Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f18356f8-5761-3eb2-8500-a4641020dd1a.roa
File: f18356f8-5761-3eb2-8500-a4641020dd1a.roa (raw, json)
Hash identifier: u6uzphUOd3pslP7zXoiXJXS7bv6POSzbOdZ1ZuaaNfk=
Subject key identifier: 07:FF:82:44:2D:78:3A:FB:46:8E:15:28:54:05:E4:F4:D2:6C:CE:5D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C575A8EC1376C666A4CF4500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f18356f8-5761-3eb2-8500-a4641020dd1a.roa
Signing time: Tue 04 Feb 2025 13:38:12 +0000
ROA not before: Tue 04 Feb 2025 13:38:12 +0000
ROA not after: Mon 05 May 2025 12:38:12 +0000
asID: 30036
IP address blocks: 173.16.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:75:a8:ec:13:76:c6:66:a4:cf:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:38:12 2025 GMT
Not After : May 5 12:38:12 2025 GMT
Subject: CN=bc95a75b-f4b3-40cd-ba1f-c22e7075d7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:61:3e:18:61:1b:14:ea:cd:cf:aa:d6:18:84:
6d:cb:01:c4:b1:28:db:70:41:99:7e:db:67:67:26:
b2:79:f5:2a:6c:23:83:49:08:d3:56:f7:6e:27:f0:
b8:db:3b:6e:40:4c:b7:60:b1:66:57:59:70:9d:89:
92:77:5c:fb:2e:c2:d9:2e:91:95:09:b4:3a:e5:a9:
c0:aa:40:4f:af:a1:8b:12:6c:d3:86:9a:66:e7:b5:
9c:61:b3:bc:b1:30:9a:bb:67:0b:8d:81:1b:7f:28:
a7:3b:f2:f1:f3:ed:0d:94:82:a8:63:3d:17:47:c8:
24:3f:a1:ba:c2:a4:c1:ea:8c:e1:e2:a7:23:15:ef:
23:32:2c:ed:99:12:53:46:df:5a:ad:e4:b6:79:cd:
23:c0:14:99:77:be:e7:94:cf:fd:9d:0d:23:90:0a:
4c:84:6f:cb:a0:d9:87:d9:24:dd:8d:2f:b2:96:80:
dc:53:4c:d5:9f:65:e8:68:9d:b7:bc:b2:b6:ba:e1:
0c:ec:78:2a:63:49:fa:9a:97:9d:39:8b:f3:ec:d8:
14:33:99:71:e4:41:b2:c7:be:d6:b0:7f:69:ea:b3:
cc:cc:f7:21:2f:1e:1e:e2:85:36:8f:b2:80:4d:44:
f2:a8:5a:dc:eb:5e:49:de:5c:50:65:29:a8:29:5d:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FF:82:44:2D:78:3A:FB:46:8E:15:28:54:05:E4:F4:D2:6C:CE:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f18356f8-5761-3eb2-8500-a4641020dd1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:05:43:49:f3:7d:fc:ef:f5:0e:44:b2:fe:6d:6f:9d:c0:2f:
1a:a3:21:56:91:6a:c3:76:58:a3:67:23:d2:f6:aa:0f:68:c0:
68:d2:ce:c5:76:46:b3:ec:e1:23:4c:f8:64:9b:d2:c8:43:e7:
7a:1a:f8:04:04:22:b4:85:73:84:2f:40:b8:95:53:9e:75:1d:
8c:de:35:9a:8c:4d:08:8c:06:46:72:e5:61:f2:65:e5:05:c1:
2e:5b:92:d8:d1:a2:32:97:ea:5c:43:a9:cf:f4:cb:e9:5f:43:
b6:ab:80:2e:17:67:fe:2e:0d:33:a4:45:66:d8:ff:68:a7:b3:
fe:32:f3:0b:86:41:44:c9:0d:a6:73:12:70:e3:ba:23:aa:f4:
6c:f1:61:ca:3b:6f:ee:f7:99:30:23:04:8a:c7:88:20:ad:17:
13:7e:d4:bd:fa:ae:0a:a6:06:3c:a0:29:8d:4a:f5:94:8f:46:
34:28:a9:da:18:a3:bc:30:66:62:19:4a:56:a7:65:ea:07:02:
44:25:e7:fc:f4:2d:7c:28:9b:2e:aa:e5:54:84:58:60:4c:87:
72:34:4d:44:bc:21:8d:77:d3:0f:2e:8d:da:7d:df:5c:b3:8b:
6a:7f:a3:b0:cf:aa:79:ad:a5:4b:c9:83:f8:c0:5a:e4:d7:f0:
7f:4e:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:34 2025 by rpki-client