Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d7e4afe-cd32-3f55-b430-42a6b619dace.roa
File: 5d7e4afe-cd32-3f55-b430-42a6b619dace.roa (raw, json)
Hash identifier: XVqJjkEi5cDegQ01PWfuuL4iLcPh9cjrbnEAG0MWAlQ=
Subject key identifier: 0F:71:71:F6:9F:4B:5C:3F:02:72:E9:05:A4:CE:20:9C:9C:45:84:92
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5330AE466A8F8723373CB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d7e4afe-cd32-3f55-b430-42a6b619dace.roa
Signing time: Tue 04 Feb 2025 11:23:59 +0000
ROA not before: Tue 04 Feb 2025 11:23:59 +0000
ROA not after: Mon 05 May 2025 10:23:59 +0000
asID: 30036
IP address blocks: 50.81.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:33:0a:e4:66:a8:f8:72:33:73:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:23:59 2025 GMT
Not After : May 5 10:23:59 2025 GMT
Subject: CN=a00869d0-3d56-4630-abf7-6c437b546cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:e1:d3:89:80:f7:ed:00:34:eb:b7:07:23:
fd:2c:e6:5b:9f:8f:77:d3:92:1d:82:22:93:1f:69:
3f:da:2e:5d:f8:53:22:00:28:87:e7:ff:4d:78:68:
e2:59:e2:71:63:11:3f:a2:f8:bc:d1:2d:2f:1c:4f:
4c:71:36:2f:2b:7c:1d:72:6e:3f:7d:e6:5d:7e:55:
ca:aa:92:46:06:a5:1c:59:43:f3:51:13:d1:82:ff:
89:04:09:68:19:70:3b:b8:77:7b:5f:16:cc:5d:ea:
f9:d6:6d:17:b9:3c:0e:a4:d1:60:b4:20:69:77:76:
18:01:86:46:70:7c:75:35:46:14:f1:38:01:d3:4b:
c8:7d:07:54:5c:32:30:48:ee:28:56:59:bc:84:d1:
f1:60:b8:1a:8b:cb:bf:30:d3:47:24:b7:4b:78:6d:
51:4c:6e:96:da:9a:01:f7:c1:a1:18:c0:07:56:7c:
26:ec:2e:d3:fe:8d:89:5f:61:39:fb:3e:1f:8d:1d:
1b:e8:9a:d8:25:89:1c:ae:98:3e:a5:c1:44:22:9d:
af:03:28:12:d5:84:fa:26:cb:cc:99:c2:da:83:b9:
02:fd:b1:17:08:82:50:04:95:52:8e:06:7e:22:47:
2d:24:37:b8:ee:8b:68:91:2d:c6:0d:cc:85:b2:d8:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:71:71:F6:9F:4B:5C:3F:02:72:E9:05:A4:CE:20:9C:9C:45:84:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d7e4afe-cd32-3f55-b430-42a6b619dace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
50.81.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:14:a3:6b:6d:24:68:50:55:41:3c:fb:85:b1:4b:ad:24:78:
37:60:a5:0b:f0:75:13:eb:a9:06:f3:66:64:f3:42:46:87:c4:
e6:19:1e:c7:27:66:d3:ad:b3:51:1b:65:24:66:89:99:df:cb:
53:30:38:1b:01:2e:70:56:c6:da:d2:47:c7:e6:f0:29:e2:ae:
ce:ec:3c:90:13:13:08:10:8c:2b:e9:dd:97:5a:3e:2e:57:a8:
f8:13:82:7b:9b:82:d2:cf:78:6f:e7:2d:b9:27:dd:cd:38:ac:
8c:90:b9:43:39:5f:34:1b:73:e6:8d:f5:9b:4b:29:05:8f:7a:
d4:91:e6:32:9d:2c:c4:33:d4:5b:52:8f:15:98:b7:a5:ec:11:
2a:4a:b1:13:53:3e:8b:d0:88:03:c9:c7:4a:08:f6:c1:da:46:
2b:02:04:9c:63:1a:45:50:22:fd:68:3f:c1:fa:e9:97:30:6f:
d2:53:07:b1:8f:25:60:c4:78:9c:37:13:3a:73:bf:16:67:c6:
f8:be:b9:41:c6:65:26:71:9c:fa:17:5b:fe:51:b9:01:99:e5:
e8:a7:39:d6:0e:7f:f7:45:16:b5:75:41:60:6e:be:99:d7:b9:
55:a9:58:e5:b4:93:d4:cc:fb:fb:43:f6:f1:2f:6b:54:1a:53:
40:68:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:08 2025 by rpki-client