Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cce2fcb-e0a7-3847-b715-e9b2073ffff1.roa
File: 5cce2fcb-e0a7-3847-b715-e9b2073ffff1.roa (raw, json)
Hash identifier: atNO2lNX9As0fevI+v2ai0pHxPqa+14byB5o2gQokwk=
Subject key identifier: F4:E3:44:F1:F8:F0:A0:0E:24:EB:2C:E1:BD:3A:68:B0:10:47:8F:92
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C55793D2DA3072A6CC827D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cce2fcb-e0a7-3847-b715-e9b2073ffff1.roa
Signing time: Tue 04 Feb 2025 12:37:35 +0000
ROA not before: Tue 04 Feb 2025 12:37:35 +0000
ROA not after: Mon 05 May 2025 11:37:35 +0000
asID: 30036
IP address blocks: 173.21.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:57:93:d2:da:30:72:a6:cc:82:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:37:35 2025 GMT
Not After : May 5 11:37:35 2025 GMT
Subject: CN=a14200f8-72c6-45a6-8fee-b51a94cd2e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b0:55:d5:49:fa:5a:17:ac:71:4e:7c:93:5c:
69:75:b1:a9:6e:12:45:fd:1e:d0:7c:f4:a0:82:9d:
dd:94:e9:c9:48:e1:f1:8d:3e:c2:fc:69:e5:a9:73:
5d:fa:4a:c4:d2:02:a0:21:2d:03:b6:a4:94:ff:20:
03:73:2a:e3:57:e8:ba:42:09:4e:de:d6:e1:fd:39:
d5:f4:a4:42:a7:3b:05:46:27:4f:40:63:d9:ed:50:
69:4f:21:08:98:f0:47:cf:6b:95:59:7c:5f:8c:00:
ff:5c:b6:c5:14:5c:f0:6f:f6:5e:63:d0:14:bc:2d:
20:2e:82:3a:a0:26:cb:27:81:70:b3:91:95:b1:c7:
1b:8c:79:d2:5e:ab:5c:bb:d1:f3:1a:fb:85:20:df:
33:71:56:d6:0a:e2:3c:cd:a8:b0:ea:29:a2:79:15:
bf:d7:23:b7:ba:0e:06:86:06:d4:ea:98:bb:aa:79:
a7:42:54:a4:16:21:10:09:66:ee:49:b6:c9:3c:96:
67:3e:86:79:9f:11:5e:c6:af:f5:45:42:d3:37:25:
56:76:d5:b6:08:96:2a:b1:d9:4d:e0:fe:80:3b:e5:
81:56:5f:55:2c:d7:9b:df:da:63:0d:5b:1d:ec:4f:
eb:41:48:06:d3:e5:3b:85:8f:91:15:73:cf:91:dd:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E3:44:F1:F8:F0:A0:0E:24:EB:2C:E1:BD:3A:68:B0:10:47:8F:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cce2fcb-e0a7-3847-b715-e9b2073ffff1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:f2:59:00:e7:26:5b:8c:97:f8:e7:de:9c:02:a4:29:30:f5:
64:e7:92:0d:c5:94:87:17:4a:a5:c1:cc:57:8d:9a:9b:81:70:
10:46:8f:da:3f:af:66:a1:69:32:f6:01:da:f4:d6:3a:b1:90:
ac:7f:ce:86:32:57:73:ef:36:b1:c8:b2:12:06:e7:30:a5:44:
3a:3f:21:4e:91:22:77:cc:00:a0:df:50:c1:35:39:1b:de:05:
ce:54:7f:ba:8d:de:ef:b2:e7:f9:31:a2:6b:e9:a6:f7:4c:70:
55:62:bd:de:f1:f6:c7:b5:23:25:ef:fb:4c:81:c2:66:7e:e7:
95:fe:e3:04:7c:ad:a4:d6:52:d5:4f:0a:b8:6a:0d:f4:d3:5a:
35:5f:eb:0b:ec:70:16:d1:fd:20:bb:c0:0f:ed:7e:db:01:fb:
5b:2c:1e:58:e7:7c:ee:7e:17:2d:98:40:9b:bd:73:82:e7:21:
50:9d:1f:32:a2:f1:2b:f1:c1:ad:84:03:be:39:c6:eb:a3:59:
5f:c4:3b:b8:e1:b1:98:09:98:9f:c4:ed:40:9d:fe:9e:9b:c8:
51:5e:ec:06:32:79:30:b8:23:5e:4e:6a:d3:75:61:10:05:23:
49:74:75:4d:e7:2c:ae:2e:eb:ff:52:d5:ab:9c:78:d8:95:07:
ca:69:75:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:26 2025 by rpki-client