Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa
File: ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa (raw, json)
Hash identifier: vkHvxYWlLPFkc6U+/wZQamU6YhqXQcAFESU6ayzy3xo=
Subject key identifier: 4E:FC:49:16:91:77:05:68:FB:07:2A:73:50:15:30:C3:38:71:F5:2D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C557986A13D59589F6B41AD0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa
Signing time: Tue 04 Feb 2025 12:37:38 +0000
ROA not before: Tue 04 Feb 2025 12:37:38 +0000
ROA not after: Mon 05 May 2025 11:37:38 +0000
asID: 30036
IP address blocks: 173.21.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:57:98:6a:13:d5:95:89:f6:b4:1a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:37:38 2025 GMT
Not After : May 5 11:37:38 2025 GMT
Subject: CN=cf912fd2-e323-4701-a9f1-edf646ec5b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:68:c0:a7:27:86:86:94:ad:ac:50:68:26:
e8:37:66:1c:2f:da:15:64:0d:93:af:59:23:98:fa:
b1:32:bf:1a:9c:27:f4:30:f7:f7:cf:60:08:e4:f2:
19:ca:69:c8:c9:1f:f5:61:7b:7a:bd:4e:65:71:29:
b3:6c:06:fd:b2:ad:7e:24:04:14:52:4d:1d:63:2c:
6b:02:8a:21:cb:ce:9b:72:f1:af:54:13:26:1a:9c:
69:f2:83:85:e0:11:c6:53:2e:66:d1:94:1a:38:17:
4c:24:fe:6f:88:46:18:6d:bf:7e:3a:59:08:6f:c5:
44:85:f3:36:c5:de:ff:1b:c2:05:b8:40:7a:e8:68:
fc:b5:eb:4d:f6:c1:0a:6d:69:c1:8a:d6:dc:a5:78:
a3:a7:da:66:60:10:ba:a6:01:1f:a3:91:b3:70:ec:
bc:ad:82:7d:af:88:95:a1:05:29:91:8e:cf:dd:20:
e4:99:60:14:b3:da:64:ff:27:9d:ba:a5:b7:da:84:
d9:95:39:5e:83:4f:ad:f8:3a:54:62:ae:54:b7:01:
bf:cf:52:66:eb:90:f4:cf:ce:96:23:f8:02:c1:c4:
87:e5:24:54:3e:6d:88:b3:f9:df:0a:16:18:8a:56:
7a:62:16:ce:7a:5d:fa:c6:4a:e1:1b:bd:0a:40:b1:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FC:49:16:91:77:05:68:FB:07:2A:73:50:15:30:C3:38:71:F5:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:46:0f:ba:9e:b7:1f:99:60:0c:d0:5a:77:8c:13:99:d6:5a:
d0:be:0d:6f:2c:92:69:cc:96:ac:63:56:37:33:a7:6b:ba:e8:
ba:92:6a:a1:90:e8:10:d2:21:86:96:fd:ab:4c:de:c4:d2:5a:
21:ab:cd:80:ff:8a:0c:3a:fa:b4:1d:2b:cc:a4:9e:10:29:58:
b4:ed:28:24:21:bf:de:80:f2:9c:8b:d1:3d:50:69:3f:21:95:
2e:a0:8c:38:e9:8e:04:14:fc:73:c2:3d:b3:33:80:af:c9:52:
cf:ea:23:16:9c:30:cc:4a:55:83:b2:6f:0c:e2:2e:5f:a0:fa:
88:0c:52:8f:e2:63:3e:74:06:42:fa:1f:da:3c:db:31:d2:65:
a8:76:d7:4e:c0:20:98:08:ec:d0:f5:e3:a0:81:89:cd:b8:94:
b6:f0:5b:1c:ed:a8:63:02:aa:4a:48:36:6c:71:f2:6a:36:66:
53:9d:ab:ea:d1:b1:33:40:81:68:8b:50:e8:f8:2b:69:01:04:
4f:0e:56:18:f8:5b:b8:e8:6f:aa:06:1b:25:cf:77:d7:58:3b:
77:66:70:48:16:5e:c2:e1:cb:62:b3:d9:b6:7a:4a:69:2a:65:
78:13:89:49:2b:9b:55:5e:e7:01:52:5a:7d:ae:2e:96:7b:c8:
ad:63:b9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:29 2025 by rpki-client