Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/274c9388-009e-3a73-8ce3-ff070b4ee3ea.roa
File: 274c9388-009e-3a73-8ce3-ff070b4ee3ea.roa (raw, json)
Hash identifier: Np8Ccka/WNfm/gBpExztpM6XLLOUFn3t0lpD+SeXxPU=
Subject key identifier: 6C:4F:4E:D1:8B:02:4A:C7:60:00:A5:0D:3B:73:8A:CA:FB:D4:88:A1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B73677943FB6995C6F130BC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/274c9388-009e-3a73-8ce3-ff070b4ee3ea.roa
Signing time: Thu 30 Jan 2025 11:09:34 +0000
ROA not before: Thu 30 Jan 2025 11:09:34 +0000
ROA not after: Wed 30 Apr 2025 10:09:34 +0000
asID: 30036
IP address blocks: 173.29.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:36:77:94:3f:b6:99:5c:6f:13:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:09:34 2025 GMT
Not After : Apr 30 10:09:34 2025 GMT
Subject: CN=f77807b9-8edd-4923-926f-4d00ca5a9549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:ec:0a:d9:d5:0a:77:2f:50:bf:a1:58:87:
bd:99:46:ed:5e:e0:0b:c1:ae:b0:dd:7b:54:ec:18:
d3:94:70:21:0f:af:a4:1f:2d:16:43:37:3b:94:fb:
6b:b4:9b:9f:08:c4:41:4d:c1:06:3b:d9:b6:31:5a:
df:4e:47:b5:68:a4:df:2b:fe:02:2b:dc:de:2f:ea:
3b:35:4b:66:3e:16:86:05:0c:66:69:ab:cd:4f:ff:
f8:e1:39:ab:ff:8a:78:0b:fc:42:0a:c4:17:c2:5a:
d2:bb:62:82:e4:46:a0:02:a7:65:a1:8c:19:1e:37:
54:64:85:5b:d5:72:c7:75:4e:5c:41:17:fb:42:b1:
25:7a:64:03:7e:01:b5:81:f4:8f:10:b5:fd:43:bd:
e1:ea:72:67:cd:7c:ea:6e:94:27:c0:88:70:30:60:
60:de:fb:e3:c5:23:3e:59:76:c0:25:4c:dd:d0:34:
4a:d8:73:a6:7f:cf:0e:48:36:4c:bc:2c:53:d9:59:
8b:b9:7f:d6:27:72:5c:9b:04:9b:a0:bb:50:85:96:
f8:52:b7:34:2b:90:a8:e9:cf:51:b3:5e:8f:c6:52:
df:3a:bd:68:88:12:6f:77:05:5f:73:e5:58:1a:b1:
92:eb:02:93:fc:1b:55:86:a6:07:1c:e8:02:c7:d9:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4F:4E:D1:8B:02:4A:C7:60:00:A5:0D:3B:73:8A:CA:FB:D4:88:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/274c9388-009e-3a73-8ce3-ff070b4ee3ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:7d:92:8b:9d:a7:2c:17:80:be:e3:17:02:6e:b6:c1:68:9f:
5c:b0:46:31:2d:0e:04:3b:f9:66:8c:3f:68:45:7f:3b:e9:5e:
24:d9:90:aa:19:c9:d5:da:37:e3:d9:de:9b:9a:ee:e2:36:7e:
f4:f7:a6:31:fd:32:ba:3a:8a:de:84:cd:73:82:37:86:3f:a9:
40:de:22:bb:2c:6a:23:d3:c0:f6:99:6d:47:ff:93:53:ac:6c:
84:0c:b3:26:6a:15:82:a5:86:cf:ba:19:55:48:8c:4d:f5:ed:
37:00:54:2a:56:90:35:ec:3a:26:2b:28:22:e7:62:f9:d4:95:
f6:83:a3:e7:08:db:13:13:74:9d:e0:8b:39:f8:17:ff:0b:2b:
4e:55:17:dd:58:41:da:de:68:f7:b7:f2:f0:e5:f7:1d:b8:da:
5f:b4:cd:12:6a:45:48:25:4a:c7:6c:3f:d2:3b:eb:97:be:88:
d6:7b:5e:78:06:e7:75:63:47:2a:41:93:64:94:e7:0b:cd:a6:
52:f8:9e:f9:6d:51:6f:4e:e4:58:bd:aa:1e:d3:20:bd:94:be:
22:e3:4d:7c:d9:46:86:6d:ed:2c:7b:86:18:ad:a1:95:f3:81:
e9:8c:1f:a5:66:32:be:c4:31:72:b4:20:13:62:cf:4c:b4:b7:
0a:aa:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:26 2025 by rpki-client