Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93e81192-b1ae-3699-9d12-ca85719567a7.roa
File: 93e81192-b1ae-3699-9d12-ca85719567a7.roa (raw, json)
Hash identifier: lWBECXAiqJg920fLIsSOOr8rukmkpnRQlz9V7fDNxbY=
Subject key identifier: F9:42:E2:62:2D:F5:E9:F4:36:39:71:A3:0A:28:85:F4:EE:34:4E:7D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F5C12B72C02E1655FC9000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93e81192-b1ae-3699-9d12-ca85719567a7.roa
Signing time: Wed 05 Feb 2025 11:07:55 +0000
ROA not before: Wed 05 Feb 2025 11:07:55 +0000
ROA not after: Tue 06 May 2025 10:07:55 +0000
asID: 30036
IP address blocks: 173.17.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f5:c1:2b:72:c0:2e:16:55:fc:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:07:55 2025 GMT
Not After : May 6 10:07:55 2025 GMT
Subject: CN=0e099f07-e328-4b84-8882-60eef9cb5b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:27:e0:98:a6:73:61:c0:f3:ab:0b:ba:66:
a9:57:b3:e3:07:6c:0f:31:7c:f4:69:51:e2:bb:81:
6c:e7:b1:f3:29:cc:5e:09:47:7a:cf:41:70:e1:98:
e4:9d:f7:12:c3:59:c6:73:0f:76:0e:e6:b8:6d:68:
b3:8c:b2:3b:c6:4b:22:1c:63:22:f3:b4:fb:c7:44:
2f:c7:7b:ea:9a:de:65:01:9f:c9:d0:0d:a6:86:ad:
81:c3:70:13:7b:b9:66:12:ef:4d:da:75:3c:ff:0e:
b0:c9:39:75:14:a0:1e:2a:a3:02:ba:a6:0d:95:b1:
35:78:06:16:44:3a:62:64:f8:12:91:16:e1:0d:08:
85:1d:cc:e0:72:c0:0c:43:7a:07:a9:39:cf:7d:43:
31:25:03:a2:48:04:cd:a7:38:ea:b7:95:b2:23:fc:
b1:1c:c4:f9:96:3a:dc:be:21:3e:e5:11:27:0b:18:
db:f4:c4:59:be:69:f9:30:d5:8f:7a:f9:ce:e0:f3:
bc:0f:76:18:f6:ca:58:40:96:a8:3a:ca:51:dc:aa:
7d:0f:f0:58:a7:27:21:32:08:62:aa:1d:69:63:50:
07:10:96:c2:6d:fc:4a:65:59:55:44:31:05:b0:54:
7d:53:af:65:8f:d4:8f:10:02:83:f0:82:de:c9:38:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:E2:62:2D:F5:E9:F4:36:39:71:A3:0A:28:85:F4:EE:34:4E:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93e81192-b1ae-3699-9d12-ca85719567a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c2:7a:39:5f:6b:55:35:07:56:b8:9c:16:e5:9d:39:e4:41:
7b:cb:ca:1a:e1:54:1c:a7:70:e8:ec:d5:49:4e:1f:a5:40:df:
44:ad:08:02:0b:a1:c7:c2:48:80:c0:81:99:45:8d:7b:b6:be:
3b:04:60:f1:e9:b8:f1:7a:92:a5:de:f6:9b:a7:7c:62:f7:7e:
f0:6c:d9:c4:a7:61:e6:b2:37:a7:9a:50:39:05:60:1e:0f:b1:
e6:25:77:a3:f8:ba:c4:c1:e8:52:c3:28:7a:2d:1d:03:0c:81:
74:34:fa:ff:0b:cd:2c:17:40:75:ae:db:2a:0b:34:29:37:5e:
a8:b1:5b:50:33:71:00:46:98:a4:8d:3c:cf:5a:b3:da:65:16:
ca:95:32:ea:c6:58:3e:46:cc:73:2c:53:df:b3:3c:a5:58:65:
d2:d4:8d:07:ad:2c:3e:01:ff:ab:f4:97:0b:79:17:9d:f9:b6:
b1:ac:8b:70:a9:8f:18:2d:48:10:96:ed:e1:30:5a:57:ab:b6:
d0:bf:4b:10:a5:db:18:31:09:c6:62:d0:d1:d0:da:ea:7b:75:
7e:80:57:1c:f1:e0:b9:75:f3:a9:97:ab:b6:96:2c:04:7a:30:
3e:5d:7e:1e:ac:7c:c3:36:d2:1d:ea:dd:76:40:30:f4:e6:b0:
51:c8:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:11 2025 by rpki-client