Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a230c6b-2917-388b-a676-14d9d9ea00e2.roa
File: 0a230c6b-2917-388b-a676-14d9d9ea00e2.roa (raw, json)
Hash identifier: 5PPx5FMBeekIo8d69xogbWMz7dLD1CNPvMkaX3o6joM=
Subject key identifier: 41:82:C2:9E:06:54:ED:CE:E8:17:54:19:6E:89:F9:09:06:D1:BC:7A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F69271AC7611BA7C244680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a230c6b-2917-388b-a676-14d9d9ea00e2.roa
Signing time: Wed 05 Feb 2025 11:09:34 +0000
ROA not before: Wed 05 Feb 2025 11:09:34 +0000
ROA not after: Tue 06 May 2025 10:09:34 +0000
asID: 30036
IP address blocks: 173.28.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f6:92:71:ac:76:11:ba:7c:24:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:09:34 2025 GMT
Not After : May 6 10:09:34 2025 GMT
Subject: CN=f1102f6f-aa04-46ef-83fb-352192210c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:c5:ae:94:27:52:d4:01:f1:cd:90:61:90:
ae:60:8a:8d:6d:d9:f5:4f:c7:fb:61:b7:66:4c:d2:
ac:8c:60:63:f6:0f:c9:fd:9a:b8:e0:3d:4e:ba:18:
8e:4c:4b:bf:25:ae:4f:ed:1c:a8:e7:d6:37:60:70:
74:5d:a8:d1:ee:79:94:16:3d:8f:c7:08:bf:1b:57:
81:39:b1:5e:f0:59:8d:5d:d4:8d:b3:08:79:60:dc:
0e:37:16:b2:20:65:28:f3:86:11:d8:d5:2b:77:73:
7d:31:ab:25:b0:0e:fb:1b:89:65:e6:a5:ad:98:55:
73:ca:7e:ec:da:42:6d:83:2e:f8:ca:9d:0b:d4:a6:
b9:6c:67:47:ba:d2:93:d6:76:73:4e:2e:3f:c4:ff:
cd:8c:1a:36:97:05:df:80:5d:0a:d7:7e:02:f5:5b:
cf:ce:e2:da:0a:be:a3:ec:a4:da:1e:fe:f1:16:62:
b4:eb:38:03:5d:43:33:de:be:7e:e6:0b:a8:99:d2:
67:fb:da:92:b8:5a:51:07:16:90:b9:38:87:a0:9c:
e7:f9:6a:07:8d:9e:92:eb:ea:be:20:ac:42:8a:1f:
56:e6:fc:d1:a3:94:aa:7c:de:f3:3d:cf:7b:5d:44:
fd:c0:3d:bd:81:bb:3d:e1:27:17:8d:c6:24:d7:8a:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:82:C2:9E:06:54:ED:CE:E8:17:54:19:6E:89:F9:09:06:D1:BC:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a230c6b-2917-388b-a676-14d9d9ea00e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:2f:f4:47:22:31:0e:41:2a:26:2f:9a:a4:50:85:53:2e:54:
2d:87:e9:69:28:63:64:3c:57:7d:3d:ed:75:76:92:e4:7a:f9:
40:af:52:6b:5b:36:db:79:1e:20:ac:8c:30:de:6c:8a:36:d8:
88:9b:83:21:7c:fb:3a:c1:67:d4:58:67:b8:c6:91:53:e9:6b:
35:dc:d1:f9:1b:21:83:ee:49:2f:f3:e1:d9:b8:86:84:48:b2:
b5:bd:f6:73:67:ac:8a:9e:30:ce:1c:ed:25:73:1d:79:af:d6:
ea:52:12:72:0a:61:d2:62:e3:b9:84:eb:13:1b:7a:89:4a:00:
9b:b0:11:dc:82:a1:ce:d9:13:45:5a:23:15:be:af:0b:9e:21:
92:a1:09:64:c5:12:7e:71:02:c7:a2:e2:03:51:4b:f2:92:d5:
e6:fd:ed:17:8d:64:5b:ca:11:b9:f6:51:4f:18:cc:9c:0e:05:
1b:5d:a8:e3:3f:44:c7:e0:d4:86:0b:67:2a:6d:24:8f:ab:6d:
7c:6d:df:59:2f:c5:08:e3:9a:93:f7:d1:b6:37:ac:b2:ea:ec:
8d:96:e5:c0:6d:ec:cd:d6:74:5b:9c:6f:ca:d9:db:0c:3c:87:
2d:31:af:fd:ac:ca:a6:56:06:f0:d8:0e:33:92:e2:e9:8b:b6:
11:7a:09:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:57 2025 by rpki-client