Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c854d4e0-2a04-322f-9789-3f79a1804288.roa
File: c854d4e0-2a04-322f-9789-3f79a1804288.roa (raw, json)
Hash identifier: ppug+NMQdzwcsOdhSxxC4MiQjzGH0ps5b5P0NFxjz0Q=
Subject key identifier: F3:AF:C9:DA:09:D3:17:75:81:44:E3:21:EF:BB:6F:5B:8C:46:B0:06
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C576B01044E14E06591F9B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c854d4e0-2a04-322f-9789-3f79a1804288.roa
Signing time: Tue 04 Feb 2025 13:40:16 +0000
ROA not before: Tue 04 Feb 2025 13:40:16 +0000
ROA not after: Mon 05 May 2025 12:40:16 +0000
asID: 30036
IP address blocks: 173.17.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:76:b0:10:44:e1:4e:06:59:1f:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:40:16 2025 GMT
Not After : May 5 12:40:16 2025 GMT
Subject: CN=ba038766-0743-4f2b-b02b-18f13c84985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:8b:25:ea:92:63:a5:1c:0e:c4:ef:55:92:
a4:21:01:e7:9e:4f:2c:3f:9a:0b:bf:52:e6:6a:99:
d2:b6:0a:85:1b:45:81:c1:4a:29:ca:a6:57:8c:87:
d9:b4:d2:61:2a:ac:42:68:e9:8d:dc:cb:1f:30:38:
30:93:a7:26:3e:1d:b4:0e:31:79:34:21:fd:00:fc:
85:8d:b0:44:9d:39:66:30:22:6d:d7:85:36:11:12:
0b:d8:4e:66:ae:15:05:95:96:50:5c:04:98:02:83:
00:65:4d:35:f5:6e:86:48:27:a1:1e:b5:6e:96:f2:
8b:f2:5f:0e:de:47:23:ec:0e:6b:c5:04:35:ee:75:
3e:bb:85:91:62:e0:ed:e1:9f:c4:14:12:bc:95:14:
b3:81:9e:92:da:2e:6e:54:93:49:1a:7e:85:fe:b2:
e0:f9:fa:f4:91:68:21:03:8b:ef:f2:29:25:fd:79:
38:07:e5:d6:f5:c7:09:80:5c:6a:7f:48:f4:d1:6c:
b8:9a:2d:d0:96:89:0c:9f:5d:25:95:a3:c7:d2:12:
be:30:24:89:f9:9b:78:3b:9c:9c:3a:f3:14:e7:aa:
68:84:95:50:ce:b6:74:0c:37:b0:d3:88:b7:99:c9:
48:4b:2f:ef:47:f4:93:1a:2f:75:f3:59:9f:3f:6e:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AF:C9:DA:09:D3:17:75:81:44:E3:21:EF:BB:6F:5B:8C:46:B0:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c854d4e0-2a04-322f-9789-3f79a1804288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:10:03:45:23:8c:d4:c5:d4:d9:66:40:0c:9f:73:6c:fa:38:
c6:1d:99:42:6d:1e:ce:69:05:1e:84:af:3c:5b:56:57:a8:b4:
a0:8a:80:fa:77:02:c4:48:3d:b3:4a:db:8c:0b:18:cf:03:f0:
c0:97:7e:64:5a:00:1d:60:bd:64:5b:5d:23:43:1a:4e:38:93:
6d:af:f0:54:74:5e:74:2e:3b:fd:ce:a4:85:86:76:1d:4f:24:
4d:8d:4c:be:54:cd:9f:87:21:a0:bc:19:6f:27:31:8c:fd:5a:
66:f0:15:63:98:f8:21:92:13:e0:a9:df:b1:37:76:07:bb:9d:
c6:ec:8b:c5:05:14:de:d7:65:9e:05:8e:19:6a:f5:b5:56:f4:
72:12:a4:1e:04:fa:6a:6d:63:c8:6d:98:9d:fb:25:e0:5f:59:
ea:29:e6:90:2a:e7:0c:6f:45:a2:6c:a5:23:27:13:28:ea:69:
7c:60:8e:80:4d:f3:fc:cd:79:ae:be:fa:af:3e:c4:ba:c9:e6:
79:d1:ce:85:eb:10:84:c0:9d:24:4e:be:fc:a5:0b:7f:20:f3:
b5:9b:db:6b:88:c0:ae:01:ee:fa:a6:81:c4:3a:2b:b1:52:39:
bf:62:cc:1e:a9:91:67:93:2d:a4:99:3d:1a:f1:1f:18:60:2c:
9a:d6:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:34:12 2025 by rpki-client