Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87cb3f57-1853-385b-b56a-5fdf16ff959e.roa
File: 87cb3f57-1853-385b-b56a-5fdf16ff959e.roa (raw, json)
Hash identifier: MrpsffeHgDDoDeAv88oIfzRNnQoJGc4Lba3NJsDbRIU=
Subject key identifier: 46:AD:00:58:E2:AC:14:4C:33:F0:F4:5B:7E:6F:42:3F:3A:F7:7E:C4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2638F8EFE6779FAA364A3D0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87cb3f57-1853-385b-b56a-5fdf16ff959e.roa
Signing time: Mon 03 Feb 2025 11:14:19 +0000
ROA not before: Mon 03 Feb 2025 11:14:19 +0000
ROA not after: Sun 04 May 2025 10:14:19 +0000
asID: 30036
IP address blocks: 173.24.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:63:8f:8e:fe:67:79:fa:a3:64:a3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:14:19 2025 GMT
Not After : May 4 10:14:19 2025 GMT
Subject: CN=99351dd4-a2d4-4740-8986-e63479afadd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:af:77:74:b0:c6:89:85:00:7d:c7:a4:90:
f8:a3:cb:b0:41:e4:a5:c3:2e:e3:07:d4:61:31:08:
4d:50:b2:d7:13:27:6d:a0:74:98:8c:5b:4c:f6:6b:
78:a5:2e:39:34:b7:d7:66:6d:c1:e5:16:65:19:d4:
6d:0a:d0:88:60:be:24:00:20:d2:ef:2f:bd:ab:43:
d1:c7:16:12:eb:04:11:04:c4:38:2a:e5:89:ef:52:
e4:0a:82:90:af:3d:f2:40:d4:1c:b7:97:71:14:39:
12:a5:4c:e6:5d:3c:3e:60:41:9d:df:85:e6:48:f8:
d8:0e:af:95:8f:89:be:ff:48:47:39:a3:0d:f1:84:
ce:0b:36:4f:1f:37:08:ba:c8:10:4f:de:af:f7:7a:
55:c6:c2:47:a9:4e:84:a5:a0:a0:11:32:30:70:12:
88:b1:a6:12:2a:07:bd:f9:f9:2b:97:c5:19:05:28:
5d:f6:21:4b:71:6b:f0:1c:e2:19:80:29:e1:55:f7:
2f:08:77:86:07:a9:11:07:57:12:da:c1:ea:b9:ba:
01:8b:3c:2d:c0:98:48:dd:94:09:2b:df:66:51:2c:
af:d1:42:cc:cc:ad:c0:52:a3:d4:e3:f9:b4:ab:03:
b9:6f:ea:02:74:c9:db:e4:1e:af:b0:b7:be:6f:17:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AD:00:58:E2:AC:14:4C:33:F0:F4:5B:7E:6F:42:3F:3A:F7:7E:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87cb3f57-1853-385b-b56a-5fdf16ff959e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:5b:21:53:7e:b3:ef:b6:61:b1:b1:a9:82:42:a3:1f:ea:68:
69:b2:3f:83:91:c0:ef:0d:b7:3c:7e:4d:70:f0:fc:d2:b8:3a:
42:50:f8:b5:ad:65:bb:81:ac:9e:af:ea:81:34:a1:61:d0:7e:
8f:da:52:7c:c0:53:a4:56:91:db:fc:27:fd:76:c5:26:36:32:
69:59:6c:59:d0:ba:22:4e:9d:43:81:e0:a5:82:64:00:a7:23:
73:21:10:b1:58:56:ee:07:e8:a7:b9:61:bb:96:9d:97:41:4e:
6c:75:10:79:ed:b1:df:00:c2:06:78:e0:57:c4:53:dc:5b:cf:
80:bd:a2:12:b1:5a:eb:30:44:63:38:24:bc:6b:13:48:c4:62:
85:cc:9d:f5:05:c2:b8:ed:2a:bc:ee:20:ea:23:26:19:81:9b:
75:ef:f2:d5:9d:f2:32:c5:30:5b:5f:dd:3a:9c:3b:ba:f6:77:
89:0d:7a:e9:dd:2e:f0:02:f8:97:58:34:6e:76:2a:c6:57:e2:
3c:38:b7:65:3d:92:6e:38:81:2c:f9:fd:40:5e:40:3c:db:02:
26:2c:13:9e:d5:99:24:b0:61:a6:45:9b:b6:bb:36:68:02:ff:
39:4e:dc:82:0e:46:22:45:54:79:eb:e9:15:c2:1d:3d:69:54:
51:79:12:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:07 2025 by rpki-client