Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a62ba60-d708-3b53-b2da-2f292167d52e.roa
File: 7a62ba60-d708-3b53-b2da-2f292167d52e.roa (raw, json)
Hash identifier: GDfUuSXXpWRJtoBTEfOe+heMXc/sOYL54sAtTDkUjw4=
Subject key identifier: AF:AA:88:41:66:5B:9D:4E:01:1E:EA:6D:71:35:F5:89:FE:DC:C9:28
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2613FE0ECB5C13CD62F4180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a62ba60-d708-3b53-b2da-2f292167d52e.roa
Signing time: Mon 03 Feb 2025 11:09:39 +0000
ROA not before: Mon 03 Feb 2025 11:09:39 +0000
ROA not after: Sun 04 May 2025 10:09:39 +0000
asID: 30036
IP address blocks: 173.27.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:61:3f:e0:ec:b5:c1:3c:d6:2f:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:09:39 2025 GMT
Not After : May 4 10:09:39 2025 GMT
Subject: CN=bcf4c756-b505-44bf-bc9c-5fa062afeba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:12:91:bf:d9:e2:c4:b2:fb:d9:0e:d9:f0:e8:
8d:51:61:56:b0:46:74:89:83:0f:4f:d8:ee:5d:5e:
a6:89:9c:53:fb:49:8d:35:a9:24:ca:b4:e5:ef:fd:
b5:12:0d:10:76:a3:4d:b8:c8:5f:bf:39:ac:55:42:
df:f4:32:88:69:71:80:46:59:eb:b4:2f:0b:6d:74:
77:21:6f:cb:74:0d:41:8e:16:02:3c:6d:38:75:03:
43:6c:7a:30:2d:ad:88:80:8a:ac:1a:ef:aa:3b:df:
70:bf:e3:3b:36:bb:05:65:1f:30:13:ea:e0:7c:2b:
08:e3:78:87:29:ff:ab:48:b2:7e:0c:61:9e:35:f9:
0a:2b:8f:27:a1:4f:4b:c5:74:81:56:1d:3e:61:dc:
74:18:15:42:22:87:97:e0:14:d9:46:7f:d4:99:cd:
3e:90:7a:29:b0:81:65:87:94:af:05:4c:b7:66:c9:
52:58:68:5a:a4:58:ac:c4:f9:0c:4f:38:ad:44:15:
57:52:08:23:6b:e3:95:ef:46:28:6c:e9:89:f4:ec:
9e:c3:ca:91:13:de:98:6f:44:dc:a3:50:a1:bd:f3:
73:96:84:f9:32:ff:71:0a:92:37:d5:40:4b:aa:4d:
5b:69:45:75:9d:4d:f3:d3:82:02:24:75:e5:55:5f:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AA:88:41:66:5B:9D:4E:01:1E:EA:6D:71:35:F5:89:FE:DC:C9:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a62ba60-d708-3b53-b2da-2f292167d52e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.27.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:21:cf:f6:d9:63:d4:a3:cc:cb:22:f2:cd:59:46:b3:c9:c4:
2e:25:73:0e:23:c8:55:a1:ac:95:e1:a1:43:90:04:c0:05:d8:
eb:fa:0b:b2:7d:a3:4e:22:30:d4:92:b4:50:93:bd:03:90:6c:
2f:e3:42:e5:db:ed:df:f7:69:5c:70:f6:11:68:eb:a2:f0:9e:
d0:7c:0f:6e:5d:f3:61:c7:15:f5:91:33:17:0f:ac:e1:b7:b2:
af:9f:8a:0b:56:e2:c1:bf:06:73:1a:21:a5:c1:ee:5e:e5:c1:
8e:35:4c:54:cb:e8:ac:67:16:24:fa:57:8d:20:60:23:08:e7:
26:59:f3:d1:95:d8:1d:16:42:7e:c1:16:41:ee:80:b3:d4:48:
db:3f:1e:77:82:a9:6a:76:af:27:98:9e:50:6a:4d:b3:53:d2:
27:42:5d:87:70:ad:86:dd:1a:ee:40:37:6d:dc:39:83:32:da:
e6:be:a5:48:ed:6b:0d:87:a8:66:e6:dc:ab:1d:ce:1c:fc:87:
ff:fa:4b:4b:b6:b5:d0:5e:46:e8:d3:73:55:f8:3b:1f:17:d7:
33:c7:7c:0d:9f:83:2c:59:cc:a5:20:11:f8:d0:c8:03:1a:94:
c5:0c:a7:e4:7e:56:18:0b:47:0f:07:aa:69:32:7f:e0:73:c9:
23:ec:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:16 2025 by rpki-client