Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a4121a-a44e-3a44-951c-be4fd4286fee.roa
File: a3a4121a-a44e-3a44-951c-be4fd4286fee.roa (raw, json)
Hash identifier: 79cBZxQDN07f/g3ZbCQtRm91DlQuOJQSFTBIgoY0BkY=
Subject key identifier: 3A:EB:99:58:2F:CD:F9:67:0A:C6:36:A8:53:18:3E:BC:A5:F0:60:F2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7FCF918CCEEF01F340AE080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a4121a-a44e-3a44-951c-be4fd4286fee.roa
Signing time: Wed 05 Feb 2025 11:22:27 +0000
ROA not before: Wed 05 Feb 2025 11:22:27 +0000
ROA not after: Tue 06 May 2025 10:22:27 +0000
asID: 30036
IP address blocks: 173.22.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fc:f9:18:cc:ee:f0:1f:34:0a:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:22:27 2025 GMT
Not After : May 6 10:22:27 2025 GMT
Subject: CN=37680002-7c91-4997-9221-d7870f0e281c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:66:27:d6:8c:8f:f3:cc:aa:e5:b8:50:ed:
87:74:fd:c9:f6:57:6c:63:11:01:25:a0:99:5e:94:
10:a3:bb:55:da:79:1b:33:72:d1:67:fe:12:84:91:
56:3a:0d:5c:cc:c6:e5:eb:6a:3f:5c:79:6e:c7:b0:
5a:2d:84:d0:52:09:26:f6:8f:5c:9c:f9:6e:ce:0d:
70:c6:9e:61:d6:62:16:b7:e4:89:26:29:8f:08:28:
2e:69:05:57:4d:02:06:37:92:98:bf:e4:7a:3b:02:
9e:5a:5f:20:fd:d0:a5:bf:4c:5e:ea:21:e3:01:db:
43:be:ce:4a:45:fd:4d:80:26:0e:f3:02:28:7f:4a:
fa:3c:a1:45:01:f2:d0:00:af:68:f2:00:f6:58:5e:
a9:15:d9:fb:45:1d:a0:bf:9d:99:28:22:e7:f7:72:
b5:71:e8:6b:67:21:ec:7a:6b:72:78:28:65:98:1a:
ad:54:67:d6:8b:2c:69:fa:8d:8e:6a:ed:1b:5d:c2:
54:34:b8:4b:6a:de:00:35:e6:96:51:34:0d:da:0c:
30:d9:de:52:c6:0d:d1:c7:9f:4d:f3:c9:a0:9d:79:
b2:4f:f6:f1:06:28:a2:5e:9b:14:42:ae:13:8f:bc:
7f:ac:55:00:e1:9d:d5:93:bb:aa:bf:17:74:d5:02:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:99:58:2F:CD:F9:67:0A:C6:36:A8:53:18:3E:BC:A5:F0:60:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a4121a-a44e-3a44-951c-be4fd4286fee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:12:37:04:2d:71:92:e5:2e:e8:b7:23:5a:e4:4f:55:4c:21:
f2:cd:28:14:43:b6:6e:ea:0b:9f:68:22:e2:b6:20:17:ad:99:
20:e9:67:fb:24:f2:41:d0:67:e0:7c:2c:3a:f9:61:e0:04:e8:
02:7b:fc:1e:90:75:43:8c:ac:bd:3f:86:2e:32:6b:79:f5:99:
45:77:15:a1:1e:ec:57:b8:b5:75:a1:b1:af:b5:f0:3b:79:0e:
e2:c1:45:e4:58:08:bf:6d:d6:cf:34:c5:22:d5:23:5e:a0:65:
48:8a:17:9b:f3:3e:f5:47:d4:82:73:cf:e8:2c:43:76:1a:01:
3d:58:2e:1c:43:66:6f:ee:e4:e6:36:57:3d:42:5b:21:1b:b0:
69:47:5e:ff:4e:af:b5:94:d2:a5:16:3a:03:f9:1d:2f:c1:b1:
9c:3a:29:cf:05:f9:00:00:eb:68:d8:5a:29:66:2e:42:87:d1:
02:3b:fb:51:88:dd:fd:73:4d:3d:98:b4:3e:75:fc:b4:a0:4a:
3b:68:d7:81:fa:c0:2f:cf:72:0f:0f:b7:cb:d2:0a:65:53:7f:
24:29:72:0b:c7:a6:64:d9:9a:bd:d2:6f:2e:e1:2d:75:44:3f:
31:97:dd:6f:8d:8d:d6:b8:8b:e2:d1:86:f4:85:88:ab:98:bc:
45:a6:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:26 2025 by rpki-client