Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36a52c38-5924-3726-a5ee-bb01bcf87ba5.roa
File: 36a52c38-5924-3726-a5ee-bb01bcf87ba5.roa (raw, json)
Hash identifier: kxQnyguHjXVOa0gs4czVf55283JZT8HBX9pbQG+svLU=
Subject key identifier: 89:12:D0:54:8A:F4:69:CB:FE:30:4B:A1:C7:E1:E3:C1:AE:3A:2B:4B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57F20DB7113862A8AB5F1DC
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36a52c38-5924-3726-a5ee-bb01bcf87ba5.roa
Signing time: Tue 04 Feb 2025 13:57:17 +0000
ROA not before: Tue 04 Feb 2025 13:57:17 +0000
ROA not after: Mon 05 May 2025 12:57:17 +0000
asID: 30036
IP address blocks: 173.20.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7f:20:db:71:13:86:2a:8a:b5:f1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:57:17 2025 GMT
Not After : May 5 12:57:17 2025 GMT
Subject: CN=3c803c2c-c6c2-43c6-93d4-e5484df2070e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:5b:ac:82:c3:82:1b:61:87:a9:b4:e3:06:
ed:16:0a:93:90:cc:28:d3:fd:e9:2c:07:8f:16:b5:
4c:c1:5f:43:1e:b1:a6:c1:93:dd:0c:6c:84:60:5f:
13:8f:9f:a5:38:37:3d:79:17:ab:55:31:1a:f1:9c:
a5:a2:e4:44:a3:ff:aa:9c:ad:97:7e:cd:25:21:f7:
5d:3a:3e:cd:98:49:9e:d4:ee:db:02:c0:d8:72:29:
9b:16:05:27:78:b8:5a:4f:9d:7f:90:2e:5b:1e:ab:
02:93:fb:bd:c4:38:ef:c1:60:c8:dd:b7:45:2b:cb:
66:d6:73:2b:ec:45:35:b3:46:a9:e8:1f:c4:2f:1d:
b0:f8:23:d7:1e:b9:6b:0c:44:53:2f:ed:46:07:2e:
47:80:48:f5:79:a5:b4:51:e7:54:32:19:84:50:08:
12:b2:f8:c7:42:f2:0b:19:2b:a3:29:2c:c7:1e:f1:
43:e0:34:30:d0:41:81:88:c9:3f:c2:1f:e4:42:5d:
12:42:11:0b:94:e7:5e:43:47:24:c0:74:91:cb:39:
be:b9:f0:df:c4:ba:a1:65:dd:e9:33:08:dd:85:50:
17:b5:ab:e6:c6:c1:3d:ac:ad:16:f7:86:0a:6b:54:
f3:7b:f7:f6:66:45:52:e5:2e:4e:cd:08:e7:70:90:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:12:D0:54:8A:F4:69:CB:FE:30:4B:A1:C7:E1:E3:C1:AE:3A:2B:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36a52c38-5924-3726-a5ee-bb01bcf87ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:16:0e:b0:fd:fb:93:8f:11:8d:0b:4e:ea:b6:a3:34:62:d7:
69:25:9f:7d:d1:45:de:ef:6c:44:87:c2:d5:28:d1:a5:a8:63:
e7:c1:5e:19:18:3a:6b:b0:07:7c:19:e1:ee:9e:aa:cc:15:e1:
d7:1f:8d:98:be:b5:95:e3:1c:9a:c9:0e:23:9a:c6:b2:af:5b:
3c:24:14:d7:09:2e:21:0a:0f:73:c9:32:a8:40:82:0b:e8:7e:
10:18:61:98:4e:6e:04:61:b2:61:4d:42:bb:b9:77:42:10:03:
f9:34:fa:5e:92:2f:f7:b7:10:63:79:88:cf:44:a4:05:d6:2c:
83:20:7e:9a:b6:16:9c:2c:2b:de:21:26:10:5f:e7:39:e5:0e:
86:b2:b2:b1:35:a7:bb:a1:ae:ad:f5:56:e5:79:73:b7:e3:91:
7a:2e:09:6e:71:78:ee:26:ad:91:06:3b:d4:d7:3e:c9:84:f3:
3a:19:89:fd:b3:66:1b:8b:19:af:61:35:bc:c6:be:d0:e1:3e:
53:59:12:59:9a:5d:47:1b:4e:2f:a8:2d:05:59:f0:af:f2:5e:
29:25:9c:de:c3:4f:36:d4:d3:53:cf:33:73:bd:b6:65:54:6d:
0f:ae:de:0b:20:04:03:32:fe:ed:7e:9c:4e:3e:75:07:3e:5e:
4c:14:09:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:29 2025 by rpki-client