Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa
File: 3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa (raw, json)
Hash identifier: 191U45RuA5Jj5ZI2iywjDZdOMGdo9DJekm3+FlRpscw=
Subject key identifier: 0B:61:A3:3F:26:75:55:FD:9A:50:25:54:1A:9C:34:FA:BD:D4:99:3F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F66E871239F221705752C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa
Signing time: Wed 05 Feb 2025 11:09:17 +0000
ROA not before: Wed 05 Feb 2025 11:09:17 +0000
ROA not after: Tue 06 May 2025 10:09:17 +0000
asID: 30036
IP address blocks: 173.23.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f6:6e:87:12:39:f2:21:70:57:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:09:17 2025 GMT
Not After : May 6 10:09:17 2025 GMT
Subject: CN=3ad85ec0-8174-4f78-8f75-505f1820eb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:60:9b:01:5e:77:f9:bd:4f:34:ae:45:4c:
69:18:2c:68:ba:a5:1b:50:94:e7:5f:8f:29:1a:a4:
3a:44:b9:59:84:c6:ce:79:84:04:53:46:8e:ff:4b:
11:1b:21:2b:bd:b1:65:0e:ab:5f:82:c2:62:f9:0c:
54:2d:f7:cd:04:8a:a1:20:f1:81:18:45:55:c8:85:
2f:67:85:83:d0:b6:0c:27:f7:ef:dd:bf:b7:9f:fd:
87:48:3c:e8:91:d7:c8:64:4d:85:31:60:3b:de:1d:
70:93:80:79:23:f7:b1:68:6a:f2:8a:cd:a1:6d:7f:
b5:5b:c6:30:99:fb:bc:dc:f6:a4:b6:04:6b:47:9c:
73:8c:50:0c:e1:45:e8:4a:c1:e6:ce:3c:7b:58:b4:
78:67:f1:8d:8a:3a:3b:c4:28:62:64:dd:22:36:b7:
e9:95:76:a4:f4:36:26:51:0f:fa:42:47:0f:73:4a:
86:2d:a3:59:0c:2e:65:a9:ce:ce:bb:8e:c1:eb:9a:
ac:f1:b6:36:b1:4d:5b:82:95:ff:a6:51:04:50:5a:
08:20:c1:00:d0:91:2f:b7:26:7a:7b:16:20:f2:91:
29:e9:bd:35:ab:d3:1d:5e:65:39:d1:87:12:9c:08:
31:4d:63:27:78:a3:aa:0c:55:b1:cc:b3:6d:59:81:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:61:A3:3F:26:75:55:FD:9A:50:25:54:1A:9C:34:FA:BD:D4:99:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:e3:4c:0b:dc:8d:4b:0a:77:57:b3:5e:b0:9e:5f:af:3b:a5:
ca:22:11:42:99:c3:0b:80:6b:cf:73:af:71:03:23:c1:20:65:
21:c0:be:c7:ac:70:8c:41:c2:f4:e0:06:73:f1:13:f9:44:3a:
50:2b:a8:dd:92:f4:d4:52:6f:2a:87:a3:d5:99:16:0a:48:b2:
ab:4f:55:18:28:12:d5:c3:8b:84:0a:fb:26:d6:d5:18:e6:39:
48:2a:cd:5e:17:91:c8:66:e9:25:2e:71:13:76:14:7d:69:a7:
c0:f6:55:57:3d:f3:de:68:77:a5:1b:d1:77:15:5f:ea:7d:44:
f1:83:d3:ea:d8:d4:46:3a:0c:50:a3:8d:db:13:5d:c6:37:5f:
a2:b9:55:8a:a0:23:26:ec:b8:e8:ef:19:ce:6d:74:58:3f:ab:
d1:47:5d:b7:43:a5:09:01:69:b1:63:b2:20:b8:cb:8c:2a:87:
c6:72:ff:1c:5a:27:33:75:66:cb:8c:c7:2b:60:19:d8:51:a2:
82:ba:86:b9:41:e9:70:38:51:72:f9:6d:39:e9:4d:b8:47:f8:
4f:e1:d8:76:f9:14:51:d2:88:c1:8e:55:41:81:5a:79:b9:02:
a4:c7:4b:b1:5c:34:f9:ff:9b:8f:56:b1:cc:18:05:18:6e:0a:
44:8e:9d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:56 2025 by rpki-client