Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0dfafd4-e9fd-3626-a62c-28e3a647765e.roa
File: c0dfafd4-e9fd-3626-a62c-28e3a647765e.roa (raw, json)
Hash identifier: McX1BtsKs6ov0cxAxQY0rJkAgVZtLlHHZzrNJrtI0So=
Subject key identifier: 27:BB:BD:66:AF:A2:21:C3:AF:C3:C4:C2:DB:8D:E0:C0:B0:F3:CA:9A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2606587D206FDC347FAF500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0dfafd4-e9fd-3626-a62c-28e3a647765e.roa
Signing time: Mon 03 Feb 2025 11:07:56 +0000
ROA not before: Mon 03 Feb 2025 11:07:56 +0000
ROA not after: Sun 04 May 2025 10:07:56 +0000
asID: 30036
IP address blocks: 173.29.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:60:65:87:d2:06:fd:c3:47:fa:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:07:56 2025 GMT
Not After : May 4 10:07:56 2025 GMT
Subject: CN=e58b8645-0791-4773-9fb5-442bb9eb5592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:42:66:44:79:fb:97:fb:1b:52:2d:62:04:
07:db:88:de:e3:c3:d0:3e:25:5e:79:d0:80:ee:4f:
6f:f0:fe:5b:6f:e4:6d:3d:92:67:81:90:8d:72:f7:
b7:00:3c:c8:fe:6e:3a:8b:2e:26:52:a4:9d:c3:c6:
65:b3:08:5d:c1:4e:24:06:68:70:6e:d9:12:6f:40:
bf:0f:d0:62:a3:a6:2d:6d:6c:66:72:6e:41:4b:7d:
87:4b:b4:de:b8:54:92:c5:29:6f:68:22:f9:41:9b:
f4:c6:07:01:00:36:88:fa:e8:dd:f0:cd:24:17:4c:
3a:1b:20:0c:6b:2a:0c:c5:fd:d4:69:21:9a:75:f0:
1f:1b:8e:8e:c6:51:a2:33:91:b2:72:b4:c2:02:1f:
96:3a:03:ee:7b:8c:3c:69:a9:45:3f:65:16:49:2d:
d1:42:a4:6d:78:c5:f9:c0:c3:2c:ea:c7:06:32:cc:
6a:68:03:67:93:9c:b2:dd:8b:07:f7:6c:1d:1b:a7:
5f:bf:2a:41:07:a7:4e:51:f4:de:3a:08:1e:22:18:
a7:7c:be:2a:16:a4:14:32:14:98:d7:98:27:17:6d:
68:c8:c2:c0:06:8d:8a:4b:8c:d0:02:d1:4f:e0:e0:
d3:bf:f5:b6:d8:47:37:a4:db:66:eb:b0:dd:ce:69:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:BD:66:AF:A2:21:C3:AF:C3:C4:C2:DB:8D:E0:C0:B0:F3:CA:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0dfafd4-e9fd-3626-a62c-28e3a647765e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:be:d4:05:04:08:81:76:f5:9f:92:ed:84:d6:b7:d6:cb:f0:
e7:02:0a:f1:32:48:c4:17:02:23:68:42:b0:01:80:fe:12:99:
50:02:69:4d:6f:62:d7:f2:f9:b6:dc:d9:66:14:5c:d5:86:eb:
9d:a4:52:f3:98:06:58:e7:63:59:4d:8a:51:5f:b9:9c:6d:ee:
c4:cf:3e:3d:5c:5b:0d:8c:32:9b:87:11:7a:a7:3e:b7:a3:20:
96:06:af:15:17:d5:db:93:c9:19:af:be:40:6c:34:85:37:91:
15:7f:72:e5:d0:9c:39:55:12:69:8b:6f:61:7b:71:c4:31:21:
cc:b1:dc:6e:bf:4c:1d:2c:25:a2:33:b7:cb:13:9c:91:46:81:
74:b2:27:45:0a:e2:b8:3a:04:68:fa:ef:e2:d0:48:ae:8f:32:
21:ad:03:89:1b:04:02:7c:e1:30:dc:9d:4c:d4:3b:a0:23:ee:
69:29:6f:c6:20:4e:dd:5a:e4:be:10:b6:7f:67:99:ef:b0:c4:
b1:e1:38:c3:1e:26:5f:84:32:b4:84:1f:25:62:cd:d4:1e:0a:
e8:a3:1e:47:94:c8:f1:2a:9f:3c:a8:13:ba:6a:cd:37:0c:10:
31:16:55:b1:0b:ef:e5:b5:2b:a8:ac:b2:ca:26:7a:cc:84:95:
35:8d:31:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:47 2025 by rpki-client