Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2aec3910-9740-320c-8366-632ec405b339.roa
File: 2aec3910-9740-320c-8366-632ec405b339.roa (raw, json)
Hash identifier: AfkWw4QQs/urJiRBlhqzW3U5WfRneisC5lMW+jwufvU=
Subject key identifier: 84:71:EC:89:CC:24:6F:24:D8:97:CE:3E:BE:62:62:12:A9:52:8D:93
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2633467BD415BBDC7010F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2aec3910-9740-320c-8366-632ec405b339.roa
Signing time: Mon 03 Feb 2025 11:13:36 +0000
ROA not before: Mon 03 Feb 2025 11:13:36 +0000
ROA not after: Sun 04 May 2025 10:13:36 +0000
asID: 30036
IP address blocks: 173.20.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:63:34:67:bd:41:5b:bd:c7:01:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:13:36 2025 GMT
Not After : May 4 10:13:36 2025 GMT
Subject: CN=441c1e1a-a970-4c8f-96d1-9eb203c37d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:33:18:70:88:94:a3:29:17:28:ea:cd:2a:
51:62:74:dc:45:a2:9b:97:1d:63:99:d3:77:a0:10:
7d:1a:9b:51:cc:ca:8f:6d:90:40:65:e5:e7:bc:96:
ce:4b:78:da:18:c0:de:a6:fa:2f:f4:a3:9b:9a:fa:
22:8e:b1:7f:77:bd:c2:62:3f:3b:0f:59:8d:cf:00:
f0:8a:b2:88:b3:6b:a5:e7:25:47:b9:1e:93:5b:7c:
37:6c:f8:dd:74:fa:e7:5d:a8:8e:bc:02:bc:17:f3:
d7:aa:9a:7f:d9:e7:9d:cd:f7:c5:c2:43:0b:35:e0:
92:66:72:29:0d:24:ca:59:81:cb:7b:f2:4a:1e:e3:
a7:a3:8b:b7:dc:c4:a0:ea:34:76:27:8c:2a:19:cc:
7f:a5:c4:c5:41:f3:ec:05:f3:f2:75:10:d0:ff:46:
30:4f:61:7f:b3:09:29:ce:14:59:ca:ec:a2:4b:d1:
8b:1a:60:02:12:f9:35:14:e9:ef:bb:f1:39:c5:c0:
ab:a8:61:25:4f:7c:5a:e7:f2:77:db:f8:48:0a:00:
6a:ed:ca:31:d8:a8:9c:ed:8f:6a:39:56:26:1f:11:
82:6d:b8:04:ea:04:c7:5a:1c:91:e3:77:aa:b2:37:
78:77:fa:00:bf:d1:46:5f:19:6d:e9:e8:30:7d:b2:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:71:EC:89:CC:24:6F:24:D8:97:CE:3E:BE:62:62:12:A9:52:8D:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2aec3910-9740-320c-8366-632ec405b339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:83:88:e6:26:14:f0:b0:1c:4a:ae:cc:fc:ed:96:85:d8:9d:
00:e1:de:78:96:33:0b:f1:66:bf:c5:a6:76:c2:fb:f2:85:2e:
db:bc:49:49:f1:02:8f:b0:fe:76:e8:bf:09:30:00:fe:81:68:
39:e0:6e:11:56:bf:b7:aa:f1:36:20:0a:a3:67:04:a3:15:97:
b2:9b:82:c3:c9:b6:16:c4:e5:ff:55:50:1a:aa:a6:05:e1:5e:
9b:64:68:6f:03:3a:ca:ab:fc:8f:c7:d2:6c:a8:45:c7:41:37:
f9:f5:33:f1:f0:b2:5d:02:ec:bd:f2:4d:98:0a:9f:9b:14:e6:
98:5d:3a:b9:a2:5d:6c:6f:85:e5:82:29:31:56:f6:e6:a7:36:
ab:77:55:c7:a3:e9:38:8e:5d:c3:58:9b:28:18:a1:84:03:5e:
6a:24:6c:54:65:0b:b0:8f:6a:d4:92:0f:02:90:09:30:7e:3b:
38:eb:6b:c6:c9:62:50:d5:a0:99:8e:27:4e:a2:b5:68:a7:9e:
10:19:5f:ee:c8:2c:77:1a:8e:a8:86:a8:3e:31:e6:ea:f9:eb:
37:0f:cb:af:91:9f:1c:83:81:20:b8:e3:7a:d9:89:cf:f4:48:
e6:cd:2b:29:43:ec:33:06:79:1e:18:22:8d:4a:75:1a:5f:bf:
1d:70:57:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:49 2025 by rpki-client