Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
File: 25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa (raw, json)
Hash identifier: LowRoFmGm+ieZziGZr2ACaU8aCMwWRb2VSgtdZZs3nc=
Subject key identifier: A8:67:25:AD:D7:A9:15:11:32:00:91:45:ED:BC:7B:67:F7:16:35:FA
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C533A7C70235ED5EE5B23D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
Signing time: Tue 04 Feb 2025 11:25:13 +0000
ROA not before: Tue 04 Feb 2025 11:25:13 +0000
ROA not after: Mon 05 May 2025 10:25:13 +0000
asID: 30036
IP address blocks: 173.23.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:33:a7:c7:02:35:ed:5e:e5:b2:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:25:13 2025 GMT
Not After : May 5 10:25:13 2025 GMT
Subject: CN=a7fd6bc4-988f-4ead-b177-168b8b181a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:cf:1e:74:76:bb:08:16:c7:1f:05:af:bf:
94:5f:44:cb:08:2e:7c:f8:cb:61:ea:f2:bb:dc:a6:
60:ec:b2:cf:a2:64:6f:54:33:d0:a4:97:ff:c6:09:
14:02:89:2a:e8:77:6a:e2:7b:96:0d:e9:ab:98:7a:
a5:64:14:be:7e:d7:1b:28:31:d4:1e:7b:2c:4b:00:
7c:0f:28:a7:fc:ef:22:bd:c4:a4:4a:84:c5:b3:40:
e9:ca:1f:ae:16:5a:00:7f:15:3f:e4:55:09:5a:f7:
a2:b7:b2:93:1b:53:ef:bc:d0:59:9f:cb:0d:4d:e3:
98:cb:24:68:61:91:80:ae:bf:c6:bd:71:62:6b:37:
f3:cd:98:12:f3:24:06:9b:3f:f6:04:d1:46:bf:39:
35:01:d9:e2:b9:a6:7b:ad:5a:6f:fa:ea:44:ce:3a:
2f:0e:dd:88:6f:02:5a:0b:07:f8:c8:68:f8:98:d5:
51:15:6a:35:25:42:c5:6d:a1:f0:58:2f:0e:47:d8:
78:7d:49:b1:c3:9a:01:bf:a5:78:38:16:96:fc:7c:
a3:e2:f6:be:3a:bc:b0:90:0c:56:d3:61:10:d8:83:
a6:9e:6b:af:87:e4:76:4b:ae:ab:c8:2a:0f:5b:e8:
ea:b3:80:26:da:f3:dc:f1:9c:d2:3f:11:79:36:b7:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:67:25:AD:D7:A9:15:11:32:00:91:45:ED:BC:7B:67:F7:16:35:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:1a:2a:d0:d3:64:9e:85:78:68:4c:4d:50:0e:c4:1c:67:5a:
91:79:bf:fc:7c:6a:6f:af:3d:4b:1c:15:3a:10:2b:b6:0f:32:
e0:ab:09:83:f9:b8:5c:aa:3c:7c:f7:cc:53:cb:ee:e5:e9:2e:
0b:07:96:19:52:4d:8a:a0:2c:b7:57:cb:89:3b:74:9e:cb:5b:
27:61:0b:10:b6:46:d1:8a:13:1c:42:30:f9:4c:e5:c0:71:e7:
5b:a2:df:3b:5e:89:1e:0d:c6:88:03:97:59:e4:30:ca:00:4f:
1c:98:d5:11:1f:89:96:4c:84:23:26:e4:c4:cb:a9:67:67:87:
07:4f:43:3f:d2:e9:8d:f9:24:fc:27:67:43:36:00:8b:c6:67:
ac:ac:d0:e7:4a:99:16:62:53:9c:06:de:0d:03:d1:d9:1f:92:
11:e7:4f:63:e8:48:76:d3:2d:3f:0b:cc:66:be:8c:f1:b5:6b:
6a:7f:2c:ec:db:bb:40:23:8b:94:9a:bb:97:90:bf:6b:d1:b7:
0e:8d:28:78:48:27:a0:78:0a:92:d6:8e:94:b3:d9:15:2e:96:
13:1a:e0:1c:11:9b:39:2d:dc:e9:2f:c3:e9:f2:8c:ed:c1:e8:
bc:28:9b:0f:f0:04:60:3b:17:52:e2:10:60:53:76:09:79:b2:
e8:6d:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:13 2025 by rpki-client