Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa
File: ca1af946-2717-3844-93e9-437539eb99b4.roa (raw, json)
Hash identifier: oMar6SIZ6PTvtmMwvsFvsqmvVXFh5fUgicgCPxlbBoA=
Subject key identifier: 32:9D:48:4C:71:91:60:15:FD:A2:44:32:E0:EB:25:6D:5C:65:CC:13
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C53263D3E007296FA6F8AD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa
Signing time: Tue 04 Feb 2025 11:22:40 +0000
ROA not before: Tue 04 Feb 2025 11:22:40 +0000
ROA not after: Mon 05 May 2025 10:22:40 +0000
asID: 30036
IP address blocks: 173.18.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:32:63:d3:e0:07:29:6f:a6:f8:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:22:40 2025 GMT
Not After : May 5 10:22:40 2025 GMT
Subject: CN=819de1b2-0cee-4344-b84d-1f806d31fadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:42:39:d2:9c:a7:4a:29:a6:46:24:b7:cb:
52:8f:52:b4:6a:07:2f:53:da:8c:27:7d:ab:bc:d6:
a4:e8:4b:8b:28:46:3b:21:05:ef:51:da:e2:20:1d:
06:eb:d6:e8:4c:91:50:9e:1d:35:a5:6d:0b:ff:ec:
3f:35:b0:6b:e0:bb:c1:60:6f:0b:14:f6:29:a9:ec:
0d:f5:18:7b:1a:7f:f9:9d:c0:75:67:7c:56:aa:36:
02:6f:39:b5:05:da:c0:de:44:92:b8:94:f7:7b:f4:
79:51:2a:c6:5c:24:62:96:63:a1:3b:8c:98:32:ea:
62:1f:ba:3e:27:bc:19:cd:68:b1:b1:a9:68:eb:f7:
ba:f6:5d:e1:a9:f2:41:81:6d:01:cb:2b:f5:6e:d8:
b7:cb:34:d9:a0:f7:17:63:95:e3:2d:ec:5d:02:4a:
02:df:2d:f6:0d:c9:6f:0d:9c:b9:70:ce:df:05:49:
aa:59:40:ab:81:fd:f3:29:f0:ac:9c:a7:ea:97:67:
20:37:be:32:11:80:0e:e5:a3:57:ef:3a:62:7e:3e:
71:c2:2c:07:65:e1:93:82:4e:18:82:c0:36:2c:55:
ea:e1:2e:e5:af:1a:bc:a4:9e:d2:a5:39:19:fa:f3:
c9:22:8f:59:63:66:02:6c:08:fe:81:0d:0a:fd:41:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9D:48:4C:71:91:60:15:FD:A2:44:32:E0:EB:25:6D:5C:65:CC:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:d1:60:d7:9d:3e:af:39:f1:b9:8d:83:80:3b:0e:89:e4:bc:
61:27:56:45:6b:cb:b3:86:fe:e1:72:67:4b:0c:30:51:9a:3e:
02:cb:4b:f6:9e:60:dc:75:ac:82:b8:7c:8e:d8:31:2c:81:af:
f5:d9:d8:a7:da:fe:76:7d:62:64:17:2f:e0:aa:f9:af:63:8e:
34:eb:32:fb:7e:36:31:8f:53:44:e5:d1:2d:fa:0f:cd:91:8c:
e3:dc:fd:47:a7:f8:fe:68:bb:f8:17:7f:b9:d5:bd:18:aa:3a:
cd:13:3f:8a:7b:b1:a4:25:8a:20:28:d3:65:62:75:bb:56:2b:
10:94:4c:fa:4b:02:be:77:67:5a:94:f1:63:f9:74:2b:95:83:
98:11:a4:3e:11:f5:89:ee:61:53:5c:e3:c1:48:2c:ab:d4:98:
77:b7:49:43:9b:b6:14:7f:fa:60:2f:22:ff:06:e6:a4:4b:65:
32:12:fd:02:b6:d1:d4:79:6c:3d:7f:e3:aa:30:d6:97:e4:b4:
63:92:67:4e:e9:74:ce:b0:57:fe:f6:16:06:8c:3b:21:e6:38:
a5:f9:72:3d:52:21:e2:e0:06:a9:c3:e0:7b:2b:4c:33:ad:88:
2e:a9:92:c2:65:36:a2:83:d7:8f:3c:cc:8a:38:7c:06:d0:f9:
6e:83:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:00:54 2025 by rpki-client