Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/401b248b-fbb5-32a6-9309-2b3aa7822986.roa
File: 401b248b-fbb5-32a6-9309-2b3aa7822986.roa (raw, json)
Hash identifier: Xllx9e2LWVxYXA0rR95AEf744Z6RUxQg3wwlpDoRxYg=
Subject key identifier: 92:0B:E5:D9:F7:40:9F:E5:BD:BF:8C:6E:41:21:90:D3:C7:6D:A7:CC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57589243A6D3EDD16D44880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/401b248b-fbb5-32a6-9309-2b3aa7822986.roa
Signing time: Tue 04 Feb 2025 13:37:57 +0000
ROA not before: Tue 04 Feb 2025 13:37:57 +0000
ROA not after: Mon 05 May 2025 12:37:57 +0000
asID: 30036
IP address blocks: 173.21.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:75:89:24:3a:6d:3e:dd:16:d4:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:37:57 2025 GMT
Not After : May 5 12:37:57 2025 GMT
Subject: CN=faf863ab-358d-486f-b3c8-c8adfc2eba8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0a:d3:f9:fc:cc:a9:b1:84:64:4a:cc:b2:ec:
fe:5d:51:4c:82:7c:99:d6:98:77:92:f8:28:e7:e7:
6b:53:f5:21:9f:64:66:8d:66:54:d7:eb:ae:3b:db:
6f:50:ff:9f:ce:b2:96:5b:71:5d:02:be:b7:dc:96:
3d:bb:0d:33:72:b4:08:d7:46:95:48:ce:da:5f:fa:
f7:0b:94:cf:03:fe:2c:62:6d:76:c1:c5:34:2c:f5:
15:22:b1:4b:db:09:8e:c5:39:bd:81:63:b4:25:d9:
8f:5c:0a:8a:e2:9a:79:d5:65:49:c2:da:cc:c5:a4:
f0:a6:22:19:82:81:e2:1a:4f:ce:fe:49:b8:90:f7:
c3:f7:ae:93:1f:5c:4e:b7:a3:13:de:4e:35:5f:2d:
6f:ac:98:8e:d6:46:9a:b3:f1:94:2e:73:0f:e2:e1:
42:de:63:31:dc:44:7f:67:53:55:48:e3:e3:c6:e4:
d5:95:1a:cc:19:49:c2:fa:d3:a2:c3:35:e3:c2:29:
b6:42:44:3a:bb:ff:2f:7b:bf:9e:ce:72:8a:44:c6:
a5:ae:44:bf:71:69:96:0a:a1:c8:fc:87:15:d2:34:
2b:3e:0b:f9:dd:69:57:57:99:fd:59:90:a6:ff:5b:
22:a3:ad:00:51:70:e8:8f:19:bf:dd:31:2e:57:32:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0B:E5:D9:F7:40:9F:E5:BD:BF:8C:6E:41:21:90:D3:C7:6D:A7:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/401b248b-fbb5-32a6-9309-2b3aa7822986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:19:fa:36:76:90:57:bb:4a:5b:03:e5:50:63:04:ab:2e:0b:
4b:14:3f:56:5d:ef:f7:e8:d9:0c:b6:56:72:28:84:4d:c8:f7:
e5:53:d0:fc:75:4a:aa:9f:af:34:96:6e:b4:15:b7:5c:d9:b2:
e6:d2:9c:b5:42:ab:b5:9f:8a:d8:c6:b6:e9:a3:14:e3:c5:e4:
8b:d4:fb:ac:57:58:f3:42:b0:4d:85:4c:e0:e7:e6:db:ee:e2:
b7:a5:c1:a6:82:00:60:8c:5b:fc:8e:e5:3d:c9:9c:e8:a4:03:
c4:9e:a3:89:d9:d2:0d:b3:d0:dc:05:b6:e3:d0:45:20:25:28:
25:90:5b:09:45:4d:05:25:ec:48:4f:fa:69:55:5e:d0:5d:28:
06:df:c2:05:4c:71:a6:fb:15:b7:f6:18:12:bd:36:aa:83:73:
b1:54:04:be:5b:c0:7d:08:52:bf:ef:5a:a2:35:dd:e7:e0:57:
68:d5:2a:93:e4:1d:29:e9:46:66:37:56:7b:25:b4:54:f8:0e:
e1:7b:e0:51:6a:2d:bb:82:21:b2:80:25:c4:7e:53:07:63:07:
a9:5c:27:5c:57:34:6b:a5:0e:6d:ae:40:d9:d4:a7:33:55:52:
cc:50:6e:82:86:be:aa:f4:17:3e:09:cc:b7:28:0d:fd:96:ea:
b0:7d:01:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:52 2025 by rpki-client