Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fc8568c-9942-31d2-b630-3116629f0d17.roa
File: 1fc8568c-9942-31d2-b630-3116629f0d17.roa (raw, json)
Hash identifier: ffnasz+KupFdsR4rf4tVysJYiVT/Pce5nE/JMIixo8M=
Subject key identifier: 05:89:AF:06:23:5F:67:98:7B:C1:55:36:41:AF:8D:AE:57:C0:DB:E6
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B73723569FEAF54582DA1480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fc8568c-9942-31d2-b630-3116629f0d17.roa
Signing time: Thu 30 Jan 2025 11:10:55 +0000
ROA not before: Thu 30 Jan 2025 11:10:55 +0000
ROA not after: Wed 30 Apr 2025 10:10:55 +0000
asID: 30036
IP address blocks: 173.29.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:23:56:9f:ea:f5:45:82:da:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:10:55 2025 GMT
Not After : Apr 30 10:10:55 2025 GMT
Subject: CN=88445dbd-193f-4026-93c4-a46ff4678f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:20:68:63:e9:8e:c5:4e:06:d5:f0:42:46:33:
1b:c4:1b:ee:d9:42:71:24:08:a0:8c:e1:66:99:ed:
73:31:5c:be:42:28:5c:db:56:be:b8:7f:50:2e:d0:
89:53:d5:34:07:dc:87:e0:0e:a5:11:3d:3c:a3:00:
0a:94:63:d8:0e:62:89:ec:06:a0:f2:df:f1:ec:53:
3e:83:c0:d4:75:af:95:b8:2b:04:a5:a7:85:83:39:
41:1f:32:f2:a7:cf:98:87:a8:e8:5d:03:44:d0:25:
6d:b8:3c:d4:2b:60:3b:da:f6:45:04:48:a3:73:d1:
07:32:6d:83:fb:c6:83:3b:ac:a7:ea:e1:09:c9:24:
42:fb:89:09:2b:3b:e4:db:5b:37:c1:82:1c:1d:2d:
00:2e:3e:6d:bf:e9:56:47:b9:6d:c1:ce:8c:48:c0:
e5:a8:18:a8:37:72:35:3f:b1:89:7a:dc:4c:0d:9f:
43:8c:d8:68:fa:bf:5e:55:62:4d:12:b9:89:57:36:
6b:b7:2d:fa:45:e8:d0:39:47:90:99:21:fb:0a:d7:
f3:0a:79:2e:38:b6:f3:88:50:bc:4a:15:b8:77:38:
1d:17:f7:f2:e0:cc:6b:ba:11:3a:de:06:99:56:19:
42:f3:d7:f5:03:a2:78:0b:d4:91:5b:6e:2a:19:ad:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:89:AF:06:23:5F:67:98:7B:C1:55:36:41:AF:8D:AE:57:C0:DB:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fc8568c-9942-31d2-b630-3116629f0d17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:ad:b8:ff:da:f0:70:5c:9f:87:ec:db:2c:21:bf:e4:46:3d:
5d:fc:d1:14:ff:f2:39:94:f3:45:20:a4:e3:4b:76:61:20:8e:
60:ac:c7:50:f8:29:4a:a8:b2:9c:ec:7a:43:64:cc:64:27:0e:
98:28:a8:4a:ac:43:66:1b:6b:05:db:31:dc:f3:ce:e9:e9:6d:
4b:5f:43:eb:11:00:45:63:e0:b0:e3:96:16:d3:c2:f9:4b:63:
b3:79:98:52:78:13:ac:15:e4:80:a4:23:b6:c5:1c:5c:6a:16:
9f:15:6d:a5:9a:67:f3:ff:48:d2:e3:63:fb:85:72:65:cf:a4:
70:db:db:02:79:82:c6:4e:15:94:b0:f2:f4:31:3e:07:80:24:
0b:e7:81:93:60:19:57:7c:92:cf:c3:96:cc:97:dc:e7:8f:08:
0f:0f:5b:c9:16:ff:8e:d0:27:4b:ea:ae:bd:8d:b3:c4:9f:c3:
7a:bf:2e:7d:b2:95:56:ce:28:96:6d:83:1e:ef:ce:ce:bc:eb:
3a:fe:fd:dd:4d:36:2d:f4:86:9f:70:2c:ba:03:ee:ce:f2:18:
b4:86:19:8b:c1:77:c2:09:80:05:17:9a:3c:86:0e:22:7c:d8:
bf:83:06:0d:28:43:bf:15:d0:06:4f:63:11:60:36:9a:1a:50:
fe:be:fb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:33 2025 by rpki-client