9:ef:b1:51:ce:63:
27:cc:4d:d2:6b:de:d4:9f:2d:53:3b:55:42:b7:a0:
0b:81:38:bd:03:84:53:25:35:55:cd:91:94:f1:ce:
57:4e:9c:11:db:b7:36:fe:7b:61:72:f7:bd:3a:6a:
de:81:7e:52:96:83:87:59:56:72:3c:b7:e4:5f:bd:
c8:b0:eb:41:38:e6:99:2a:86:a0:7c:a7:a9:75:0c:
87:3b:7b:e6:0f:da:73:d9:1d:3d:c5:8a:9d:95:66:
b9:1d:c1:4c:b3:16:6d:b4:69:d4:47:b7:ee:a1:60:
f0:6d:16:51:1f:15:51:bf:30:96:68:76:22:80:6b:
b3:b1:b1:1b:16:16:4d:8e:d6:c2:91:e9:6c:ba:f8:
c9:42:4f:30:f2:fa:08:47:fb:8c:27:4d:47:26:3a:
22:0f:79:c4:e9:6f:ff:e0:0b:85:e1:37:83:52:3f:
db:92:e2:b3:af:34:ff:93:7f:6d:42:cb:19:13:4d:
b6:93:03:d7:a2:41:00:18:db:f4:df:14:5c:34:0b:
25:08:44:e0:8f:2a:44:f3:c8:1e:52:cf:33:cd:88:
9f:06:2f:5c:78:54:57:75:ed:26:36:1d:a3:3a:06:
49:ff:54:6b:01:f7:fc:2e:a4:bf:7f:82:bd:5e:a3:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:24:1C:C2:81:08:8D:A0:E1:D2:72:17:25:1B:79:99:F6:EE:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7553b270-c5df-3a92-b929-e3c53cfda064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.30.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:79:c3:1b:4d:c1:61:ab:c6:8e:64:a5:32:75:ad:cf:66:40:
19:9d:7c:56:02:b4:d4:dd:e3:54:15:8d:f1:9c:d7:fa:ef:9b:
bb:ec:5e:b3:af:d2:db:c7:30:e3:f2:56:5f:bb:bd:f5:ae:77:
07:57:c5:fc:79:14:86:d4:a6:46:bb:b2:2e:d1:07:05:e5:25:
da:86:ad:47:86:3d:c3:8a:76:22:3c:c9:25:31:7a:e5:3b:6d:
51:18:74:6e:02:d1:fc:39:3a:47:ec:c9:59:96:f4:ab:67:d6:
06:61:05:51:90:b3:13:89:6f:1b:6e:a9:28:b0:8c:0a:d7:0f:
39:8f:5b:80:6e:fc:ef:55:8c:11:32:3a:6c:49:a7:ad:31:dc:
61:46:77:0d:65:29:60:d3:5d:db:4e:7e:19:a8:d9:45:1e:b5:
05:14:a3:ed:89:7d:a7:61:b1:8d:a0:72:ba:55:e0:d2:40:4c:
b3:df:8a:0d:2c:e1:db:e2:5f:41:7a:10:9b:9f:5c:c3:da:1f:
a8:9a:20:b7:5d:5b:d1:bd:c3:e8:47:a8:ca:89:85:8e:8b:64:
bd:ee:e6:18:15:38:a0:54:f7:d8:a0:3b:bb:7b:03:f3:cc:28:
19:d2:ee:46:3a:bd:c9:de:ed:cd:3a:35:a2:fe:04:f4:01:93:
fd:42:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:10 2025 by rpki-client