Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa
File: 34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa (raw, json)
Hash identifier: 3CiTcbADUenVMOwE1Ll4YTeuFHx9eBeG+ePyc821U/w=
Subject key identifier: 96:EC:6A:DE:20:E7:CA:2C:75:90:62:C5:32:CB:EC:85:F5:AF:2D:87
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7FDF164DB3D94B73EC6194C
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa
Signing time: Wed 05 Feb 2025 11:24:25 +0000
ROA not before: Wed 05 Feb 2025 11:24:25 +0000
ROA not after: Tue 06 May 2025 10:24:25 +0000
asID: 30036
IP address blocks: 173.29.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fd:f1:64:db:3d:94:b7:3e:c6:19:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:24:25 2025 GMT
Not After : May 6 10:24:25 2025 GMT
Subject: CN=27d040ca-6136-4c95-8b80-59b015bc6b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:1d:2c:e9:77:12:33:8f:2b:b8:95:ed:6c:
c4:53:e1:d9:ed:a5:ec:8c:7d:34:22:42:b7:2e:6e:
e4:5b:96:00:6c:d2:b2:ed:cd:5c:0e:20:c5:d8:f5:
f0:67:34:cc:45:ec:a1:7e:13:01:13:34:d6:fe:f3:
b5:ea:f5:e8:7c:4c:ce:bd:e6:db:cf:49:bd:a5:c9:
71:38:e3:1a:a3:44:4a:b2:62:eb:34:4d:6b:bf:79:
45:af:a1:93:b7:ce:84:e2:42:49:1c:4c:44:c9:89:
31:25:1b:5c:8b:3d:5c:75:75:d2:b7:8b:8e:fb:cd:
5c:6e:d7:98:cb:74:bf:46:e3:38:2c:c7:7b:35:0c:
89:1f:35:e1:a6:88:85:ed:6d:ed:1e:27:f9:d9:8b:
6b:8a:8d:94:8b:87:a1:b2:cb:46:68:bc:07:c6:97:
af:a9:95:6d:2e:d9:f4:d4:20:ad:77:34:18:48:69:
1a:b3:fe:31:a6:87:9d:a4:44:0b:ed:fb:2f:20:5b:
2a:84:e9:f3:3c:f2:49:aa:6d:69:6c:71:e4:46:eb:
07:6b:67:e5:99:91:61:aa:0f:04:ca:80:53:23:a2:
03:57:64:4a:45:78:43:5b:5b:3c:e5:53:30:02:dc:
74:56:49:74:69:cc:ee:9d:a0:19:1b:08:76:d8:31:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:6A:DE:20:E7:CA:2C:75:90:62:C5:32:CB:EC:85:F5:AF:2D:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:bd:e2:ba:58:0a:06:4a:7a:2d:2d:5f:0c:6b:c2:c4:27:ce:
65:dd:35:e0:4f:57:5c:f7:67:37:d8:01:12:4e:06:bb:3d:e1:
08:aa:ea:0e:01:84:ec:98:fa:0a:54:b6:d8:3d:c5:f4:24:ee:
60:d0:c0:a2:e7:bc:e3:76:c9:e2:e9:f4:2c:73:41:d5:7a:6d:
1a:4f:b4:5f:80:40:e6:b9:02:de:25:34:30:8b:03:31:11:d3:
d3:bf:20:42:19:94:dd:b3:98:3e:80:fa:32:49:fb:1b:c4:bf:
9e:53:41:6e:5c:2d:d9:3f:a0:39:71:7e:c9:56:84:70:e6:dc:
e6:3c:f5:16:8c:25:90:ad:74:7d:f6:f6:3e:46:c0:9f:ce:1f:
c6:17:bb:4c:28:9e:e1:21:30:7e:a3:8f:6c:e3:03:a4:ab:49:
ad:44:ab:63:e6:b4:2a:b0:4d:f0:d6:ab:3f:46:ea:c5:94:32:
65:5a:67:da:a0:75:c6:53:51:9a:5f:bf:3f:57:db:26:31:ce:
19:e0:ce:38:1c:cf:65:38:28:ba:8c:3d:b3:f2:a9:90:26:cd:
33:bf:63:c0:08:4e:67:d8:e3:b7:5d:0e:14:a2:63:6a:3b:63:
60:d1:81:41:03:11:58:5c:33:6f:b0:70:e1:a1:32:49:7f:c4:
f1:e0:64:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:19 2025 by rpki-client