Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4012b844-3a80-373b-baff-3b6f69fb7a28.roa
File: 4012b844-3a80-373b-baff-3b6f69fb7a28.roa (raw, json)
Hash identifier: uiCezTRHWflrXe70D0Nf3dWrBUb7/57lVrm+gswdwU4=
Subject key identifier: 62:39:F3:97:E0:30:D8:FE:44:A9:AC:14:F9:5F:99:D6:E9:A4:46:24
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C575F67FF64CDC21C7D86000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4012b844-3a80-373b-baff-3b6f69fb7a28.roa
Signing time: Tue 04 Feb 2025 13:38:49 +0000
ROA not before: Tue 04 Feb 2025 13:38:49 +0000
ROA not after: Mon 05 May 2025 12:38:49 +0000
asID: 30036
IP address blocks: 173.20.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:75:f6:7f:f6:4c:dc:21:c7:d8:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:38:49 2025 GMT
Not After : May 5 12:38:49 2025 GMT
Subject: CN=2a6759bc-7e17-4589-9d23-071814c8705d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:9c:e1:31:df:a3:9f:b4:77:28:08:f8:41:
54:73:8d:c2:8f:6c:62:63:5c:b0:c9:49:35:74:6e:
a2:a8:7c:35:9b:ae:27:5b:b9:e7:30:f0:00:d8:4c:
39:8c:c4:ed:3e:ff:11:45:06:3f:12:51:69:63:30:
c5:c8:83:b1:fa:4b:93:17:4a:ad:6d:7b:be:dd:ca:
13:6a:7d:44:21:cb:6a:65:22:5e:8f:d6:8e:d2:8e:
87:f5:47:ff:2e:74:23:cd:3b:9f:01:2e:14:a9:c0:
ad:f1:22:ed:bb:73:06:70:d3:98:8c:a9:3a:0d:93:
d6:9f:0f:e6:b0:04:be:f8:ac:c4:e5:7b:3a:ba:45:
32:ad:57:9b:dc:9a:e3:1a:3f:d7:96:04:8d:63:a8:
24:2f:c0:3e:7c:02:84:32:21:2d:98:ad:8f:da:bf:
1c:17:bd:00:96:46:7b:15:dd:27:2a:17:00:f5:d9:
af:ea:ea:89:84:89:92:d8:ab:43:5a:2f:22:19:91:
97:ef:1a:28:ca:df:db:3b:98:51:aa:bd:71:ce:fc:
d6:62:d9:fa:14:e9:84:b9:5f:5e:f6:7d:c8:b5:fa:
22:1e:81:e2:c7:98:4d:ed:8e:41:c8:d5:64:e6:27:
65:d9:d6:f4:be:8b:b9:d9:20:cc:ff:1a:f5:28:b3:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:39:F3:97:E0:30:D8:FE:44:A9:AC:14:F9:5F:99:D6:E9:A4:46:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4012b844-3a80-373b-baff-3b6f69fb7a28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:f4:4f:4d:de:28:f4:04:a6:9a:2b:62:cb:54:3d:46:bb:9d:
ac:97:66:36:b9:df:1d:a7:d2:7f:b0:98:2c:6d:cb:fe:2f:61:
6e:aa:83:54:71:77:49:d7:8b:39:b1:5e:d2:e1:2f:af:5c:4b:
55:8f:bd:31:a5:22:35:fa:f7:9b:c6:9d:66:48:a5:e7:9a:56:
49:1f:2e:2d:47:c6:81:29:2e:9c:c6:ab:56:c7:d2:38:32:40:
6e:d5:1c:dd:a9:49:d3:72:f5:e1:d0:db:b3:20:bb:0e:3b:ca:
80:30:4d:30:29:4f:a7:86:f0:06:e5:30:05:03:4b:81:d0:0d:
6f:60:a8:a0:43:d9:33:a5:20:f8:ac:4e:b3:ba:cb:c7:29:e4:
ba:98:50:25:cd:bb:61:22:c8:d6:34:ce:02:a3:5d:1f:6a:66:
35:a6:eb:76:75:79:53:1f:4a:41:6e:09:c7:b3:1f:f7:34:4b:
d3:0d:76:19:df:72:ec:a2:c1:2d:5e:8f:26:84:44:e0:94:38:
64:8d:72:3d:03:4e:13:29:18:36:4e:22:09:2f:15:79:bf:37:
43:5a:f2:c5:c8:2e:e2:93:02:c5:67:e5:e3:a5:84:ea:3e:9e:
55:8c:c4:6a:b1:2c:49:62:f3:51:f8:6e:cd:1b:ad:b3:09:e5:
1f:43:34:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:01 2025 by rpki-client