Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa
File: a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa (raw, json)
Hash identifier: Vo4QfSe8pqU4rbW0d5zVAxJhd1oJ1oMpSsKps8o6PB8=
Subject key identifier: E7:54:44:D3:9C:21:41:0B:DF:1A:92:05:E5:A9:02:D9:5C:84:58:BC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C557F9DFC3F237E489F43580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa
Signing time: Tue 04 Feb 2025 12:38:24 +0000
ROA not before: Tue 04 Feb 2025 12:38:24 +0000
ROA not after: Mon 05 May 2025 11:38:24 +0000
asID: 30036
IP address blocks: 173.24.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:57:f9:df:c3:f2:37:e4:89:f4:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:38:24 2025 GMT
Not After : May 5 11:38:24 2025 GMT
Subject: CN=b8238252-1c3f-48e0-bec6-e38251803d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:ec:64:65:b4:02:fb:8a:be:b1:1d:e6:51:
cc:43:20:9a:e5:14:0a:8d:0e:b7:a5:25:c6:72:96:
4e:2d:88:38:3c:3a:5c:46:ce:49:c5:93:19:c5:51:
d9:6d:25:fd:53:74:c0:a8:22:fa:11:d9:a2:44:ec:
a6:84:92:99:78:b7:ad:c2:0e:e2:b3:fe:75:16:29:
64:4a:1c:85:d2:e3:65:49:f1:13:1c:14:63:6d:34:
be:15:d2:bc:83:f0:74:5b:e9:cd:0f:b4:b7:39:9f:
f6:04:40:c5:17:e7:01:1c:3c:dd:7e:cc:93:2a:47:
90:83:7f:d8:2c:fe:1d:a9:fb:39:fa:47:b0:39:5c:
f6:13:19:97:c1:2d:59:12:7a:15:cc:1f:63:f9:61:
33:df:30:04:7f:64:57:34:2e:9a:94:69:41:a5:84:
43:b3:4a:9a:23:d2:23:2c:ca:4d:c1:91:58:8c:08:
7d:94:c4:65:7b:e1:78:d9:92:6d:40:03:4d:60:57:
75:8f:03:79:4f:07:82:a1:e9:89:54:ad:eb:fb:af:
b2:23:1b:f7:3a:60:33:ea:7b:2f:ea:1f:fc:58:2c:
c6:e1:1a:19:43:4f:ef:dd:f7:98:a5:a1:61:de:3a:
43:e3:3c:04:8f:37:54:f1:6e:96:d1:54:88:b5:bf:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:54:44:D3:9C:21:41:0B:DF:1A:92:05:E5:A9:02:D9:5C:84:58:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:05:08:87:fc:33:74:23:69:cb:58:6c:a9:f6:7a:8b:aa:7f:
ea:4b:8b:b5:d3:b1:61:c8:d7:5a:4b:af:03:32:dd:93:2c:e6:
5c:af:ea:dd:71:49:3e:f4:9d:2a:49:ee:d5:30:7a:d8:b4:f3:
6b:fc:01:92:40:59:8c:2b:ec:80:23:09:e6:4b:1c:ff:7a:36:
ec:03:a0:f4:34:07:0f:83:d6:2d:90:61:da:11:8d:5a:23:27:
94:c0:99:02:16:ae:76:bb:e9:71:66:39:e2:b5:a2:03:f0:da:
ea:22:85:92:d9:37:4f:bc:7e:48:16:78:b4:f9:95:e6:37:c0:
1a:ea:ba:ba:5a:ee:5c:0e:ed:85:8b:17:87:d1:fd:d4:15:71:
1c:93:e5:fa:2d:16:1e:71:41:47:6c:10:af:2f:88:11:0b:b4:
79:2b:53:12:d9:89:5a:c2:7f:e5:6c:aa:2a:3f:8d:56:51:13:
0e:22:53:48:3c:f7:ea:fb:aa:b1:41:b8:e5:1c:97:10:6b:3f:
89:d6:f1:09:a9:6f:e0:ba:8b:9c:cd:2b:e9:22:c4:78:01:18:
ce:da:53:0b:3e:b1:f1:d6:2b:ec:f0:cf:52:ee:b7:c3:74:ed:
91:a6:ec:2d:59:61:fe:68:05:ab:21:b6:bb:2b:c3:e4:d9:dd:
a2:8c:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:19 2025 by rpki-client on console.sobornost.net