Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0f302f4-2236-346f-8eee-82e4c5099c5c.roa
File: b0f302f4-2236-346f-8eee-82e4c5099c5c.roa (raw, json)
Hash identifier: dVEWXSzFZSSSKkZvjWvQ5M7NihcNn2W/GppFhmZJ3So=
Subject key identifier: 7B:51:40:8E:8E:57:CC:14:53:F2:0B:C1:6C:2F:7B:A0:14:4B:8E:D6
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C575EAB69D1D552FD5E17A40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0f302f4-2236-346f-8eee-82e4c5099c5c.roa
Signing time: Tue 04 Feb 2025 13:38:43 +0000
ROA not before: Tue 04 Feb 2025 13:38:43 +0000
ROA not after: Mon 05 May 2025 12:38:43 +0000
asID: 30036
IP address blocks: 173.18.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:75:ea:b6:9d:1d:55:2f:d5:e1:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:38:43 2025 GMT
Not After : May 5 12:38:43 2025 GMT
Subject: CN=27547e1f-f3b7-48ad-a5e4-17351d944e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:02:43:75:b8:9a:72:cb:31:d4:94:16:2a:
82:bf:83:0e:98:0a:f0:34:15:01:c0:11:55:b9:81:
3f:2d:ef:07:64:72:d8:e9:aa:f3:31:ce:b7:bd:f1:
c1:c7:67:0a:35:b0:0d:b0:7f:e0:7f:37:9d:81:c7:
a5:1f:43:2a:78:f7:c6:a4:43:2b:12:b0:97:bd:9e:
d0:dc:f2:9b:88:91:a0:e4:8d:82:80:31:6a:6f:65:
c0:59:38:97:bc:89:7b:56:3e:c0:5a:2b:ae:8c:eb:
bd:a5:5a:46:13:bf:62:3b:c1:77:99:c7:2c:63:17:
92:60:5f:8f:6d:30:d7:f0:7a:90:9e:d0:56:69:d4:
c3:7d:de:f4:89:ed:e9:fc:e2:56:51:f2:8c:39:1c:
0f:ae:f8:06:98:42:6a:8c:60:14:77:a1:62:8c:9a:
b5:7a:f3:87:a1:95:36:45:67:e8:d2:34:68:a0:c7:
04:9d:8b:de:6b:01:e7:21:fe:0a:ca:21:c3:1e:77:
69:62:ab:e5:af:8c:39:88:46:3e:e4:b9:9c:e7:95:
6f:4f:9b:77:a7:fe:ae:b6:70:4d:78:1d:d2:1f:6b:
9a:cc:5c:a7:dc:b6:41:bd:10:ce:f7:e5:a1:bd:21:
09:75:8a:27:be:e2:4c:be:43:bf:e9:a9:e8:58:25:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:40:8E:8E:57:CC:14:53:F2:0B:C1:6C:2F:7B:A0:14:4B:8E:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0f302f4-2236-346f-8eee-82e4c5099c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:45:af:a8:1a:d1:b6:f9:0c:e3:cb:9f:8e:38:87:90:95:e2:
67:85:35:3c:ef:02:de:12:d6:82:c4:a1:ef:03:dd:79:9a:f1:
b5:38:50:84:59:1f:5d:53:10:3a:12:3a:33:17:22:71:88:f7:
71:c4:ba:2a:98:06:03:53:6d:51:fb:f4:ef:ce:d0:16:2b:4f:
54:9e:31:57:5e:40:fd:44:8f:24:f4:5c:ff:c7:e9:c8:56:d7:
33:b5:f2:ee:0b:c7:8d:a3:29:14:24:72:42:fe:49:de:85:d1:
0d:af:3d:82:9c:19:aa:cc:02:91:7e:fb:56:4f:41:bb:d2:0f:
c3:22:f4:33:59:7c:ca:dc:b0:96:1e:1e:38:c9:37:a2:03:31:
f6:05:f5:42:20:9d:7d:b2:a1:9c:b8:45:c1:29:cf:84:ac:f7:
2b:86:44:5f:a7:d3:5f:aa:01:ce:32:ad:b4:08:25:be:30:ec:
1f:03:31:bf:eb:3b:e7:af:d3:d9:4e:12:1e:d4:91:ef:76:62:
4e:ab:bd:4e:f9:bb:d7:e5:39:a0:4e:54:7d:86:ac:95:89:8f:
4d:fa:93:02:b4:1e:bc:c7:66:1e:02:a2:0f:a8:68:dd:ef:c1:
75:85:c4:57:60:bf:dc:a9:b5:06:39:dc:8c:65:b8:e0:20:8a:
7d:f7:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:32 2025 by rpki-client