Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/074258e2-e43c-3767-aae5-1182a0f7de4d.roa
File: 074258e2-e43c-3767-aae5-1182a0f7de4d.roa (raw, json)
Hash identifier: 9ton/polp1x6fadlU9srb1zL+9Htk/7xVsge2gwopUc=
Subject key identifier: E7:FA:33:79:6D:FA:D1:FE:BC:DE:18:33:C3:9D:A2:11:15:EE:2E:D1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2637C588C9393C8CD052880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/074258e2-e43c-3767-aae5-1182a0f7de4d.roa
Signing time: Mon 03 Feb 2025 11:14:10 +0000
ROA not before: Mon 03 Feb 2025 11:14:10 +0000
ROA not after: Sun 04 May 2025 10:14:10 +0000
asID: 30036
IP address blocks: 173.23.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:63:7c:58:8c:93:93:c8:cd:05:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:14:10 2025 GMT
Not After : May 4 10:14:10 2025 GMT
Subject: CN=52d68cc0-bce2-4f97-b1ed-8a91be4850e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:65:e1:9a:c6:62:11:5c:24:14:d4:33:f0:
e0:5b:4b:21:cc:fa:d0:5f:8a:6b:48:0b:ca:c2:20:
01:44:3f:e7:9b:08:92:27:4a:4e:e7:d3:34:b4:a7:
77:49:c5:a9:56:7f:88:03:30:3f:d1:79:2b:75:5c:
dd:48:ab:be:c5:7d:30:4b:dc:01:91:2e:10:30:c3:
1a:41:7a:67:c7:95:ee:9c:d9:55:d6:fb:6b:a1:25:
3a:47:f0:93:1b:20:a5:7b:a1:1f:0e:ab:39:d9:10:
21:db:00:5d:18:b2:a0:ed:07:32:5f:4f:7f:6b:07:
96:0c:a3:92:20:6a:aa:ef:2f:45:bf:5c:c3:83:a5:
db:47:67:21:7b:5d:74:3a:f2:28:44:40:9a:d6:d8:
57:8f:c1:5c:0d:02:3e:be:e7:37:c5:6f:74:31:37:
54:15:87:60:4c:9a:e2:6d:03:d0:04:a7:6d:4a:6a:
b9:bb:41:b2:1d:3e:01:5a:42:ab:24:e9:fd:2a:a1:
1a:96:41:17:fd:05:b7:38:3d:f4:3a:cb:08:b8:76:
08:62:54:b7:40:7b:e1:eb:2a:91:17:69:d1:05:e8:
db:f4:af:3a:87:4f:fb:21:ab:b1:9a:5e:2b:a4:ce:
3d:42:d1:a3:1c:14:5b:1b:80:5c:24:95:d1:d7:ba:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FA:33:79:6D:FA:D1:FE:BC:DE:18:33:C3:9D:A2:11:15:EE:2E:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/074258e2-e43c-3767-aae5-1182a0f7de4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:e5:e5:17:3b:8a:83:e4:27:5b:5a:9f:2a:ee:c4:29:93:a2:
0b:ba:7b:53:77:83:b9:20:a3:4c:8a:d6:f3:e1:e6:27:5e:ef:
d9:49:65:a1:92:64:e3:28:07:d7:39:37:29:04:6a:6d:fa:ed:
9a:bf:7b:1d:76:a6:a2:c6:77:de:30:62:80:ef:a7:da:04:21:
1f:ad:9c:2e:b8:07:b1:d6:a2:23:4c:fa:28:ff:4e:37:80:62:
48:7a:68:a4:22:d8:d8:a0:8c:f8:c6:84:0c:9c:ce:a8:2a:b8:
09:ef:13:17:b0:f5:87:4c:d7:8c:2a:f0:e6:ea:56:6d:7a:f5:
e9:c1:d6:57:7c:5b:3e:5e:9d:c3:b7:69:8d:1e:a6:2c:ad:f1:
0c:95:fe:e4:4a:81:9f:1f:9f:f4:be:f7:d2:26:47:02:fd:e7:
76:db:0a:29:2f:22:2d:e7:62:44:55:c3:93:a7:40:59:bf:d4:
d1:a2:ec:57:5a:de:f5:fb:90:e2:8b:19:71:4c:61:aa:99:04:
39:52:94:e6:fe:f1:ab:4c:e3:26:d4:09:76:e7:40:b3:99:db:
6d:c3:8d:61:43:96:cf:22:be:7b:fc:39:a6:33:6a:41:1f:0c:
22:96:db:1d:99:cd:88:e5:2c:d4:cc:c3:e6:71:be:47:00:45:
bf:b6:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:17 2025 by rpki-client