Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa
File: 1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa (raw, json)
Hash identifier: Z1MxTvDQzpP2OOSxpVo/lYFzoWcEAz1nEH9sZSscbE8=
Subject key identifier: C9:E3:70:0C:50:89:79:EA:78:50:E3:B6:12:DA:82:DF:29:27:9A:F9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584898D61F169077B765E58049E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 7029
IP address blocks: 173.186.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:1f:16:90:77:b7:65:e5:80:49:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=d819df88-ead0-4677-bf6a-33319fc5e9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:5b:46:0d:4f:69:09:09:dc:47:11:35:a4:
2c:63:73:ce:63:68:29:4b:4d:ad:2e:04:5b:9e:b1:
24:69:96:51:da:b8:67:ef:74:a1:22:60:a1:8e:f4:
29:82:d2:c1:17:bd:a8:57:bb:9d:ee:31:4a:fa:7d:
89:49:31:3f:86:d2:78:9f:30:fd:81:5d:7e:5a:86:
0a:4b:e4:10:5e:d6:ec:61:66:5e:91:02:82:94:c0:
d4:96:34:b9:8c:a7:44:7a:f0:1c:04:46:12:0b:09:
3d:1a:66:cc:a2:d9:26:57:40:6c:4f:f0:dc:fb:df:
fa:8a:9f:11:d7:4f:e0:f4:dd:41:26:bb:cd:91:8a:
03:34:99:5c:bc:92:ad:2d:56:7a:f9:1c:1f:47:36:
4e:c2:8b:b6:b8:aa:83:d8:70:72:b7:57:40:7b:5c:
39:b0:7f:81:28:f9:f7:8a:7c:1f:2d:15:27:a3:b2:
36:cf:c6:38:f2:ca:a3:68:2b:27:6c:91:08:12:c1:
e8:62:26:52:66:8e:29:ca:bb:ab:b7:c9:d0:fe:18:
30:9e:e8:fd:45:b3:d4:34:23:f8:b6:61:97:a9:ab:
57:a1:63:0d:df:07:04:39:b5:1c:0c:cd:3f:dd:07:
26:f2:4a:e9:4b:af:6b:97:a4:c6:94:2b:81:8d:e2:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E3:70:0C:50:89:79:EA:78:50:E3:B6:12:DA:82:DF:29:27:9A:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:4b:f5:8f:94:96:f1:44:f5:05:7a:cf:42:22:f5:80:04:b5:
27:67:d2:a7:2c:aa:d2:fa:0a:7b:23:13:61:0e:35:12:a5:32:
af:ad:1e:02:70:84:e2:82:aa:f8:25:4d:a1:bc:2b:ed:69:fc:
46:07:c6:d7:75:81:ed:cb:ec:be:64:42:82:42:c6:e8:ff:15:
03:36:c0:7f:ef:3e:f3:2f:9f:84:e0:4d:3d:e8:28:4d:5a:4a:
54:cc:0d:7b:69:2f:64:d9:1d:a7:60:d8:4f:ff:60:d7:e1:e8:
77:77:35:83:e2:de:80:6a:65:76:33:02:7c:09:6e:20:34:fe:
e2:c1:5e:b1:8d:d9:74:11:8a:b0:b3:6b:d4:60:2f:6c:c5:c9:
60:fc:46:24:fa:78:82:bb:f9:c4:c2:99:f1:14:5b:f1:a5:7d:
b6:d5:ad:1f:3d:7b:fd:e7:44:d5:85:1b:45:36:3f:0b:06:a9:
98:fa:6a:89:14:3f:ee:7f:05:85:85:ed:bc:85:99:8f:5e:f0:
9f:6c:45:8b:68:ac:c7:4f:77:5c:34:8f:2c:01:9b:44:2a:aa:
a8:4f:ec:0e:04:6d:e8:8e:9b:3d:89:4a:cf:e3:dd:dc:e4:5c:
69:54:29:ad:7c:46:46:60:e4:6c:1a:d2:56:89:e5:d8:16:fa:
9c:11:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:29 2025 by rpki-client