Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f9f66e-19d9-38a6-b99b-095fa533651b.roa
File: d4f9f66e-19d9-38a6-b99b-095fa533651b.roa (raw, json)
Hash identifier: ZPAyGmVqqN/cAZQzCG+rTfdjk9KUqyYtfeBulD3mx9I=
Subject key identifier: 9E:F9:7C:5D:38:E2:0F:16:1B:4C:E4:40:25:91:BE:E6:0B:E3:18:2F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C533F926E3128DDC2226C180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f9f66e-19d9-38a6-b99b-095fa533651b.roa
Signing time: Tue 04 Feb 2025 11:25:51 +0000
ROA not before: Tue 04 Feb 2025 11:25:51 +0000
ROA not after: Mon 05 May 2025 10:25:51 +0000
asID: 30036
IP address blocks: 173.29.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:33:f9:26:e3:12:8d:dc:22:26:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:25:51 2025 GMT
Not After : May 5 10:25:51 2025 GMT
Subject: CN=5d4a1583-0d84-444d-b7f6-20ac3ad86d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:c5:83:f0:12:e2:fb:e0:89:ed:01:c7:98:
60:ad:49:c2:dc:41:8f:87:df:15:60:f8:2e:49:68:
83:cb:a8:02:61:e7:2e:89:65:04:1a:47:68:97:fb:
fe:a4:22:9c:69:d8:37:0f:92:4d:6a:23:ee:5c:ee:
7e:52:63:f1:01:b8:91:36:41:11:7b:43:20:98:3c:
2f:31:27:28:02:68:2f:1a:07:04:a6:39:74:40:b0:
91:9c:02:df:83:84:c7:c1:2b:00:94:17:ea:71:f9:
6e:44:ad:b8:87:ff:72:e7:cb:b3:ff:af:7f:b6:c8:
ee:fa:b7:2b:06:ac:96:cb:50:ca:d9:d6:f0:12:68:
35:3a:7e:c2:ba:3d:6d:5d:34:f6:40:69:10:cf:fa:
9a:ac:7e:3b:42:10:5d:a3:4f:f7:e9:1f:ca:c5:d7:
20:e4:41:cb:a8:9d:56:6d:43:af:f6:72:bf:61:08:
40:77:8e:26:c2:d3:c5:7c:ce:01:54:52:d9:cb:b3:
95:c1:11:3a:bd:9f:b3:78:f6:54:75:68:70:2e:61:
e6:96:de:80:2a:ae:c9:7b:c6:c6:58:9f:3a:c6:40:
bf:33:ae:d4:30:73:fb:d0:37:c2:42:eb:6a:5c:35:
79:81:d6:31:be:39:80:5b:c6:77:11:fe:5a:b5:ad:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:7C:5D:38:E2:0F:16:1B:4C:E4:40:25:91:BE:E6:0B:E3:18:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f9f66e-19d9-38a6-b99b-095fa533651b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4a:3b:bb:51:e3:2f:31:8d:af:76:07:23:1f:25:5a:21:1f:
70:f1:c7:e7:a6:6e:2e:48:29:1c:13:d4:d0:01:7f:7d:38:67:
30:bc:e7:9e:98:47:4e:a0:5f:fa:69:b2:f1:db:06:b5:9b:86:
2d:4e:25:2a:48:41:bb:1c:79:cd:3d:12:61:bb:56:4a:9b:cb:
1c:58:e9:f7:bf:c1:dc:8b:5f:84:eb:ca:3e:fe:10:9c:b1:46:
47:b8:8e:16:3e:a9:92:35:62:34:35:5f:58:ef:8d:40:00:2e:
15:12:86:04:11:ca:ab:cd:ad:eb:b7:78:58:e4:6f:b5:04:14:
14:9c:18:84:70:90:80:86:17:b5:78:f8:45:0b:4b:82:c1:65:
15:23:b0:8b:4a:97:05:cd:8e:35:60:15:48:05:49:e9:7a:c2:
fb:b8:e6:c3:35:53:2a:68:26:4b:49:bb:cf:8c:cf:1f:c0:02:
d5:fa:7a:2c:c5:5a:fe:b8:39:27:c9:60:c9:a3:c7:04:8c:a3:
fa:20:5e:07:ba:cd:44:21:18:76:19:e4:20:73:c6:c5:ae:e2:
05:5e:1e:62:88:8a:fb:0b:84:bc:a3:24:de:ea:4c:3b:42:47:
86:e1:2d:b2:4e:7c:98:a3:b8:cc:0a:c4:d5:02:76:14:41:f2:
f9:eb:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:43 2025 by rpki-client