Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa
File: 3a66e457-9702-3b54-b4dd-dc18e3258958.roa (raw, json)
Hash identifier: SAI0f7w0f+ZBB62s4ea3oEHyI1JX0X2Dnav2z2g0G7Y=
Subject key identifier: 7A:05:8C:81:B0:FF:45:51:06:9D:DD:83:0D:25:D6:07:1D:12:51:3A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57F9D941D3CE126ED368410
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa
Signing time: Tue 04 Feb 2025 13:58:16 +0000
ROA not before: Tue 04 Feb 2025 13:58:16 +0000
ROA not after: Mon 05 May 2025 12:58:16 +0000
asID: 30036
IP address blocks: 173.28.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7f:9d:94:1d:3c:e1:26:ed:36:84:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:58:16 2025 GMT
Not After : May 5 12:58:16 2025 GMT
Subject: CN=af938768-29ce-437a-a6dd-c2ab7950bf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:14:02:df:15:9b:75:1d:41:fc:a8:21:17:
aa:70:7a:3c:35:2a:34:b1:4c:ff:6b:ac:d5:60:ef:
0c:9b:f4:bb:5a:fc:b2:06:af:5b:cf:d8:4b:da:cd:
ea:97:cf:d6:ac:9d:e5:59:a2:b0:86:d0:26:1a:75:
13:96:d1:e9:7c:92:b5:15:eb:7b:7c:52:ab:cc:24:
77:f7:bc:e7:69:33:1a:df:46:9a:2f:2b:b6:69:19:
a3:65:2a:62:13:78:49:bf:7f:07:4f:9e:e4:ce:da:
12:0f:6f:8e:18:a0:18:a1:e3:e2:2d:5e:ec:0f:ec:
2b:4c:0c:70:bb:af:91:69:26:62:41:f1:39:82:fa:
d4:07:ba:80:11:dd:57:32:fd:92:5c:a5:b5:77:c4:
cc:71:2d:67:ac:86:88:5e:f5:0c:5f:2a:72:a8:4b:
b4:b4:84:e8:f7:5a:57:58:24:75:7f:b4:d1:4b:3f:
31:02:14:91:d0:8c:69:93:ba:01:66:7f:f6:f7:90:
38:fc:db:c5:5a:99:86:3e:27:88:7f:dd:b6:9c:12:
04:c6:ea:5d:4d:c1:cf:93:c7:6f:49:91:13:ad:7a:
e6:ac:05:c6:80:e5:7b:96:3d:28:0a:99:c4:5f:eb:
ab:76:18:70:4b:af:b2:7b:7f:be:9b:74:8a:53:c3:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:05:8C:81:B0:FF:45:51:06:9D:DD:83:0D:25:D6:07:1D:12:51:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:f2:e8:46:a1:b1:a5:62:30:86:e7:9e:1f:d0:cc:ee:cb:e7:
ec:91:30:d6:42:d1:c8:a7:c4:05:84:50:1d:01:24:43:5c:75:
e8:13:ae:c2:2b:6a:77:57:2a:e2:b7:58:4b:51:2d:aa:58:26:
07:62:12:04:f2:a9:2b:46:c0:03:57:b6:14:3a:aa:78:03:a3:
d3:64:13:93:3c:41:fc:22:3c:fa:34:37:ee:10:1a:0a:3e:79:
83:9a:e3:a0:4a:eb:9a:05:c0:d0:10:96:a0:a5:bd:f5:86:95:
1a:c2:77:ea:97:3f:2e:1e:11:0b:59:98:da:62:11:af:e4:03:
af:c8:3b:48:87:2c:26:48:31:ae:44:a8:9f:c5:49:b4:1a:6a:
99:79:62:ac:01:41:8b:f1:64:a9:83:55:07:63:27:1f:35:b1:
5b:39:e4:d9:0a:6c:8a:98:0a:f5:69:d4:02:0a:10:34:0b:ef:
73:7d:dd:42:01:b1:52:e4:b8:69:00:e9:7b:b0:7b:9e:ce:bd:
b2:6e:49:83:12:70:68:25:a0:0a:1f:6b:a7:5c:4c:48:ca:ec:
12:26:57:25:4a:79:be:17:6d:9f:75:25:31:53:3d:3b:6f:0a:
4d:ee:fe:bf:b2:aa:e1:40:26:92:16:bd:90:77:e6:b5:07:ad:
d1:a0:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:13 2025 by rpki-client