Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41e409a0-150b-310c-98a1-ac38223cdf3e.roa
File: 41e409a0-150b-310c-98a1-ac38223cdf3e.roa (raw, json)
Hash identifier: 2s2FUa6Np/jdjxP6hdEdobz4ujxFBwuCQDTgAFIa5MM=
Subject key identifier: F4:5F:17:A3:F9:E9:BC:B7:ED:FC:41:94:F5:E9:1D:E4:B6:F4:56:86
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B7371C4403CD05BC2ACB6980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41e409a0-150b-310c-98a1-ac38223cdf3e.roa
Signing time: Thu 30 Jan 2025 11:10:51 +0000
ROA not before: Thu 30 Jan 2025 11:10:51 +0000
ROA not after: Wed 30 Apr 2025 10:10:51 +0000
asID: 30036
IP address blocks: 173.29.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:1c:44:03:cd:05:bc:2a:cb:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:10:51 2025 GMT
Not After : Apr 30 10:10:51 2025 GMT
Subject: CN=a8cefc51-640a-40ff-86c5-91d86c28250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:68:d5:83:a4:a7:61:27:ca:d2:31:b0:b6:
c3:76:c1:a7:33:ea:39:97:59:d8:61:72:48:1b:d6:
90:37:fa:f1:70:f9:37:d1:3d:03:51:7c:5d:3d:40:
de:84:52:f9:f8:51:19:0a:a7:c8:43:16:68:54:62:
02:c1:a7:a1:b2:c1:13:c4:df:23:72:47:24:1f:86:
45:39:f8:eb:03:5d:25:99:0d:b5:f8:47:e9:2d:a0:
aa:20:56:8c:4f:99:05:e0:a8:d7:18:1b:06:4f:96:
58:89:03:ce:f4:54:3e:e4:ac:f6:be:07:86:d2:d1:
c9:a2:83:b2:56:f6:29:87:d8:b6:bc:4e:bd:be:4f:
8c:4a:a4:de:ac:db:17:59:04:1c:06:bd:42:6f:af:
66:13:27:24:24:a8:70:e5:35:5e:79:be:7c:61:28:
9f:dc:34:78:cd:8e:a0:e9:14:35:75:07:3c:a8:48:
78:81:03:f5:fe:32:1f:c1:2b:99:dc:ae:d4:a3:88:
4e:2c:bb:a3:f8:a6:f6:37:86:b1:79:07:cd:40:7f:
e4:5c:ae:77:ba:32:1e:ac:77:3e:b6:23:e1:e6:10:
bc:84:04:3f:df:5d:40:ac:31:e0:3e:83:3b:db:7f:
62:bd:8d:8e:14:ff:50:f2:59:c6:6f:d0:b2:3d:61:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5F:17:A3:F9:E9:BC:B7:ED:FC:41:94:F5:E9:1D:E4:B6:F4:56:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41e409a0-150b-310c-98a1-ac38223cdf3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:d1:03:10:a6:9e:69:32:5f:82:98:f3:36:81:7d:5b:f2:38:
a0:10:e0:6d:d5:f5:c5:58:87:f9:e4:af:31:7e:81:d0:9a:81:
1b:67:75:d7:71:c9:43:91:86:82:84:71:65:c7:bd:f9:af:33:
af:f7:af:5d:79:af:44:22:ad:f0:4b:b9:18:08:ed:de:15:b9:
6e:de:a5:25:88:1c:cf:70:ca:19:c8:fa:89:b3:14:79:5c:3a:
99:e2:8d:9a:b6:fe:d5:75:a7:a5:53:60:99:8b:69:fe:eb:c5:
1a:32:05:b1:02:94:aa:13:d5:49:1b:af:8d:ee:47:6e:c1:aa:
af:60:6f:1c:d9:93:06:fb:4a:2f:a8:8a:7c:36:da:47:22:1f:
9d:95:40:f1:c8:8d:fe:bf:8d:b2:ef:d2:94:5a:c7:40:3c:22:
2a:c4:0c:c5:32:79:e4:a2:78:54:47:e2:44:49:9b:e0:78:5a:
c9:1f:c1:4e:eb:c6:54:0b:6d:9c:92:45:65:37:77:42:ad:b5:
b1:ed:53:a8:11:fc:b1:06:d3:43:1b:93:d3:c9:46:34:d6:93:
a3:1d:2a:b0:77:35:0b:53:6b:bb:e3:0e:fc:1d:41:94:5c:e7:
a1:24:b4:97:7e:8b:00:da:58:36:73:9c:62:49:3c:26:86:93:
4c:1d:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:52 2025 by rpki-client