Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa
File: b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa (raw, json)
Hash identifier: uFpDzs7WTj5WOrrFMSeeFAlrJ8ZDUFUpfIgSD/50Czk=
Subject key identifier: 5F:1C:E9:CF:1D:D6:A5:81:FA:34:7B:2B:46:38:D0:DF:9B:92:12:6A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B73615D565AA5E2980AD12A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa
Signing time: Thu 30 Jan 2025 11:08:47 +0000
ROA not before: Thu 30 Jan 2025 11:08:47 +0000
ROA not after: Wed 30 Apr 2025 10:08:47 +0000
asID: 30036
IP address blocks: 173.23.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:36:15:d5:65:aa:5e:29:80:ad:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:08:47 2025 GMT
Not After : Apr 30 10:08:47 2025 GMT
Subject: CN=a0d10bb9-03dc-4b3e-ad40-0afa18049a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:f7:79:c0:30:d5:79:80:85:0e:43:dc:c6:
2a:dd:f1:d4:c5:7d:24:6a:7f:4d:07:a7:29:a6:57:
29:e8:28:83:87:44:4a:1f:cf:dc:7f:53:00:b3:3c:
61:27:6e:c8:ca:9f:9b:80:ff:0c:36:89:3e:66:8b:
e5:67:2d:f7:04:83:a6:b1:80:9d:7a:0a:b7:e7:75:
c7:ea:76:49:26:6a:8e:e1:34:0b:fa:77:26:24:68:
41:a6:d0:9c:67:03:86:db:96:1f:ed:7b:b5:3e:4a:
15:0e:3d:00:ac:f0:c7:29:46:a5:0f:ad:4c:ee:1f:
e1:9c:16:cc:08:49:c5:88:aa:b0:1c:b9:f1:ce:41:
50:14:e4:66:28:c3:c4:e5:b6:f2:28:7c:9d:7f:6b:
ac:d7:91:7a:a5:02:cc:46:d5:96:d6:ea:8e:dc:2f:
59:b3:69:a4:1b:a8:17:a6:1d:5d:4b:84:81:aa:c1:
7d:3f:8b:6c:87:62:e1:d5:08:c5:02:be:c0:96:45:
44:69:9c:00:fd:16:06:51:02:e1:4d:36:3c:06:72:
85:04:58:32:f6:f3:f6:ef:cf:46:50:31:03:d1:f5:
b3:4d:78:17:03:3c:92:ed:1c:f4:16:c0:cb:ea:a7:
b1:de:c8:10:e9:9f:24:64:6a:0e:58:ba:a9:2a:94:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1C:E9:CF:1D:D6:A5:81:FA:34:7B:2B:46:38:D0:DF:9B:92:12:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:db:a2:fd:03:5b:ca:84:09:14:c3:a8:16:46:de:57:94:91:
8d:2d:19:17:d6:20:09:e7:a2:a4:53:39:06:7d:2b:a5:6f:31:
af:8a:89:77:fa:8e:d6:63:03:d6:72:8d:39:a2:a5:83:6d:b9:
eb:5b:cf:25:65:1c:17:9a:a1:e5:57:3c:01:7f:7c:c6:71:30:
0d:69:27:b9:34:b6:56:95:09:86:20:cf:3d:ab:2b:67:b3:cb:
90:62:74:37:86:a7:92:11:bb:1d:fe:d1:a4:61:eb:c6:b4:b0:
2f:fb:f6:57:2d:07:c5:01:29:17:21:25:85:0f:fb:6e:64:32:
bc:3d:dd:8c:82:7b:bd:22:1c:6d:9d:da:29:fd:64:e2:20:39:
8a:2b:bd:f1:d2:e8:90:a9:b6:2d:26:b4:58:5d:e4:fe:99:89:
e0:67:22:a7:8b:c7:3b:e2:6b:b4:89:8e:49:d2:40:85:7f:61:
98:01:21:a7:41:23:d9:15:62:a2:fc:9f:e3:0b:95:20:84:aa:
79:01:0c:77:b2:48:de:30:76:2b:15:ee:27:72:1e:72:0c:38:
9a:98:e8:74:3a:8e:fe:fa:06:6b:fc:71:c7:93:a3:b3:af:a7:
c7:a2:57:86:7b:35:dc:2b:ac:6c:9e:8d:5b:4b:26:9e:e0:52:
f4:4e:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:16 2025 by rpki-client