Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a30e73f-b979-3fcb-8a41-62ab5d6e3207.roa
File: 2a30e73f-b979-3fcb-8a41-62ab5d6e3207.roa (raw, json)
Hash identifier: +fBJ32OeImm8UzS55AoCv3DfJ+Wj1s+JBzT9LAncWK8=
Subject key identifier: 22:EA:2A:8B:47:FA:DB:A0:4D:D7:F0:E6:C2:76:24:66:C5:FB:95:4D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57E17D21EDD47E6482C5700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a30e73f-b979-3fcb-8a41-62ab5d6e3207.roa
Signing time: Tue 04 Feb 2025 13:55:12 +0000
ROA not before: Tue 04 Feb 2025 13:55:12 +0000
ROA not after: Mon 05 May 2025 12:55:12 +0000
asID: 30036
IP address blocks: 173.25.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7e:17:d2:1e:dd:47:e6:48:2c:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:55:12 2025 GMT
Not After : May 5 12:55:12 2025 GMT
Subject: CN=01b5e90a-d259-48f8-ae64-ace1d01a3367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bd:83:4e:c5:65:99:bf:78:cc:68:dc:a7:16:
8b:b2:a2:e4:49:d6:6a:63:8e:06:11:a5:ca:fe:87:
1a:df:65:7a:55:56:df:1e:98:f6:b8:f8:29:b2:ba:
35:7e:7c:f6:6d:48:dd:1e:1b:56:4e:6c:01:b0:a8:
a9:8a:e1:3f:61:ed:2e:02:0a:c9:80:8c:d6:81:63:
f2:00:03:a2:eb:a7:c3:e7:11:8e:60:5f:4b:db:96:
f0:91:3c:f1:0c:af:d8:16:7b:dc:f8:83:8b:0a:33:
c7:6e:88:7c:53:88:81:27:d6:9e:4d:8d:22:c0:fd:
d3:fd:dc:da:e8:d6:82:60:d3:7f:e1:76:e4:9e:ee:
f3:f3:42:98:7c:69:c1:9d:72:5b:3f:a2:7e:0a:de:
5a:ef:d0:25:19:db:be:4b:ee:ea:15:2f:cc:5a:a0:
90:5c:19:fc:00:f5:cf:8f:da:be:38:ee:26:1a:4c:
7e:8f:05:54:15:5d:cb:98:d7:62:0a:75:d5:45:4e:
0c:db:a3:12:e5:5f:c8:54:c7:1d:b4:5f:62:b1:f2:
03:c7:cd:4b:fc:46:49:84:56:11:4d:ed:3e:78:2f:
cb:d9:e3:91:7f:4f:ee:b3:fc:62:ea:38:2a:6a:07:
e3:de:3a:b8:a5:7d:37:e3:c8:2c:eb:8b:98:26:84:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:2A:8B:47:FA:DB:A0:4D:D7:F0:E6:C2:76:24:66:C5:FB:95:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a30e73f-b979-3fcb-8a41-62ab5d6e3207.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:9f:1a:66:7e:e0:fa:c8:15:13:3e:e1:e8:0c:36:1d:d3:8e:
7e:ff:51:be:5b:5e:76:d5:1d:4e:18:18:56:f6:8d:af:a9:d1:
56:d8:64:68:97:90:4a:75:69:f0:9e:38:e3:e5:40:a1:85:06:
7e:07:cf:8d:a9:d7:c7:11:f6:9e:b9:32:1c:64:80:72:8a:5d:
27:e7:36:7a:6e:72:b1:b6:b9:d2:fe:4a:0c:62:c9:3a:4d:bf:
30:b2:cc:c9:df:20:da:ff:12:6b:3f:73:50:60:eb:ad:f1:5b:
d6:92:a7:ba:32:4c:ee:44:44:1e:32:d7:8f:7b:77:cc:d0:00:
c9:b6:0f:a0:48:11:a8:41:30:d4:d9:2f:f5:9e:04:63:85:d2:
37:99:ce:2f:7f:7d:d9:35:cd:f3:f2:a1:38:a4:60:96:98:a1:
87:b4:70:a9:96:20:2a:4c:23:59:d9:b2:97:24:f6:a5:7e:d3:
34:b0:d7:2e:6e:74:cd:c2:6f:c8:30:15:f6:4f:91:4f:b4:6f:
d0:a7:55:f5:14:9c:84:b2:4e:b5:da:15:1c:a8:8a:c0:fc:7e:
0b:ee:81:19:da:2b:a8:85:53:75:d5:7f:ac:8b:e1:c5:cd:e9:
db:a7:4c:16:ab:f4:d5:e9:a2:9c:ea:b5:b1:68:69:fd:62:d2:
33:4f:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:10 2025 by rpki-client