Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa
File: 9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa (raw, json)
Hash identifier: XDfTm02a9g4VJPpdIJarWlMe01QFa1HVS1ND0DWqYos=
Subject key identifier: DE:0F:C4:97:18:D4:B6:F8:0A:26:C5:20:A6:5B:12:95:37:B5:0E:E8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C263FE145A9854BCA97EE000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa
Signing time: Mon 03 Feb 2025 11:15:11 +0000
ROA not before: Mon 03 Feb 2025 11:15:11 +0000
ROA not after: Sun 04 May 2025 10:15:11 +0000
asID: 30036
IP address blocks: 173.29.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:63:fe:14:5a:98:54:bc:a9:7e:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:15:11 2025 GMT
Not After : May 4 10:15:11 2025 GMT
Subject: CN=3e59149e-54ae-4658-aad0-c3afbb342ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:3a:d2:9c:0e:48:91:d6:6c:b9:0d:8a:96:
2c:83:5d:18:6a:81:a0:5a:32:3c:d1:9c:41:75:b0:
cd:b8:f1:3e:39:9c:01:98:15:91:cc:a2:5b:62:f6:
76:33:ad:1e:31:a4:e6:ca:70:22:7f:aa:fa:e8:83:
d6:27:91:e9:f3:85:d3:83:d0:65:b5:a4:48:ff:52:
ad:ba:b4:12:b3:3c:97:6b:07:b8:0d:08:22:fd:d2:
2c:0c:27:b7:b5:02:aa:89:5f:1e:1c:36:f9:a4:a1:
b6:8c:55:53:5d:11:21:8c:77:34:12:c5:92:f8:aa:
f6:7c:89:8c:22:c4:97:fa:c3:13:4f:af:5a:bc:bf:
71:ad:87:66:fb:15:a0:3c:1c:af:cf:76:f3:9c:12:
d1:59:8b:93:e7:4c:52:8f:b2:56:b7:db:c3:99:a9:
cd:60:99:e5:3e:ee:4a:2b:e1:f0:a5:da:d2:d8:bc:
54:af:7b:c3:f6:42:65:be:72:ac:5f:82:cf:e0:01:
98:01:5e:52:a4:ff:02:93:b0:33:7d:34:9d:f5:9a:
c1:94:ac:65:9b:46:b9:b1:6a:f3:e5:68:08:48:75:
3f:de:15:71:8c:eb:0a:49:6d:e4:8d:f9:1f:3b:cf:
8e:a2:e1:e3:52:e2:6c:77:8e:b0:94:78:eb:8a:7f:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0F:C4:97:18:D4:B6:F8:0A:26:C5:20:A6:5B:12:95:37:B5:0E:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ea:34:eb:47:37:41:e0:32:d6:a7:90:90:ad:3f:15:bc:4e:
b3:97:d4:9f:a5:e6:df:15:66:b7:27:29:8d:5e:79:37:8a:f2:
5a:2e:ba:d5:b9:d7:16:de:ee:ce:c1:2e:36:79:92:a9:a6:36:
7d:3c:e2:92:4b:2a:18:ff:75:d9:3b:a2:b5:fa:b2:de:24:77:
a9:a1:a4:de:22:f7:d2:6b:34:d6:f6:b3:32:94:a8:dd:4a:bd:
7a:80:58:7b:fc:f5:98:35:7a:8c:86:11:1d:2c:4c:1b:0e:15:
89:f5:ef:1f:6e:1e:09:20:d2:a0:a3:fb:16:8f:2f:7b:57:c1:
c3:27:9a:52:fd:80:2c:58:93:bd:d2:b8:c2:8d:3a:1f:65:c9:
ca:1e:cf:8b:1c:8b:09:f4:35:35:d6:48:02:38:b2:1c:65:fc:
48:48:23:c5:78:68:d0:27:2d:f3:a4:5c:b0:f7:1f:c3:bf:1b:
4d:cd:ca:2b:58:73:4e:97:1a:e1:88:30:d3:97:b6:6e:28:1a:
0f:81:1d:ed:99:40:96:96:6f:45:da:ae:51:c6:45:17:d8:25:
3c:92:80:09:3d:10:47:4a:53:47:f1:fe:97:5a:ac:e5:90:b3:
8c:ce:a9:75:23:cb:4c:f5:f8:52:56:36:9e:88:a8:ba:af:41:
f6:2a:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:15 2025 by rpki-client