Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b65639e-e5c9-3c85-9821-209e71096b9c.roa
File: 3b65639e-e5c9-3c85-9821-209e71096b9c.roa (raw, json)
Hash identifier: 8HlR9neamtvgKFYm4vyeylKUtq0gauQHJeTo/+D21Jk=
Subject key identifier: 96:79:6B:C7:36:E6:DC:88:62:B4:67:3E:FB:B6:EC:F4:DC:1A:C1:24
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C576071A06F4EA509A6A7F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b65639e-e5c9-3c85-9821-209e71096b9c.roa
Signing time: Tue 04 Feb 2025 13:38:57 +0000
ROA not before: Tue 04 Feb 2025 13:38:57 +0000
ROA not after: Mon 05 May 2025 12:38:57 +0000
asID: 30036
IP address blocks: 173.23.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:76:07:1a:06:f4:ea:50:9a:6a:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:38:57 2025 GMT
Not After : May 5 12:38:57 2025 GMT
Subject: CN=1655bb29-fcf9-4a07-9ad0-554ed3e0e5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:8c:06:bf:ca:6f:50:af:02:f5:f1:7b:e6:
d2:23:07:db:b2:cb:6d:9b:d0:6f:b7:52:ff:5e:ce:
10:46:cf:61:0e:fd:ad:96:1a:58:4e:a0:c2:08:7f:
3f:36:a4:58:f7:81:4e:c8:e5:0b:da:f0:40:bb:2a:
bc:f0:de:ff:e8:c1:73:0e:ed:14:36:f1:a9:7d:f8:
d5:5d:87:64:54:ac:32:04:7c:81:dd:f7:fd:92:44:
1d:56:87:a9:3b:3c:0e:97:e7:f0:3a:aa:5c:6c:4f:
43:e2:aa:73:8f:80:db:5d:f7:c0:f4:f7:8e:7b:2f:
c2:5a:0a:08:9c:32:ab:7c:0a:55:bb:1e:a3:9a:bf:
3f:b0:7e:1d:ae:f5:fa:20:15:61:a6:b1:7e:90:40:
78:e6:df:02:39:c1:63:06:ef:f3:a4:00:7d:1b:63:
9f:9b:03:80:6b:5b:1b:7f:75:7b:be:f8:b3:7a:1d:
d9:a0:57:e9:af:a8:13:87:75:69:8c:ca:21:01:77:
b0:9e:21:99:0b:4d:53:f3:94:17:e3:fc:3c:6e:3d:
4c:a0:28:cc:fc:57:5c:fc:02:ad:be:20:07:13:66:
79:98:42:27:02:1f:e5:7b:1c:07:ca:29:da:51:ab:
6b:d7:b4:3a:52:6f:78:ad:ca:82:d7:01:7b:76:01:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:6B:C7:36:E6:DC:88:62:B4:67:3E:FB:B6:EC:F4:DC:1A:C1:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b65639e-e5c9-3c85-9821-209e71096b9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:49:c3:0d:f2:cf:26:26:0c:42:42:b4:f7:d7:87:ef:97:4c:
3c:0d:b5:6b:80:2a:15:a0:89:8a:a9:ff:c1:05:2a:49:bd:71:
14:43:5a:08:1f:53:d6:cc:66:17:be:a9:72:a0:64:dd:0f:9a:
87:71:8f:7e:43:27:0c:26:f3:66:cb:78:9a:56:c6:0e:ec:57:
76:74:39:2b:3b:d6:13:09:c9:3e:09:aa:91:34:f6:15:cd:bf:
5e:c8:8c:a8:6d:09:12:f9:a4:85:e7:a6:86:df:16:d0:45:bc:
a1:3a:e9:60:3d:ff:30:d1:d4:24:76:3f:32:56:40:93:6e:c4:
14:c9:d2:fa:fc:b7:ad:13:77:d3:2e:40:dd:a3:5a:e3:e7:f2:
6f:48:fa:95:48:92:9e:9a:1a:85:55:6e:ba:4d:11:9e:b4:3c:
56:a9:8b:41:96:1b:85:56:dd:94:1b:73:b8:a7:59:9d:20:60:
84:fb:64:ed:55:b0:b3:ea:f0:e9:19:5a:0e:d0:25:ab:3e:1c:
2e:d5:33:62:81:4e:db:2e:2d:15:d4:c9:fc:22:7b:f8:80:31:
eb:7d:f3:20:7f:37:8e:b8:c1:4d:6f:97:1c:29:87:bb:cf:ac:
92:1a:7c:6c:70:be:67:a0:84:12:cb:54:9c:20:78:6e:2c:64:
e4:a8:78:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:20 2025 by rpki-client