Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa
File: f1b86a0a-93ba-368e-9650-058271f8c2a3.roa (raw, json)
Hash identifier: kcoNKWpdy8amLpWB7QJUdK2NOG3qKqu/ybal9A4hWzY=
Subject key identifier: 86:EA:3C:67:62:FA:93:85:92:E2:0E:00:FF:1E:BC:DC:49:02:01:77
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57F2EECA1F25F6CDF238A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa
Signing time: Tue 04 Feb 2025 13:57:23 +0000
ROA not before: Tue 04 Feb 2025 13:57:23 +0000
ROA not after: Mon 05 May 2025 12:57:23 +0000
asID: 30036
IP address blocks: 173.22.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7f:2e:ec:a1:f2:5f:6c:df:23:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:57:23 2025 GMT
Not After : May 5 12:57:23 2025 GMT
Subject: CN=66c971e2-ba73-4fb7-80fd-878353057cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:10:dc:29:f9:d9:99:e6:f2:f3:f5:59:91:
3a:b5:52:6c:4e:a4:14:08:8b:ed:9a:f6:f2:b8:e7:
0a:ab:a6:bb:46:71:5a:87:78:ed:98:90:6b:03:24:
24:2b:02:b3:bb:b4:80:40:4e:51:9f:40:d4:ea:75:
16:fe:bb:68:34:b6:be:af:84:5c:9b:21:f3:78:f3:
5c:43:77:6a:ac:b5:1c:60:c5:c6:d6:97:15:bf:26:
1a:c5:f2:2f:6d:ef:aa:ab:1e:c6:5c:c6:82:e5:e7:
b6:7d:69:84:9b:76:2a:6f:b6:fe:f5:a7:a2:7f:48:
e9:ff:76:79:82:3b:2c:8a:1b:e3:1a:24:52:84:81:
77:9c:62:70:2c:ae:10:5f:0f:9d:9c:23:43:9a:1a:
14:36:78:d7:1b:f6:fe:12:17:2f:70:28:bf:0a:9e:
a8:d8:12:9e:25:dc:44:e1:da:31:e3:a3:53:86:24:
7a:ad:54:8f:e3:8d:74:80:64:ce:b1:11:24:b4:56:
8e:87:fd:6c:0f:6b:1d:39:3f:39:ba:7e:c9:82:d9:
ef:03:34:ce:bd:25:44:f0:45:a7:e1:88:b0:e2:f6:
3c:50:23:66:20:ee:0f:bd:47:5e:e4:1e:77:16:39:
6b:ad:64:53:48:45:75:40:c7:56:43:f5:07:d1:b8:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:3C:67:62:FA:93:85:92:E2:0E:00:FF:1E:BC:DC:49:02:01:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:b1:ea:ef:e8:ad:9e:d6:de:97:8b:f5:fc:22:36:7b:99:86:
ae:a8:71:ce:37:1b:35:e0:0d:4f:96:61:01:7c:8e:64:b3:da:
06:35:30:85:85:fa:78:a5:db:5a:d6:12:a1:b0:da:8d:59:96:
4f:cf:cd:7f:57:34:f5:97:c4:72:48:d0:53:90:19:92:b4:29:
97:d0:e9:25:84:73:0f:ce:c7:18:f8:4d:bf:d0:7a:92:f5:4c:
97:3c:2e:e0:7e:0b:78:d0:a7:e5:e7:36:20:e8:33:ff:d2:70:
f7:28:d9:27:a4:f6:f2:fe:b0:f8:5e:7a:86:5a:07:39:dc:c3:
35:95:29:68:ce:ef:f2:2c:44:55:b5:9c:85:c8:72:7d:71:a6:
18:8b:ea:a4:d7:d3:27:4e:1f:10:43:a3:77:e1:52:81:85:31:
7d:ab:37:f2:35:34:6c:e9:ee:24:7e:8f:bf:68:71:35:86:06:
77:12:a0:4c:c8:d5:00:06:c6:07:26:08:ec:95:67:04:c8:60:
0e:ce:16:03:51:f9:59:16:75:d6:32:ec:52:35:09:0c:7c:31:
1a:4f:49:87:e6:53:f4:3e:31:26:da:ec:6c:8e:ac:f1:88:6c:
a1:9f:8a:2c:7b:66:8f:ae:aa:e5:d6:db:e5:84:4c:82:d9:cd:
4d:a3:bb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:47 2025 by rpki-client