Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f111c8-3652-3329-88ee-ce79c6a6d011.roa
File: d4f111c8-3652-3329-88ee-ce79c6a6d011.roa (raw, json)
Hash identifier: zPywLFgi12X/wOs6wQJI5pSMOFsTRs2x5Yu+J73G8B8=
Subject key identifier: C4:B8:60:8D:91:25:0E:8A:FE:00:A1:7C:B5:32:81:8D:9A:9D:96:3F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C55875333492BCECA59F6780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f111c8-3652-3329-88ee-ce79c6a6d011.roa
Signing time: Tue 04 Feb 2025 12:39:22 +0000
ROA not before: Tue 04 Feb 2025 12:39:22 +0000
ROA not after: Mon 05 May 2025 11:39:22 +0000
asID: 30036
IP address blocks: 173.19.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:75:33:34:92:bc:ec:a5:9f:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:39:22 2025 GMT
Not After : May 5 11:39:22 2025 GMT
Subject: CN=6777a5a7-7c8d-4e08-8435-45585396695b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:76:19:d7:5a:50:02:b9:ed:05:3c:56:d2:
19:ee:f7:e5:7e:aa:00:b8:cf:79:cf:f1:35:1c:ea:
6f:f7:f0:8e:16:18:9e:7e:f4:29:0b:b1:8f:70:41:
fd:44:8d:5b:18:94:fa:ce:d9:37:00:74:15:b1:60:
bf:4d:f5:04:92:9d:5b:1c:20:9c:b1:e1:9c:32:a1:
cf:02:a2:37:0e:fa:c0:41:be:42:85:bd:80:67:a2:
81:e6:06:4a:b7:92:b9:20:0c:cb:1b:33:82:a1:80:
fd:18:95:ef:7b:6e:38:99:53:b9:14:33:b8:11:8c:
34:1d:93:ab:9d:be:8d:43:ae:c3:d5:7f:cb:36:a6:
3d:44:e9:ba:c4:5b:69:c5:65:a3:6c:f2:0e:bf:0f:
dd:97:91:e0:61:12:3a:a9:ef:fb:1a:11:e4:c9:6d:
a8:e5:67:0e:68:a8:42:e8:93:1c:03:6b:e5:7a:da:
8d:08:61:a0:17:f3:ec:f4:10:31:df:80:ad:ce:cf:
27:42:a4:de:4c:9a:41:b2:df:14:50:23:09:20:19:
df:eb:5a:e7:83:a2:9a:12:e7:50:e6:12:0f:0b:3e:
ee:51:77:89:c9:1d:c1:df:c6:57:84:e8:74:c2:d1:
eb:6e:5b:b0:b1:31:0d:eb:a6:26:6a:f7:ce:76:74:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B8:60:8D:91:25:0E:8A:FE:00:A1:7C:B5:32:81:8D:9A:9D:96:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f111c8-3652-3329-88ee-ce79c6a6d011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:56:df:c0:36:db:df:54:5c:24:c9:cc:30:75:a9:3a:35:b0:
ba:3e:29:65:89:77:34:d4:d1:74:91:07:5c:98:31:5a:df:fa:
f6:2e:75:d8:01:ad:4e:0d:18:c4:3d:a2:56:ae:0a:41:d5:df:
61:08:72:50:2c:34:76:54:80:34:9c:3f:72:76:24:72:75:ef:
45:12:a4:7f:45:08:0e:61:62:d2:80:7f:21:2c:fb:9d:8e:90:
f2:ee:f6:90:ad:49:3e:2d:c5:e7:d2:fa:01:1f:69:a4:cb:d7:
82:e7:b8:02:0f:fb:9f:53:d0:c2:fd:fa:55:2e:b2:d2:c7:f6:
8f:49:77:15:93:0e:cf:3b:07:bd:96:a6:d5:59:f3:f0:78:d2:
ca:5e:7c:05:57:31:bf:c9:e7:72:56:8b:c9:18:86:37:c7:1e:
55:f8:de:7f:f5:a3:7b:08:de:c7:91:e3:88:2a:18:6f:3b:8f:
4e:f8:94:26:cd:f6:57:c7:e1:bb:7b:27:8d:6c:2c:3f:69:b4:
d0:90:f9:5c:2c:8d:75:b2:0d:89:bf:be:3d:32:d7:20:aa:28:
60:81:77:35:ed:86:f8:f3:5d:eb:58:af:80:37:6b:8b:d9:1d:
de:79:c5:33:9d:22:91:27:13:04:54:79:87:f6:6a:14:45:ca:
7c:9d:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:56 2025 by rpki-client