Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fc0b197-9414-3cd6-aa6e-c3c749fac672.roa
File: 1fc0b197-9414-3cd6-aa6e-c3c749fac672.roa (raw, json)
Hash identifier: b+NfSqgxMd9tl5GS8d1K5O9c8iK+DHTnrGyuhRdiHas=
Subject key identifier: 1C:5C:0A:AF:BE:8B:CF:99:98:BC:45:2C:9E:C9:80:34:B4:BE:79:A9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C558A4F878C95262A0E92C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fc0b197-9414-3cd6-aa6e-c3c749fac672.roa
Signing time: Tue 04 Feb 2025 12:39:44 +0000
ROA not before: Tue 04 Feb 2025 12:39:44 +0000
ROA not after: Mon 05 May 2025 11:39:44 +0000
asID: 30036
IP address blocks: 173.23.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:a4:f8:78:c9:52:62:a0:e9:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:39:44 2025 GMT
Not After : May 5 11:39:44 2025 GMT
Subject: CN=6d1dc796-501d-4da9-a2e6-b1af48421e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:6b:6c:7b:0a:b1:ea:99:e5:53:7a:27:79:
70:8c:25:b4:d3:c2:1c:c9:61:11:3f:90:c0:95:ff:
07:84:46:6a:e7:86:fb:cd:47:29:e1:92:7d:d8:e2:
63:33:89:e8:07:81:b6:84:18:c9:96:58:97:c5:72:
cf:a4:3d:3d:a0:0c:d1:a8:9f:c4:ff:ba:c0:02:66:
1f:59:87:a9:9a:a6:44:c3:54:f2:e9:11:a7:75:b3:
bc:90:10:63:7d:b9:cd:ac:5e:d2:41:48:fd:3e:7c:
42:00:70:4e:65:31:55:01:5d:97:96:26:68:64:c7:
31:10:3b:cf:4f:5b:c6:a6:ad:e9:30:5e:4b:6a:3f:
9a:ea:a8:e8:e8:69:dd:b1:78:6e:3b:10:f9:7c:33:
96:a6:44:30:17:d8:53:28:da:fd:56:d8:1b:bf:2f:
1d:d1:30:28:6e:f0:f0:02:d1:b5:9e:27:9d:ce:43:
40:de:eb:c1:c5:57:a8:db:fe:63:b0:9f:63:83:c1:
35:c6:32:94:f0:31:0d:1e:66:bb:9b:65:42:8e:91:
48:68:2b:b8:7f:ea:27:14:4b:18:51:cd:5b:c1:00:
a7:76:43:9b:37:31:5e:cd:3f:23:24:43:43:0e:43:
9e:8a:53:bb:4b:31:e1:a2:0e:16:27:97:b2:e2:69:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5C:0A:AF:BE:8B:CF:99:98:BC:45:2C:9E:C9:80:34:B4:BE:79:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fc0b197-9414-3cd6-aa6e-c3c749fac672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:70:34:13:3c:37:d8:6d:94:c4:af:b1:d6:4f:56:2b:f6:8e:
33:f1:4e:2d:bc:2f:0a:96:bf:1a:c7:aa:aa:0f:79:69:46:d4:
2b:29:d9:7f:48:13:00:42:44:bb:57:ab:7a:a5:52:e8:02:a1:
48:58:4d:6f:4d:fe:9a:c2:20:37:5b:00:28:c2:43:7e:40:9f:
62:aa:01:4d:6b:00:c6:b6:9c:f4:fd:93:3b:75:6a:5e:0f:35:
1b:b0:a4:3f:60:e3:85:1e:41:81:bc:e1:ba:91:16:09:51:e7:
d1:cd:1a:4c:0e:0f:0b:1c:96:ef:61:1d:18:2b:7c:7a:ee:b0:
31:9e:1e:c2:92:96:a8:d7:ff:46:2b:8c:7b:25:da:3c:15:97:
3a:ed:9c:6a:ef:9e:4c:c9:87:9d:5c:53:53:08:0a:d4:5b:d9:
7f:d8:95:ac:79:41:6c:32:f9:68:be:22:94:fc:fd:f5:1d:00:
0a:d8:a5:f3:01:dd:43:e0:8c:88:fa:44:16:6b:d5:8f:1d:a5:
8d:ac:19:37:a6:5b:bc:7e:0d:9c:ce:b7:8f:52:70:d3:2f:99:
41:62:be:64:6b:3a:9c:0f:bd:00:fc:8e:51:5b:90:3a:56:c7:
84:40:d9:f7:6c:47:fd:6d:9d:62:ee:24:ef:f6:06:02:fc:c9:
54:64:b0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:47 2025 by rpki-client