Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f46d3e3-d5ef-341d-853c-ca77799c1569.roa
File: 3f46d3e3-d5ef-341d-853c-ca77799c1569.roa (raw, json)
Hash identifier: RI7L1+xjie1zqCTKkt+IgzHFHaoBnaJreht/VQUEf5A=
Subject key identifier: F7:43:1E:2F:45:BF:91:6A:6E:C0:68:C8:E3:0B:93:A7:89:C7:C6:5D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F72262FC94566363F7B680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f46d3e3-d5ef-341d-853c-ca77799c1569.roa
Signing time: Wed 05 Feb 2025 11:10:42 +0000
ROA not before: Wed 05 Feb 2025 11:10:42 +0000
ROA not after: Tue 06 May 2025 10:10:42 +0000
asID: 30036
IP address blocks: 173.19.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:22:62:fc:94:56:63:63:f7:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:10:42 2025 GMT
Not After : May 6 10:10:42 2025 GMT
Subject: CN=b1b4b459-ed3d-4ebf-b8ed-64c1c9179797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:58:c1:88:9c:39:d5:0d:a1:e0:80:ca:8a:
c2:9f:ff:f5:1a:69:e4:96:16:be:21:76:3b:84:83:
ce:98:93:d2:44:e9:e3:14:0a:68:c1:5f:54:4d:5c:
61:3b:96:fa:ba:1b:9f:28:24:7d:0e:ac:46:bb:31:
23:73:12:33:00:41:84:22:4c:d2:04:98:c0:6e:ea:
69:82:1f:3e:8c:50:ab:37:e0:b6:92:f2:4c:ec:07:
89:dd:d5:b3:5b:ab:0c:e2:27:8e:c3:52:ae:fb:35:
b0:8f:fd:7c:88:a2:b6:14:76:42:c8:71:f6:2d:64:
5b:cb:1c:6a:84:dd:3f:cf:ab:cd:b5:cd:ae:6b:f8:
27:14:d8:af:54:ab:d4:5d:5f:8f:f1:1c:a9:18:5f:
9b:e6:9f:52:95:9f:0c:09:0d:81:f8:22:f3:c6:b2:
d8:1e:5e:cc:f2:1a:e7:a4:41:01:8a:05:67:72:94:
5e:0e:8e:1a:68:a1:48:37:51:c7:88:7b:ee:69:ec:
7f:5d:cf:44:cf:3f:f4:a3:d0:92:46:69:f3:4e:bc:
6d:a0:25:84:22:33:7d:68:8a:26:5c:46:d5:e2:c9:
2d:7d:cf:0d:d5:4f:7c:92:97:8b:02:d2:c7:fb:bf:
a5:5d:c0:83:fa:6a:34:df:8b:e9:98:36:fe:5f:e2:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:1E:2F:45:BF:91:6A:6E:C0:68:C8:E3:0B:93:A7:89:C7:C6:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f46d3e3-d5ef-341d-853c-ca77799c1569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:67:26:4f:c8:26:d7:27:2f:bf:67:49:90:a2:d8:9f:30:dc:
5a:93:41:ca:35:ca:82:35:ed:3f:23:b0:58:6a:53:a9:ed:d9:
76:7c:a0:71:72:f1:f2:df:0a:20:a2:f8:2e:79:c2:6a:99:e9:
6c:7a:bb:bd:91:51:49:d0:b4:39:18:15:71:5c:ee:28:88:b7:
03:e3:d7:37:81:7f:41:5d:a4:19:4e:57:8a:b8:1d:86:b1:02:
cb:76:92:1b:c7:93:af:68:0d:26:1b:11:cd:1b:13:8c:e6:f6:
0a:18:2b:79:e3:5f:ee:cd:a6:11:3a:ae:06:0b:7f:e2:6a:3f:
9a:10:95:63:44:f0:f3:59:c4:07:4c:db:11:00:bf:3c:34:d1:
a1:64:1b:b3:1e:3c:17:c5:96:8a:aa:8b:9c:2b:9a:8b:c3:45:
96:75:22:3a:09:53:8f:0c:83:58:6d:23:32:fc:29:60:7e:7c:
2f:63:ad:36:9e:fa:61:a8:bc:78:a8:b4:eb:b4:85:d5:98:85:
a9:f9:09:11:26:c9:1b:5d:f8:ee:6d:2f:46:3a:a5:a2:35:8a:
10:23:e5:b5:b5:e6:a3:a4:14:d2:dc:ae:dc:b2:83:5e:f0:3b:
de:25:a3:60:ef:ed:f7:24:b1:fa:39:3a:57:1c:8c:09:1d:b3:
58:cb:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:51 2025 by rpki-client