Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa
File: 088057c9-ae1d-339e-a8fd-ce606d190c40.roa (raw, json)
Hash identifier: tVSoO1kgrznU+Ub7azg3pQ9eEsgZ68HjMQUulR7+rhk=
Subject key identifier: 49:54:A5:A5:51:71:08:52:C9:E9:6B:86:CD:80:6B:29:01:3B:7C:13
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B7359D37E462A337335C7E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa
Signing time: Thu 30 Jan 2025 11:07:50 +0000
ROA not before: Thu 30 Jan 2025 11:07:50 +0000
ROA not after: Wed 30 Apr 2025 10:07:50 +0000
asID: 30036
IP address blocks: 173.17.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:35:9d:37:e4:62:a3:37:33:5c:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:07:50 2025 GMT
Not After : Apr 30 10:07:50 2025 GMT
Subject: CN=229cca8d-df9f-4549-a02f-e71131884b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:ba:f7:ab:1c:65:87:67:30:78:84:a2:2b:
62:1d:27:32:c4:61:0f:12:a4:99:09:84:3c:8c:27:
a6:bc:6b:d2:e8:2e:e2:79:37:8b:69:21:05:54:8b:
61:2a:d2:4b:3d:1f:49:b5:7a:a6:d1:4e:c7:b2:95:
ee:51:9a:a4:87:e3:2f:ea:3f:ee:e2:7c:c2:fb:d6:
23:9f:95:4c:70:d7:3a:20:51:c7:27:70:2b:7f:f0:
d1:e9:4a:03:cf:bf:24:20:dc:4d:bf:ba:31:b2:57:
c9:a7:f8:8c:aa:6a:f2:8e:68:6b:05:e6:f6:f7:a8:
18:dd:33:f6:2b:d7:0a:62:b1:5d:6a:b6:75:41:57:
0f:95:7a:07:9f:53:2c:d8:f5:b9:ec:32:f8:8c:a0:
5d:41:06:ce:61:4c:dc:9a:6f:9f:11:2f:be:c1:85:
f9:4d:1e:c6:da:52:46:81:ef:74:c6:5f:8f:de:30:
b6:24:2b:35:05:9c:b8:fc:9b:a7:fe:10:72:e1:34:
60:da:b6:9f:ad:7e:80:04:81:48:77:25:37:96:ab:
b5:4a:9f:4d:74:02:37:05:a6:1b:79:c1:eb:a8:f1:
1a:27:6d:b5:76:a9:00:ff:86:a5:d9:0d:45:f9:75:
ae:07:94:41:7f:81:26:71:81:31:0d:73:ac:ce:b1:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:A5:A5:51:71:08:52:C9:E9:6B:86:CD:80:6B:29:01:3B:7C:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:17:9a:db:7b:5c:b6:32:57:b4:a5:7d:d3:81:6f:a0:c5:1e:
58:1b:02:bd:ac:85:2f:b4:14:35:cb:ba:24:b5:e9:25:7e:6c:
ef:bb:5a:b7:65:2d:6d:82:fe:fb:2c:9a:44:a2:66:d3:98:1c:
e5:ab:94:99:d9:f9:be:02:fd:29:2d:d0:bf:bb:f3:c6:37:81:
c4:1b:ca:45:67:f2:fb:79:19:34:d9:4a:2f:d0:83:e0:2d:37:
a6:32:ce:14:0f:28:82:65:5c:2d:4c:95:49:ac:83:fb:5a:28:
9e:7f:9c:53:70:42:ac:5a:1f:4c:c2:48:96:fb:83:6f:ae:c1:
57:72:df:be:b4:22:b1:06:be:57:49:80:23:32:e8:8f:c8:70:
70:97:80:9c:07:9d:d9:0b:9e:05:99:c8:80:7c:e0:1a:44:73:
a5:51:c1:35:96:9b:a6:b7:92:1f:62:a9:7e:78:bb:7b:f1:31:
15:bb:18:23:d3:98:97:25:a0:0f:75:f0:cd:a6:38:8c:07:4f:
f7:61:de:6a:e9:3f:c4:a9:dd:f4:7a:84:0c:d9:e3:f9:7b:1a:
24:b5:80:78:7e:50:e3:1f:52:02:76:05:a6:92:6d:eb:2b:24:
fc:32:79:c2:d2:e6:45:d8:67:c4:b5:40:f6:29:90:93:d3:82:
3a:30:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:34 2025 by rpki-client