Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acd2e4e1-e7e8-3697-b22b-e4c9d4744dc6.roa
File: acd2e4e1-e7e8-3697-b22b-e4c9d4744dc6.roa (raw, json)
Hash identifier: VCFZ6Sgdt7mDwzav5DE6WZj1yMOzbxviE/z0Yvk1pHk=
Subject key identifier: 43:42:43:C0:A0:E7:B5:37:95:10:0C:E6:80:86:E6:89:68:76:F8:F0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C261719FFD761DC1CE943C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acd2e4e1-e7e8-3697-b22b-e4c9d4744dc6.roa
Signing time: Mon 03 Feb 2025 11:10:03 +0000
ROA not before: Mon 03 Feb 2025 11:10:03 +0000
ROA not after: Sun 04 May 2025 10:10:03 +0000
asID: 30036
IP address blocks: 50.81.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:61:71:9f:fd:76:1d:c1:ce:94:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:10:03 2025 GMT
Not After : May 4 10:10:03 2025 GMT
Subject: CN=d08c533c-2b52-46d9-b13e-e955311d9961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:91:f7:88:24:f0:5b:54:83:ae:5e:57:ba:
15:18:ed:7b:51:66:c7:4c:d6:9a:a5:fb:5f:c7:3a:
6c:d3:d8:6d:11:4c:d1:89:05:b9:1c:04:c2:43:be:
7a:d9:f2:38:89:a0:f9:45:03:68:b3:6b:ad:c7:c4:
99:46:4a:3a:ac:34:ac:a1:a9:c1:70:cb:1a:e8:4d:
a6:0f:a4:b5:43:eb:0a:8e:0a:36:02:f4:4f:22:1b:
b6:eb:ed:1d:c5:41:89:08:c9:54:11:5c:ba:32:a6:
3e:6f:82:ed:97:7b:91:9b:32:6d:14:b4:bc:49:bf:
c2:dc:c6:98:d2:17:fa:d5:1d:e7:83:ec:d6:d9:e3:
ea:a2:42:70:d5:3d:e3:cc:af:05:af:ce:24:9a:0f:
5d:ea:57:7b:8a:d2:7c:37:61:f6:3e:e2:06:51:55:
be:26:a1:2a:59:49:85:ab:ef:15:d3:7f:cc:70:03:
92:c4:aa:5b:d5:8c:85:5d:b3:45:24:90:f0:ad:c4:
d4:c7:d5:9b:cc:07:41:3f:40:6c:c2:df:37:48:0a:
31:e4:98:64:90:0d:58:ec:c3:38:69:8d:0c:6c:a8:
c7:c1:c9:68:05:dc:a6:08:05:fb:72:04:95:73:fe:
c5:6b:3b:c2:50:0b:db:6d:3a:52:44:ba:c9:54:5f:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:42:43:C0:A0:E7:B5:37:95:10:0C:E6:80:86:E6:89:68:76:F8:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acd2e4e1-e7e8-3697-b22b-e4c9d4744dc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
50.81.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:45:0c:24:b5:77:5d:7c:dd:89:e2:d8:e1:7b:23:d2:04:ee:
aa:62:e3:5b:35:ef:49:94:5a:10:c8:52:4b:21:fb:a9:86:05:
e1:cb:ec:c6:73:2b:0d:55:2d:18:56:c9:10:02:83:0a:5c:82:
67:92:c1:19:e4:30:d5:bd:11:98:b5:dc:33:92:df:25:85:66:
c1:f3:ca:b7:0b:52:2f:7d:a8:1b:6c:b5:18:83:ff:51:9f:58:
fb:05:51:27:e0:b9:2b:ce:5a:f9:53:df:2d:cc:1e:7d:84:8e:
00:52:b1:02:a0:e6:13:9e:97:ce:f8:3a:c8:63:8e:03:21:71:
6e:49:c8:47:e1:28:55:f9:1e:e9:fd:15:da:0f:42:e7:86:98:
2e:5f:48:81:6b:71:22:0a:2a:ed:fc:79:82:41:12:c9:54:2a:
51:e2:e4:67:9d:a6:66:d3:7c:9c:16:12:1d:f4:43:0f:f8:c2:
c2:c4:1f:92:98:4c:16:ee:c8:ea:dc:bd:fb:27:3f:88:50:7e:
89:e1:78:23:53:c1:ae:5f:21:55:df:81:0f:6f:25:b4:b2:e2:
db:a9:50:26:da:2b:b9:ea:c4:cb:39:67:5f:35:79:ad:43:36:
c4:3a:b0:e4:58:31:09:0d:8e:82:45:5d:1c:8b:90:40:ed:c5:
b3:5a:20:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:19 2025 by rpki-client