Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa
File: 0bf38020-85dc-33fa-8296-a789f8c70a70.roa (raw, json)
Hash identifier: yUbaGdD2rm1uK9fsZOkIUPo/l6n24+U9fm1pU9SaRLQ=
Subject key identifier: 4C:63:2B:2F:48:48:CD:52:A6:F0:F5:82:18:8B:23:D6:44:69:92:AC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7FDB602BDD1CC54D5B5DDC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa
Signing time: Wed 05 Feb 2025 11:23:57 +0000
ROA not before: Wed 05 Feb 2025 11:23:57 +0000
ROA not after: Tue 06 May 2025 10:23:57 +0000
asID: 30036
IP address blocks: 173.20.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fd:b6:02:bd:d1:cc:54:d5:b5:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:23:57 2025 GMT
Not After : May 6 10:23:57 2025 GMT
Subject: CN=20cec9b9-4c94-45cf-b9b4-d76625d046c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:c2:b8:62:f9:ed:94:6c:ba:4e:f7:7f:2b:
48:b9:25:12:da:dd:7b:f5:4c:05:59:b2:25:54:0d:
b2:44:85:49:32:fd:21:9f:bb:b0:67:47:1a:98:c5:
48:66:7f:fc:e2:b5:32:83:83:6a:22:39:91:68:1f:
c0:ea:fc:73:3c:c5:e3:2b:00:69:9e:fd:6c:08:9f:
d7:e4:1a:88:eb:fd:bf:db:10:95:ef:30:a3:c7:92:
f8:6f:7e:80:b0:a0:b1:be:17:63:3a:8d:20:1c:a9:
86:f8:42:a3:b5:5c:ce:93:a7:cb:49:13:1c:a9:ea:
b0:5d:1f:d2:d4:0c:63:5a:8a:4a:a6:8c:96:3d:48:
4d:f4:99:5e:18:d6:cb:a1:25:83:47:95:81:b7:07:
58:81:9f:e0:52:d8:44:d3:f8:fa:ad:ba:0e:31:93:
f3:5a:79:34:60:4a:9b:24:3c:23:d9:f5:92:35:ba:
f4:c2:fd:3b:e6:f7:68:03:a3:89:86:d4:87:31:0e:
73:a8:11:b5:19:c3:3e:99:e5:4d:8a:dd:73:61:5b:
3b:11:ec:7a:e1:d7:6e:f0:ce:2a:79:2d:1f:07:be:
1f:8d:77:54:63:58:13:38:dc:17:fe:e0:0b:bb:30:
cf:6d:69:7e:7d:87:e0:02:7c:02:1b:e6:2f:71:af:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:63:2B:2F:48:48:CD:52:A6:F0:F5:82:18:8B:23:D6:44:69:92:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:32:66:7b:0f:66:c0:76:05:9b:4c:0d:be:9c:30:31:0b:01:
28:d4:73:0f:b5:88:5c:5a:f7:85:e0:3e:3b:ed:2e:42:c5:d8:
33:e0:62:11:85:c8:f9:03:a1:31:53:eb:0c:f9:ad:ee:ad:e3:
36:f5:83:17:62:71:ea:9a:34:e4:91:a2:ed:f8:49:99:67:7c:
0f:fc:a9:c2:fe:c2:b7:1d:53:26:08:b1:70:ee:23:05:ce:cd:
94:38:19:e0:31:6f:40:46:2c:8c:16:b0:ea:2c:35:d6:ea:3a:
ab:b5:ca:84:f7:90:e9:1f:d3:16:6c:40:10:32:9f:1e:fb:ca:
9c:1b:55:79:33:67:8a:f9:cb:78:a3:d7:28:1e:c7:32:00:bd:
c6:43:67:77:3c:94:bf:18:aa:cd:40:f8:89:a2:8f:69:35:7e:
c8:9a:3a:82:8b:35:7e:ba:8e:22:cd:41:44:41:82:04:95:54:
8e:e6:10:b2:ca:05:82:c6:6a:4f:84:a3:d6:d6:5e:04:ca:70:
98:4d:d5:0a:5c:44:e6:74:19:8a:f2:8f:52:60:dc:64:67:c2:
47:ef:6c:6b:e1:a8:ed:a2:c9:71:99:68:4e:4f:66:66:a3:b9:
25:64:ec:5d:ce:06:73:2e:ee:eb:43:16:3b:84:4c:4f:4f:1c:
11:9e:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:10 2025 by rpki-client