Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b07132a3-c9a8-3893-8e20-12afbddff833.roa
File: b07132a3-c9a8-3893-8e20-12afbddff833.roa (raw, json)
Hash identifier: aCM/Jht51yN8K+i7dzAL9fb6d4IzaUuaWyqix1n9AP0=
Subject key identifier: A1:C5:01:58:65:97:E1:69:10:82:D9:EA:2C:8A:C9:A5:1D:74:10:68
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F7A5F2A76F605326C3C280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b07132a3-c9a8-3893-8e20-12afbddff833.roa
Signing time: Wed 05 Feb 2025 11:11:44 +0000
ROA not before: Wed 05 Feb 2025 11:11:44 +0000
ROA not after: Tue 06 May 2025 10:11:44 +0000
asID: 30036
IP address blocks: 173.29.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:a5:f2:a7:6f:60:53:26:c3:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:11:44 2025 GMT
Not After : May 6 10:11:44 2025 GMT
Subject: CN=216e3548-7429-4d1c-aea0-d7f4470178a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b5:96:0c:df:96:dc:7f:57:00:aa:12:40:ea:
fe:2d:37:9d:3c:4a:1b:b8:f0:77:ec:82:63:6b:1e:
88:76:99:97:ba:3e:10:49:03:4c:98:23:81:da:09:
66:b8:42:bb:4e:e3:fb:ed:5d:c0:98:fa:f9:97:4f:
19:fc:b9:b6:3b:44:e7:07:2a:cf:ab:dd:87:18:ad:
96:7e:d7:c4:8c:54:a0:8b:3f:25:7b:fd:0e:42:04:
1d:3c:bb:f7:44:6a:c8:b1:88:8f:b5:e1:f2:b7:b2:
51:ac:91:75:94:fc:02:0d:35:97:86:50:0b:bf:b9:
6a:52:dd:31:fa:17:4c:fa:70:33:74:2d:56:52:bf:
e4:87:e0:aa:c9:c2:cb:99:13:79:42:11:3a:ed:62:
32:d7:86:f6:e2:b8:cb:8e:08:ff:20:60:f6:f9:64:
61:69:4e:2f:08:1b:1b:98:56:16:ff:ac:bd:8a:cb:
df:ed:f3:cf:e1:a1:4f:d5:3e:d0:96:de:00:30:d5:
9c:a7:a7:cb:d8:2e:99:d5:ae:f6:10:0f:74:a8:15:
ee:e0:60:50:86:c9:fe:33:d8:d3:9d:15:c5:cf:3c:
2f:89:c3:bd:a3:8c:98:87:a6:9a:12:f8:ad:40:7a:
78:cf:ec:27:dd:3d:b0:0e:43:da:26:7b:f1:cf:10:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C5:01:58:65:97:E1:69:10:82:D9:EA:2C:8A:C9:A5:1D:74:10:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b07132a3-c9a8-3893-8e20-12afbddff833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:6a:a2:c2:ec:23:6e:c1:0a:07:e4:8d:01:5c:5d:d6:16:50:
e2:cf:4c:1e:8d:97:50:00:86:cd:11:6c:46:2c:bf:19:43:1d:
12:6a:0b:a6:24:c0:f2:c9:16:e5:41:52:83:17:3c:90:10:53:
e6:8b:9f:3e:00:61:b3:f7:4f:11:ce:82:7c:75:65:83:da:18:
15:3f:78:cc:59:56:a5:86:39:71:b0:55:1b:bc:a6:5c:bb:29:
69:a0:e3:12:88:b1:84:8c:20:35:78:0a:12:27:8e:98:e2:4c:
d2:19:35:b2:54:51:72:da:c4:28:51:55:f7:fe:de:5c:00:d2:
10:ee:33:f3:b8:bc:fa:df:9b:84:aa:52:6c:27:5d:5c:92:f1:
82:93:1f:fb:9c:46:18:98:70:da:36:be:e4:9d:32:d7:fc:9b:
dd:0a:10:50:7e:39:13:9a:5b:5f:e0:e9:af:33:2d:03:d6:e4:
5d:a2:ce:60:68:77:6e:03:b9:ce:c7:a9:16:47:13:f3:30:44:
83:14:3e:e5:19:f9:fa:e7:07:e0:05:e5:c2:b6:1c:fa:1d:11:
16:cf:33:1a:4c:1d:19:6b:27:2c:9e:cc:f1:74:90:8d:fb:62:
bf:d5:c1:63:1d:dd:20:b8:87:3e:19:45:05:f2:ed:09:a1:8c:
a6:be:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:55 2025 by rpki-client