Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29f2a17c-513f-314f-bffe-5b39b0ff383e.roa
File: 29f2a17c-513f-314f-bffe-5b39b0ff383e.roa (raw, json)
Hash identifier: oBItgUkoS57VJfI+TvHZc+VYPndL/R05oGWcvs/duM4=
Subject key identifier: E2:A0:E2:9E:A9:BC:94:93:4A:7B:16:AD:3D:71:1F:C6:A6:33:0E:2D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5774023332679005B21E380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29f2a17c-513f-314f-bffe-5b39b0ff383e.roa
Signing time: Tue 04 Feb 2025 13:41:24 +0000
ROA not before: Tue 04 Feb 2025 13:41:24 +0000
ROA not after: Mon 05 May 2025 12:41:24 +0000
asID: 30036
IP address blocks: 173.27.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:40:23:33:26:79:00:5b:21:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:41:24 2025 GMT
Not After : May 5 12:41:24 2025 GMT
Subject: CN=7b50f558-bc94-4b7e-a987-c17771c17e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:43:ae:8e:dd:81:d0:a8:28:65:1a:a4:e5:
3e:db:70:d5:52:5b:6e:85:c7:f0:72:ac:3e:54:a9:
9e:c1:dc:f2:f5:8f:d4:cf:34:19:b6:8b:38:20:1d:
d5:d7:32:7f:72:27:5c:0a:59:5f:19:c3:62:ca:de:
ad:4b:b9:75:19:c2:8b:4a:6f:5e:79:3d:17:4b:ed:
41:b5:28:f0:31:dc:eb:43:02:99:50:2a:8d:fe:1e:
de:4a:de:41:4c:30:ea:f1:55:24:c8:54:90:5e:8f:
11:33:79:46:f5:55:08:80:3e:21:25:29:9e:a4:7d:
3d:ce:55:96:ff:cf:92:c6:9d:16:ee:5e:5b:a2:a8:
64:f8:ff:62:23:65:ee:2a:76:bd:f1:27:28:b2:39:
2c:1d:63:d9:bf:e0:0c:5a:c5:97:5f:ce:14:f8:37:
ea:01:10:57:44:cf:e1:a7:cb:44:f7:3c:81:0b:53:
bd:2c:1f:bc:5f:37:7c:9c:05:a8:71:2b:62:78:a4:
df:73:1e:eb:a4:67:1a:9a:ce:0e:43:de:9b:e7:29:
90:cb:d9:f3:86:18:a3:8e:97:ff:bb:ae:ab:96:7c:
2a:5b:2f:6e:43:14:c4:66:55:30:5f:d7:2f:0e:28:
d8:4e:cd:74:31:40:c7:4e:35:95:47:db:80:14:66:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:E2:9E:A9:BC:94:93:4A:7B:16:AD:3D:71:1F:C6:A6:33:0E:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29f2a17c-513f-314f-bffe-5b39b0ff383e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.27.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:52:6c:f1:50:2a:29:cc:68:3a:cc:97:05:3a:81:10:09:11:
e8:16:78:2b:ea:3c:7a:2a:a7:1a:36:c1:a8:2b:14:7c:f1:1f:
50:7e:28:fc:d1:b5:68:ad:6e:a2:e1:ea:c0:8f:44:e9:99:ec:
68:a8:54:0c:0e:36:bb:b8:5b:fd:45:a3:2e:3f:1c:0c:e7:60:
16:bd:34:d8:89:78:7d:c3:cf:8c:8e:bc:8e:ba:7a:34:0e:13:
01:68:ec:4e:17:32:de:5f:9a:6b:fe:e5:c6:68:da:c6:06:18:
8b:ac:f0:be:67:51:73:f3:b7:c0:f7:90:49:27:9f:02:a4:a4:
fc:f5:48:8e:27:be:b2:44:ec:b0:36:0b:f4:56:2f:22:9b:68:
32:c9:59:8c:a3:65:51:b2:df:3d:80:39:df:ea:2c:4c:41:ef:
89:e2:81:f9:ab:66:36:f3:16:d3:2f:f0:31:5e:b5:77:6f:02:
61:0d:49:64:5f:73:ee:6e:9d:b8:08:6c:ca:a8:14:12:9a:61:
e0:dd:68:c2:28:91:16:bc:7f:05:75:c1:cc:a9:7b:b6:db:0b:
0a:aa:60:f6:de:93:b8:9d:88:ee:c5:8f:93:7c:f8:41:5f:57:
3b:25:2f:30:6b:d3:28:d2:55:c5:0f:1e:9e:e7:3f:76:d7:10:
fe:57:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:59 2025 by rpki-client