Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa
File: 61fb4c25-3250-39ca-9af1-37036ccc411d.roa (raw, json)
Hash identifier: I+4kHxFr0Ygn5cwn7oxAspBQ4TmysTurB0Xwud4BQEA=
Subject key identifier: A0:8E:27:1D:33:82:8E:CC:4D:A4:00:C6:12:89:92:3D:56:66:40:DE
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F75B17552B41025AAB43E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa
Signing time: Wed 05 Feb 2025 11:11:08 +0000
ROA not before: Wed 05 Feb 2025 11:11:08 +0000
ROA not after: Tue 06 May 2025 10:11:08 +0000
asID: 30036
IP address blocks: 173.23.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:5b:17:55:2b:41:02:5a:ab:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:11:08 2025 GMT
Not After : May 6 10:11:08 2025 GMT
Subject: CN=3260b7c4-59b6-483f-9bb3-b65fdd51d32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:73:3f:97:52:ce:81:e5:be:7b:af:49:d6:
41:42:68:2d:f5:4b:30:38:df:4c:27:23:c6:26:e5:
dd:45:ea:24:8b:e8:45:8b:24:4d:6b:bd:89:5c:fd:
a8:ac:4d:25:b6:57:86:39:b8:e3:11:41:6c:92:a9:
6f:43:19:9c:aa:1c:ba:92:fc:0e:3b:d6:a5:e2:35:
00:4c:e4:d0:e9:af:18:99:01:0c:ec:c3:1a:80:0f:
ea:cd:5f:29:a0:fe:4c:b1:17:14:6a:14:b4:ce:6d:
43:18:18:6a:4b:b0:e4:fd:50:67:98:11:7e:2d:9d:
5f:aa:77:14:98:63:4a:38:1d:7e:dc:2f:35:a2:d5:
a1:a4:18:eb:b0:f1:b1:82:45:cf:cb:62:7c:45:44:
0a:18:cb:d5:48:82:80:08:40:4d:8f:15:c5:3f:5a:
b6:7e:e7:30:10:70:ce:ad:ee:29:18:45:c0:24:0a:
73:93:73:04:df:77:45:e1:56:13:72:11:95:1e:f5:
98:c3:e7:dc:b8:b1:97:5b:be:14:83:21:e6:02:40:
d8:cd:99:e2:e1:e9:eb:c8:a0:24:45:59:df:63:26:
45:6f:46:09:a2:db:7f:e1:1c:5c:a6:b9:88:36:b0:
86:3c:4e:5a:2d:1c:be:08:58:09:c9:7e:fb:e9:93:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:27:1D:33:82:8E:CC:4D:A4:00:C6:12:89:92:3D:56:66:40:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:bd:07:ad:7a:0a:92:b2:4e:c8:fa:24:2e:7d:c1:f5:4e:e4:
57:c8:eb:00:7b:51:e4:d8:bb:e2:21:6c:ad:45:5a:03:df:e6:
7e:7f:26:d6:b4:c7:44:45:95:ab:84:c4:61:c5:73:43:e8:a9:
44:e5:35:97:62:66:a4:33:6b:bd:3c:5d:c0:96:42:89:6e:d6:
7f:98:87:45:d7:25:4b:59:f7:ef:10:9b:76:d9:d5:26:4e:fa:
74:8d:33:ec:18:25:7f:62:97:9a:21:fa:6d:8a:d1:98:ad:a1:
b1:a3:90:55:14:bd:a3:6e:d6:e9:a4:ed:63:da:1d:b8:ba:c3:
6f:12:4d:e4:22:8f:9e:12:79:43:94:78:6a:54:c3:bb:9a:af:
fe:24:69:70:92:e0:2d:d2:fc:7a:20:42:3c:06:b1:b5:e5:15:
5d:66:d5:e1:bb:a1:98:da:fe:0c:bf:c3:2b:a7:ba:c4:b9:cf:
a1:8b:9e:b8:96:f1:f4:99:22:36:f0:39:0d:5f:b5:4e:b3:c6:
bb:bf:2b:4a:c7:03:9b:be:01:d4:60:74:39:cb:30:2c:14:3d:
41:0e:ad:d1:f3:f7:75:ae:e2:44:3f:95:6e:bc:d8:b1:8e:e6:
2d:fd:13:6e:c0:61:e0:c5:7a:3e:8f:29:10:d5:30:1a:22:0e:
83:8c:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:24 2025 by rpki-client