Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3181d53-2feb-36da-8e79-9e19bc5454a7.roa
File: b3181d53-2feb-36da-8e79-9e19bc5454a7.roa (raw, json)
Hash identifier: VdAwrneA1iEnTpgvyQCJoLZWB3hZAqH+xEftlapBCNY=
Subject key identifier: AA:1A:8D:34:F8:2C:BE:E8:4D:50:FF:E1:52:F5:14:2A:F2:C2:E5:7C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5579D5ACC4B66F14F07A3CD
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3181d53-2feb-36da-8e79-9e19bc5454a7.roa
Signing time: Tue 04 Feb 2025 12:37:40 +0000
ROA not before: Tue 04 Feb 2025 12:37:40 +0000
ROA not after: Mon 05 May 2025 11:37:40 +0000
asID: 30036
IP address blocks: 173.31.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:57:9d:5a:cc:4b:66:f1:4f:07:a3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:37:40 2025 GMT
Not After : May 5 11:37:40 2025 GMT
Subject: CN=89484433-7744-4c9c-be38-485a91bec3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:7a:cb:5e:56:f6:92:8c:0d:38:a6:02:f5:
da:d4:f1:2e:2c:f1:15:f6:56:e6:e8:46:13:1f:4e:
73:57:c6:dd:cb:ab:b5:60:07:6c:87:67:d1:da:1c:
3a:48:c0:ca:fa:47:8d:4c:3d:18:5d:60:d9:a0:c0:
5b:5d:6b:9c:97:5e:e5:cd:44:48:48:11:80:f7:6b:
e3:1e:0b:dd:61:49:2b:fc:02:bf:c4:95:47:8c:0a:
62:c9:f7:0a:64:f3:0d:41:eb:1d:11:a3:3a:cb:a1:
f1:d7:f1:60:a5:7d:27:b9:64:5c:94:8c:5d:31:cd:
cc:42:7e:78:49:69:f5:89:79:80:6e:a7:b9:38:52:
1e:0b:f3:68:ef:4c:1e:4c:bc:54:66:35:c9:7b:33:
7d:3c:d9:e3:5a:d1:75:43:44:7d:26:a2:76:36:11:
46:ec:02:69:14:4f:a7:e2:15:d4:fe:74:e9:0e:3a:
b3:cd:f5:44:e9:b6:d5:0d:2a:7e:bd:f2:f5:52:01:
f4:d3:ca:36:08:3f:90:36:44:c5:35:b5:7f:b0:85:
77:bd:46:00:87:f2:7f:30:d2:8b:c1:7b:9e:ec:44:
b5:71:8f:f1:9b:cb:09:06:d4:49:20:78:5b:6b:87:
00:4d:89:fa:89:fb:b2:01:8d:f1:e4:f8:85:91:7e:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:8D:34:F8:2C:BE:E8:4D:50:FF:E1:52:F5:14:2A:F2:C2:E5:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3181d53-2feb-36da-8e79-9e19bc5454a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:01:09:a9:d0:de:ec:8f:f0:51:53:fe:e9:19:41:2a:c9:a4:
88:2f:e2:d0:22:6d:f5:e5:ea:43:7e:61:4d:30:47:51:95:52:
15:22:45:ee:d9:a0:af:7c:34:20:cd:0a:9f:f7:07:3f:15:b5:
39:30:ad:2d:60:38:e3:92:fc:7b:ed:46:b9:64:82:63:15:9a:
f1:d7:0a:31:b6:4e:e6:3d:05:3a:93:87:c7:37:d5:01:a7:b9:
a3:a1:42:60:a6:94:29:b5:3c:57:09:86:f4:39:ea:a2:01:11:
57:69:b6:94:51:01:ec:95:c1:05:91:47:6d:fc:ec:31:5b:51:
ef:f7:9a:28:5a:9a:c8:8e:d3:69:ed:e0:d5:a2:32:68:51:c8:
dd:97:40:68:1a:3e:c1:88:e5:10:af:21:12:e5:19:0b:22:ac:
74:04:7f:99:14:b4:17:e4:70:fc:49:8a:b0:0c:e2:3f:4a:4c:
e5:eb:fd:b4:0f:ae:6c:44:91:e2:0e:08:dc:b0:99:c0:6f:f9:
27:b3:51:f1:2f:4f:19:54:93:c2:c0:08:0a:27:3b:c3:75:9a:
2c:6e:1b:e7:f6:89:31:35:48:30:e4:50:16:aa:27:8d:46:e6:
58:16:04:c0:92:aa:47:3b:59:e8:59:f1:84:b6:8d:28:94:38:
71:2e:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:15 2025 by rpki-client