Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b87744d9-6276-3ccc-883d-c2252861983a.roa
File: b87744d9-6276-3ccc-883d-c2252861983a.roa (raw, json)
Hash identifier: 016jmO8V0tOKxmllMCcD9yhMS+4+bKGu/1Gk5ZFa2HQ=
Subject key identifier: 3E:23:C0:97:37:90:4E:53:42:05:70:1E:5F:9C:F7:41:9B:0F:5E:B8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5760E66A27B3BE0212EB3C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b87744d9-6276-3ccc-883d-c2252861983a.roa
Signing time: Tue 04 Feb 2025 13:39:00 +0000
ROA not before: Tue 04 Feb 2025 13:39:00 +0000
ROA not after: Mon 05 May 2025 12:39:00 +0000
asID: 30036
IP address blocks: 173.23.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:76:0e:66:a2:7b:3b:e0:21:2e:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:39:00 2025 GMT
Not After : May 5 12:39:00 2025 GMT
Subject: CN=11c0515d-b9e5-43fc-b472-3a0aecea3cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:24:5c:9b:5d:8c:17:03:19:14:10:41:22:
8d:31:e4:e7:84:3e:d6:ff:a8:74:e1:b3:24:a9:1c:
5b:10:7c:00:4a:be:28:44:d9:cf:88:55:0c:90:c4:
69:a2:85:67:23:f1:9a:5c:54:2e:89:d3:43:e2:d1:
10:7d:43:83:9d:01:93:05:1f:bd:4a:0d:01:11:e9:
b3:7a:b3:04:8b:a0:bd:f5:8f:9e:1b:0f:b3:bc:8d:
7e:0f:6a:4a:61:0d:6b:b9:a4:fd:0d:27:67:cb:7c:
3a:1c:9a:bb:1d:d1:0a:19:b1:28:ee:72:95:7f:65:
24:8b:71:fb:b9:dd:46:b0:ef:42:5e:01:d0:c4:f3:
57:da:91:30:81:df:c9:e7:c2:2c:27:73:40:e8:a1:
3c:37:af:5a:2b:ea:5e:a7:3f:d2:ab:e5:fe:30:df:
6b:6f:49:d4:32:7e:f3:92:32:9d:2c:61:a4:21:32:
fd:be:d6:7f:26:7c:6e:a0:32:3d:7b:7e:2a:26:43:
45:1c:c2:1e:96:7f:88:84:51:29:66:15:8d:48:86:
8e:63:91:cb:ab:58:51:21:26:5e:5e:52:f5:53:58:
fc:78:fc:25:85:1e:fd:f0:ca:2b:22:bc:3b:fa:36:
24:0e:44:e3:d1:7e:12:a6:ba:fc:88:bc:3f:49:4d:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:23:C0:97:37:90:4E:53:42:05:70:1E:5F:9C:F7:41:9B:0F:5E:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b87744d9-6276-3ccc-883d-c2252861983a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:a1:fd:04:e7:55:75:94:5a:41:10:cb:d4:74:d4:74:0b:33:
a7:68:0a:a5:c2:0a:46:bf:2e:d4:14:fc:26:98:d4:03:b9:e9:
51:b0:57:8d:7e:90:6b:26:c4:4f:67:73:2a:c8:5f:ac:bd:97:
21:f8:78:d8:56:6a:88:53:b6:79:f3:83:0f:a5:5e:92:6c:55:
b5:e2:02:73:76:3e:ab:22:8e:e7:70:67:7c:46:b8:1c:da:a9:
fb:a6:33:35:b2:42:6f:ee:cd:7b:76:4f:3d:86:b0:9c:98:e4:
e3:da:60:b6:a5:26:f2:ae:5c:a2:76:85:82:07:a7:e0:6e:3d:
99:86:d1:ef:b7:05:68:a9:05:21:10:26:60:3a:76:d9:38:15:
b5:16:d2:95:71:9b:2c:2a:b7:62:c6:e7:dd:4c:7e:f6:b4:51:
9b:36:1b:b7:b9:73:0b:1d:b5:86:be:88:0d:a0:32:92:3d:cc:
ab:36:1a:6d:b2:d7:f8:33:47:d4:7f:da:b7:d6:b3:fb:76:68:
d6:0e:52:55:51:5f:08:fd:cc:71:25:4d:7d:11:75:34:06:c1:
08:64:c6:64:2d:5b:a8:11:a1:a7:f3:2f:e1:c0:c2:34:d4:87:
c0:24:b2:7d:cb:be:09:72:54:ce:d2:05:05:f7:98:5a:77:51:
68:83:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:29 2025 by rpki-client