Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/095d4b72-4463-396f-adff-a4a67b26bc1e.roa
File: 095d4b72-4463-396f-adff-a4a67b26bc1e.roa (raw, json)
Hash identifier: wXuvgVxGSpxBNKJcY+FdgJa87I1w1pbqvjOUzs/YoLE=
Subject key identifier: FA:C3:96:70:80:78:5C:97:91:F5:2B:19:86:7D:A0:97:2B:D1:07:6B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F790240E43A4954F0C64A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/095d4b72-4463-396f-adff-a4a67b26bc1e.roa
Signing time: Wed 05 Feb 2025 11:11:33 +0000
ROA not before: Wed 05 Feb 2025 11:11:33 +0000
ROA not after: Tue 06 May 2025 10:11:33 +0000
asID: 30036
IP address blocks: 173.28.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:90:24:0e:43:a4:95:4f:0c:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:11:33 2025 GMT
Not After : May 6 10:11:33 2025 GMT
Subject: CN=1fa9d745-9053-481b-bd44-6b8198f29c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:87:02:83:b7:20:c6:80:85:fb:03:58:bb:
f6:bf:22:ae:bb:08:68:b9:42:88:db:43:27:e9:a3:
5f:f4:57:cb:35:5a:35:e5:df:e8:c3:38:26:72:de:
38:7b:42:5a:fc:e2:08:ae:1c:ba:8b:97:50:24:45:
3e:50:cf:b2:5c:0a:98:dc:d3:a6:d6:18:94:95:f2:
f9:d5:3a:88:76:ea:dc:5f:24:c8:95:83:e6:ed:0f:
2a:34:08:1e:0a:d9:21:6b:b6:26:bd:a7:dc:2c:a9:
fd:e5:6f:42:20:c6:52:2d:08:70:20:9f:5e:05:18:
14:f2:05:16:83:8a:d6:18:15:fd:62:b9:48:7e:60:
c1:da:5e:7e:6b:62:13:0d:bc:dd:f4:80:ad:9e:1f:
fb:f2:39:f9:79:43:30:93:40:bb:e8:3d:e3:16:d1:
94:c6:e3:5f:ed:d3:e7:22:22:05:40:f6:c8:3d:90:
f6:4d:56:c1:43:72:79:fc:fa:3f:18:c9:00:71:b2:
e2:2e:39:8c:1d:29:be:df:86:f1:2f:ab:26:72:4b:
49:d9:13:84:19:f9:29:de:31:a4:c8:68:17:5c:fe:
48:ad:0c:59:dd:e0:e6:56:fd:6b:14:e6:e9:4d:a9:
0a:75:5b:84:9e:2a:17:c3:af:22:d5:52:98:a4:3a:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:96:70:80:78:5C:97:91:F5:2B:19:86:7D:A0:97:2B:D1:07:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/095d4b72-4463-396f-adff-a4a67b26bc1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:58:3c:7c:73:95:6c:10:fc:7d:44:c7:e3:74:a4:ab:81:da:
c0:61:36:b6:8c:c8:b4:6b:b1:d7:89:82:8f:e3:76:3f:65:ed:
6f:f0:5f:f8:20:ae:4b:04:14:a8:90:cf:90:c1:d9:80:e1:63:
61:47:9a:15:24:d7:7b:e8:91:11:96:28:ca:af:3c:a9:f6:d9:
a7:fb:23:6d:00:22:49:12:e3:46:2e:7c:31:6d:80:01:35:51:
5e:ef:d1:b4:0c:db:7b:f2:d1:81:88:0b:76:fc:1b:fe:33:fe:
ff:61:c8:e2:c4:7f:0a:79:5f:7d:af:52:e6:08:3c:c1:29:ab:
a7:52:60:d0:c8:62:3b:33:cf:f5:fc:64:5a:17:04:a5:93:c3:
37:38:be:fe:85:50:8d:27:02:0d:1f:80:28:69:cd:4c:04:1a:
1b:2d:15:cb:2c:49:a0:e0:1a:ec:eb:58:cb:86:59:bc:9c:c3:
41:49:be:4e:35:56:38:9d:20:03:ca:06:42:e8:33:ad:41:57:
fd:2a:47:d7:e2:20:53:0e:59:3e:7b:b7:39:6e:03:c2:71:11:
5e:3c:6e:c3:76:87:a7:aa:c6:57:79:36:4d:81:1c:6f:72:84:
33:ac:3c:3c:49:8f:c2:e2:99:cb:f1:c6:20:5c:16:14:d6:ac:
c2:45:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:46 2025 by rpki-client