Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6e258ee-ec8e-307a-b2b4-f8cafea7d4c1.roa
File: d6e258ee-ec8e-307a-b2b4-f8cafea7d4c1.roa (raw, json)
Hash identifier: 9FrYsvlm2xGqwZ1EbaLmVrQkck5VuFqE7hJF1gfdyRs=
Subject key identifier: 56:F5:F8:51:8C:F3:CD:8B:1C:DE:F8:BF:22:B5:6D:50:EC:BA:6C:32
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B735A9A1AC9F6B1852F06D40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6e258ee-ec8e-307a-b2b4-f8cafea7d4c1.roa
Signing time: Thu 30 Jan 2025 11:07:56 +0000
ROA not before: Thu 30 Jan 2025 11:07:56 +0000
ROA not after: Wed 30 Apr 2025 10:07:56 +0000
asID: 30036
IP address blocks: 173.21.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:35:a9:a1:ac:9f:6b:18:52:f0:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:07:56 2025 GMT
Not After : Apr 30 10:07:56 2025 GMT
Subject: CN=3a6402af-1ed7-4785-82d8-4ac5c9f860c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:d7:79:db:3e:16:25:3d:75:7a:db:40:42:
04:7d:49:95:25:c8:b1:c4:a4:bc:64:c3:eb:3d:4f:
d5:24:dc:4d:b9:29:2c:ee:56:52:83:a6:04:96:28:
70:6e:f6:90:5d:96:0a:fc:fe:fe:fa:db:dd:41:5b:
23:c9:db:3e:0a:04:80:0c:bb:a2:bc:ec:c2:ca:e7:
a8:b2:e3:4b:a6:3a:44:b9:bf:52:52:ae:3a:fb:50:
4e:d5:a5:6a:7f:cb:92:a5:2a:25:81:72:d2:61:ea:
aa:44:41:83:7a:c7:73:cd:d4:1a:1b:4f:98:56:c1:
2f:59:1d:f2:3a:df:6c:7a:46:ae:2b:32:4c:de:99:
06:28:3c:3a:cb:a4:6f:94:ba:96:56:69:32:6e:82:
86:eb:01:46:ea:e3:5a:e4:08:4a:44:eb:69:33:b9:
7d:57:12:74:61:da:3f:f2:96:e5:d1:0f:86:fe:d3:
0a:8e:8b:f1:1b:f2:24:8b:d9:51:69:d5:46:e9:ff:
e5:20:e2:fb:51:bf:f1:5e:cf:77:c7:b4:4e:af:45:
d7:a2:05:a0:e1:86:9c:4e:06:25:ce:80:d1:43:64:
29:19:a9:44:e4:c0:63:a8:c7:80:e9:9c:3b:2f:61:
af:e8:ba:a1:ee:e1:5b:c2:22:7b:ea:6a:ed:7d:6e:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:F8:51:8C:F3:CD:8B:1C:DE:F8:BF:22:B5:6D:50:EC:BA:6C:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6e258ee-ec8e-307a-b2b4-f8cafea7d4c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:2a:07:6a:fb:68:8c:65:83:59:bb:ac:55:cc:0a:9a:08:40:
9a:ea:bf:ea:69:29:43:61:6d:38:1c:63:33:52:f0:62:08:6a:
13:f0:63:98:c4:98:39:7f:dd:8b:cf:64:81:6e:91:58:69:7c:
0c:2a:57:73:55:48:d8:08:09:c1:48:b4:0c:b0:71:13:b0:07:
6a:dd:98:cd:e0:1b:cd:64:83:84:40:c7:f4:15:f9:ed:15:af:
ad:6e:b2:e7:00:61:21:b1:d2:d4:ba:f2:0c:de:db:11:f0:b4:
2b:10:1d:80:d9:4f:b8:42:ce:dd:5f:6d:d9:48:46:0b:e4:3a:
f1:67:d6:24:ec:d1:6c:fc:2b:27:2c:20:32:2a:da:fc:49:41:
a2:ec:3a:a7:ef:d0:27:6a:76:af:c9:7a:04:fe:b9:cd:8a:74:
43:6a:aa:86:98:10:a5:78:27:4f:ca:70:5d:50:80:2f:a5:27:
bb:eb:3b:7b:ad:6a:ce:66:9e:cb:24:ed:75:15:38:11:ac:e8:
3d:f4:d1:21:f8:f2:17:a4:d7:7a:2a:ef:56:e6:be:06:3d:2c:
be:74:70:a6:43:d8:36:3f:d9:e2:cc:04:4e:08:6a:9f:87:21:
cc:e1:ac:53:6d:ed:43:6d:6d:30:c4:f8:5d:9f:eb:e5:d3:71:
88:1a:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:33 2025 by rpki-client