Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa
File: a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa (raw, json)
Hash identifier: a288g1sTd/ZKFucxSwIlQYEsHnWvuIl0sljYCzUe2vU=
Subject key identifier: 7B:48:D9:12:3F:84:BD:27:5F:07:40:A5:1C:84:B1:26:C4:26:A4:2F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C575FFEB3CB3ED54AFA8B780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa
Signing time: Tue 04 Feb 2025 13:38:53 +0000
ROA not before: Tue 04 Feb 2025 13:38:53 +0000
ROA not after: Mon 05 May 2025 12:38:53 +0000
asID: 30036
IP address blocks: 173.23.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:75:ff:eb:3c:b3:ed:54:af:a8:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:38:53 2025 GMT
Not After : May 5 12:38:53 2025 GMT
Subject: CN=9375683f-8a86-4955-8029-84553afc4ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:a3:22:08:bc:a4:e8:7a:0a:8f:ec:87:b2:
33:b8:2e:19:18:d2:a5:be:a1:c0:0d:a8:8a:aa:60:
4e:97:4d:1f:1e:af:41:29:89:61:fb:1f:33:52:33:
01:a6:45:8b:fb:ea:41:58:49:85:0f:9d:36:95:4e:
a9:70:19:d5:92:92:c4:a1:9d:c9:89:3e:03:c6:e6:
d9:0d:cd:cf:a8:cc:b3:bc:0d:dc:9a:16:2a:af:e8:
e6:a1:15:39:b0:0c:c0:6e:a0:cf:9e:14:17:e2:08:
4e:80:90:d8:a0:67:d4:13:83:6f:5f:44:cb:e6:22:
8d:89:cf:51:06:c4:b1:29:cd:9a:0f:65:0f:cb:11:
f0:eb:c3:cd:c3:5c:58:9f:04:ab:90:d8:20:70:0a:
45:0b:46:da:06:11:36:50:fe:49:aa:19:f8:d6:fc:
58:e3:94:ad:9e:17:5e:4a:94:a5:87:f3:1f:b1:c4:
e1:dd:30:ba:ab:e6:9e:97:0e:d2:c8:ca:f9:9e:45:
95:db:21:53:ed:e7:be:14:46:e9:89:e9:e8:2c:dd:
c6:f5:24:cc:11:87:34:b4:e0:75:7c:4b:f6:ab:9b:
12:00:1e:52:f2:ed:a3:6c:79:50:3a:11:c0:bd:36:
af:10:c2:e3:14:21:a6:82:0d:53:99:31:b1:c0:27:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:D9:12:3F:84:BD:27:5F:07:40:A5:1C:84:B1:26:C4:26:A4:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:cc:43:dc:2d:7d:21:dc:90:03:e3:75:be:7c:a4:93:1b:ab:
09:83:12:55:ee:83:02:6c:b4:6c:73:51:87:c2:4f:dc:70:7b:
e5:bf:d4:7d:cb:54:8b:10:44:c5:24:f2:06:f7:52:66:32:f3:
c9:48:53:9a:a7:c9:c9:ea:91:ba:8d:ea:d3:10:f9:28:f1:7f:
83:25:5f:ee:47:64:f7:37:a2:77:07:b7:49:f0:8d:2b:1c:5d:
ba:5d:9a:14:7f:c5:df:b9:24:03:3e:3d:d1:de:7e:3a:2d:88:
6e:83:f3:d1:ec:94:f8:f3:06:19:90:9f:9a:80:fa:63:ad:ea:
8e:1f:0d:f8:4c:0c:a2:18:d3:9c:5b:af:6d:1c:de:4f:52:0a:
ce:d7:c5:77:c6:39:84:de:d3:9f:68:53:fb:a5:c0:20:8f:49:
e5:c9:19:bd:54:85:e3:29:94:33:0b:a9:b4:5c:58:2b:56:4d:
65:54:10:28:1e:ce:4d:39:0f:b6:aa:94:91:91:78:e5:7c:1a:
4d:b6:01:9a:b8:8b:56:f8:b9:b9:0e:ba:80:dd:2a:54:05:fd:
57:cb:cc:61:dc:dd:c5:46:22:43:60:77:a1:22:d5:db:63:1f:
1c:3f:5d:79:02:98:4e:5f:56:0d:b1:e1:f9:a7:cc:ff:a5:31:
84:8b:49:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:15 2025 by rpki-client