Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa
File: a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa (raw, json)
Hash identifier: IVPRP4QjvqNpyHksbU1wAJiYl8/NLYct5wGJSfcFywA=
Subject key identifier: EB:48:FD:5A:9E:87:57:32:DA:2C:2A:3B:04:82:E3:99:41:48:C2:2A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F5FE4A15991E2CC0573FC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa
Signing time: Wed 05 Feb 2025 11:08:24 +0000
ROA not before: Wed 05 Feb 2025 11:08:24 +0000
ROA not after: Tue 06 May 2025 10:08:24 +0000
asID: 30036
IP address blocks: 173.17.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f5:fe:4a:15:99:1e:2c:c0:57:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:08:24 2025 GMT
Not After : May 6 10:08:24 2025 GMT
Subject: CN=b1e5ff9d-f04e-433c-8772-d2e28b4b038b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:2f:3e:10:89:6c:1a:bc:f8:d8:f1:c3:77:
7f:f6:d4:c9:56:e4:ba:df:0e:7b:15:16:32:0d:45:
ec:fc:ed:14:64:9b:35:05:52:6f:52:97:be:cc:4d:
d9:40:2d:14:db:2a:f1:0c:9f:45:06:58:db:0f:5d:
05:bb:b2:f4:e6:66:c0:a9:2a:4e:8d:11:6a:03:0b:
9d:6c:2d:b9:81:20:59:54:53:8f:9c:d2:51:39:30:
dd:5e:7b:8f:b9:ed:9e:91:42:72:17:43:c4:50:6c:
33:94:a0:9c:e1:5b:09:d9:82:bc:11:40:1e:4e:99:
b1:11:ec:c2:18:e9:6c:db:ee:9b:99:45:84:d7:8a:
1e:ed:64:48:da:89:73:36:10:da:e0:a9:a6:ba:c8:
42:5e:62:18:fc:5f:8f:9b:4f:29:cb:31:5e:04:47:
4d:ff:a0:52:fb:8c:57:59:c9:06:c5:d4:df:e2:ef:
d4:e2:f7:2a:d1:8d:68:7c:45:c9:a9:25:92:f3:7c:
df:32:f9:6d:6c:c9:ca:a0:68:82:8f:98:30:c9:48:
66:34:52:04:32:a3:20:55:9f:6a:7b:e2:66:9a:32:
0c:c4:2d:90:c3:d9:8d:ea:07:e2:c9:5e:00:4d:31:
c8:ce:fe:68:1e:64:e2:ed:7e:6f:b5:78:18:fa:9f:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:48:FD:5A:9E:87:57:32:DA:2C:2A:3B:04:82:E3:99:41:48:C2:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d2:dd:df:a9:14:15:e9:5a:84:7b:d1:c4:e7:7a:63:82:a7:
9f:0d:ee:60:81:d8:e1:46:b1:19:d8:e7:c0:4a:c0:71:11:5b:
19:a6:2d:8e:37:22:4c:7a:43:1e:fc:f0:f8:11:2b:53:be:b9:
d6:c1:b5:01:c7:9f:43:17:14:99:ea:c1:84:9b:5d:eb:f3:24:
35:2f:e1:7f:68:d1:b6:0d:ae:af:92:38:82:64:8e:87:2f:ff:
1c:61:69:80:0c:89:a5:b4:16:32:41:0f:b3:56:67:fa:c2:6c:
19:03:88:b5:67:9b:05:79:10:ac:ba:93:44:0a:1c:93:4e:04:
14:d4:d7:d7:20:0c:20:35:5b:25:0e:de:b8:75:12:72:d6:d6:
27:70:2a:0d:23:8f:31:9e:f6:e4:b1:ae:e0:09:c0:6c:41:c5:
e7:77:d0:6d:c4:1d:15:71:61:b5:50:24:aa:66:5f:cd:00:ae:
44:07:e6:fa:39:ab:c1:6e:8a:2f:71:fc:ea:a8:f8:42:43:96:
f2:6b:04:73:18:85:4c:d5:91:e2:a3:80:33:2c:e9:10:66:ad:
7e:fa:c3:2d:31:70:36:0b:5f:3f:f6:7f:0f:01:1f:98:42:5b:
bb:48:9a:e0:e3:ab:44:17:07:5e:01:dc:01:ad:cf:25:3f:18:
d0:65:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:19 2025 by rpki-client on console.sobornost.net