Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/529cd3b2-8c2c-31a4-9338-e1ddd7f66680.roa
File: 529cd3b2-8c2c-31a4-9338-e1ddd7f66680.roa (raw, json)
Hash identifier: XFEw7i9X52MoBfO3VaaiiMuAtnlG93AzPWI0JUf7KVA=
Subject key identifier: 32:A2:2C:B2:D9:18:E8:73:6E:AD:84:18:5A:C8:78:78:64:0B:7D:94
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57E1342F1F0BA31009CFAC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/529cd3b2-8c2c-31a4-9338-e1ddd7f66680.roa
Signing time: Tue 04 Feb 2025 13:55:09 +0000
ROA not before: Tue 04 Feb 2025 13:55:09 +0000
ROA not after: Mon 05 May 2025 12:55:09 +0000
asID: 30036
IP address blocks: 173.25.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7e:13:42:f1:f0:ba:31:00:9c:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:55:09 2025 GMT
Not After : May 5 12:55:09 2025 GMT
Subject: CN=5dfad1cb-c8ec-4f8a-901e-fdfb60f516dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:69:7a:b9:67:33:3f:3e:58:68:1e:78:24:b2:
e6:e8:cb:71:51:46:b2:58:6d:ea:68:68:ae:84:b1:
3d:e7:65:32:6c:c1:85:c4:ce:bf:d9:c3:1b:cf:fd:
e3:88:c3:72:53:9f:cb:df:34:77:cb:91:7c:67:80:
76:73:65:65:d1:7f:91:61:13:98:00:3c:2b:0d:f6:
17:d0:4e:18:aa:ea:38:ac:20:16:df:df:e4:0b:36:
d5:44:09:fe:47:71:10:86:04:9e:94:b5:e4:4d:81:
e1:07:15:47:8b:81:52:26:4d:9e:3e:f1:e3:8f:d2:
c9:8a:0d:17:29:08:2a:7c:27:7f:f2:31:32:34:88:
4a:a2:ad:23:d0:ed:ad:41:ac:c2:7b:f1:20:d4:ad:
26:5c:a3:c7:a1:57:85:0c:6f:c7:80:82:7b:c9:68:
58:7d:25:13:6d:15:1f:2b:c3:a3:64:d1:f5:74:c6:
8c:3e:ce:c6:28:14:e1:db:05:4f:f6:a0:a7:25:92:
bb:5f:b6:6b:12:39:b6:db:35:d2:b0:57:5e:c0:f5:
2a:0c:80:87:92:65:2d:a2:a1:de:eb:3e:f1:d5:b3:
39:16:8a:00:e7:45:68:8d:58:aa:b3:09:b7:56:5b:
6b:6a:c4:42:a3:73:ad:7c:65:ac:f5:62:9a:10:f2:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A2:2C:B2:D9:18:E8:73:6E:AD:84:18:5A:C8:78:78:64:0B:7D:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/529cd3b2-8c2c-31a4-9338-e1ddd7f66680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:22:cc:c7:65:96:64:b7:c2:a8:c3:ab:fb:6a:5f:2e:6b:03:
b1:a0:b3:5a:5c:3c:02:1e:07:31:9c:37:88:e5:fd:d6:10:e2:
11:a5:eb:48:ae:df:6d:22:8d:5a:35:b8:97:49:28:78:8d:02:
f9:55:4a:ed:24:86:c0:d6:28:8b:71:e1:8f:c1:8e:fd:9f:2e:
81:fe:d1:9b:dd:93:63:3f:c1:de:05:6b:18:b9:2e:5f:c1:c3:
65:29:95:69:bd:48:27:e2:9f:b8:66:87:65:8e:4f:fb:1d:b7:
b2:f6:60:62:bd:c4:cd:5d:c2:f9:2d:e4:80:7d:d4:5a:80:44:
94:d9:a5:76:18:ab:37:08:a6:42:c9:fc:e5:ed:ec:ed:f6:6f:
60:4d:c3:22:a3:b3:ca:7c:18:26:32:4c:7e:16:bf:ac:ae:24:
5f:3d:78:25:c4:90:98:a1:1e:ef:55:93:56:7c:c2:a2:44:9d:
67:18:c1:f4:28:10:e7:0e:88:46:ca:8f:fe:3c:fc:63:92:f0:
2a:14:6c:78:2c:8c:8c:9d:b1:31:f9:94:b5:bb:f6:42:a3:f9:
eb:c9:c0:fc:8d:19:fe:0d:62:13:91:d8:80:9c:26:ad:bc:7b:
dc:78:be:8b:7f:ca:e3:0c:d8:60:8d:63:3b:d9:e0:1b:2f:b7:
5a:4f:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:21 2025 by rpki-client