Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68347c4b-9adb-3382-8d65-86fed7f10cd5.roa
File: 68347c4b-9adb-3382-8d65-86fed7f10cd5.roa (raw, json)
Hash identifier: N/0PbHmJVBTf1kIxWc2/MmgwJZjxNiXAo8Y8kKsKptk=
Subject key identifier: 2C:E4:B3:1F:33:96:C9:D1:39:F5:D4:F0:87:BC:82:AD:BB:00:FE:C3
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7FD1FB699270BEF42D90280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68347c4b-9adb-3382-8d65-86fed7f10cd5.roa
Signing time: Wed 05 Feb 2025 11:22:46 +0000
ROA not before: Wed 05 Feb 2025 11:22:46 +0000
ROA not after: Tue 06 May 2025 10:22:46 +0000
asID: 30036
IP address blocks: 173.22.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fd:1f:b6:99:27:0b:ef:42:d9:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:22:46 2025 GMT
Not After : May 6 10:22:46 2025 GMT
Subject: CN=a84dc80b-8c1c-49f2-a60d-70428e4f9904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:48:dc:aa:c9:cf:fc:c9:50:f8:1c:00:1e:
7a:44:0f:73:93:31:70:2d:ee:af:80:64:42:bf:6d:
ec:3f:02:56:bf:c4:4a:e0:45:39:5b:b7:45:f1:ad:
f9:21:35:fa:45:7a:70:84:37:0e:32:26:9e:ff:73:
40:28:f9:ed:06:09:e7:bf:7e:85:3f:ca:67:16:35:
01:21:e9:eb:8d:fb:c9:f1:11:0f:8e:75:d6:ee:f0:
a7:f9:8e:b3:60:67:03:0a:6a:eb:e2:8a:bf:a4:ba:
ee:ee:8e:1f:53:02:16:12:22:74:ee:42:26:12:f3:
57:76:9a:5d:8c:41:a4:a6:fe:cb:24:0c:11:34:44:
c5:3b:b5:48:80:44:1a:ee:a1:0e:e5:70:bf:4c:8b:
f8:1a:ba:d9:ee:d2:8c:f4:c3:59:30:90:a7:c2:87:
02:fb:66:85:ca:0e:4c:34:c3:18:86:84:4e:f0:ee:
3f:9b:36:79:84:44:48:4a:38:d3:fb:9b:0d:c8:74:
a9:57:07:11:12:46:aa:e0:90:c7:94:8a:0b:bf:9c:
da:77:11:e3:3c:08:d7:40:d2:f6:82:a8:48:ee:4e:
f1:89:e2:f1:5e:f0:34:30:65:6e:59:8f:eb:76:fc:
e1:d6:04:8c:9c:e2:2a:fb:f9:9b:ef:da:bd:61:b6:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:B3:1F:33:96:C9:D1:39:F5:D4:F0:87:BC:82:AD:BB:00:FE:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68347c4b-9adb-3382-8d65-86fed7f10cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:6b:60:b3:2b:41:02:aa:cd:fa:43:f3:92:4a:b6:c7:48:ce:
9c:a5:24:4e:39:8c:6d:63:fd:32:ff:c3:a0:48:23:0b:2c:41:
2e:f6:d3:80:c8:6c:78:d7:19:36:43:3d:40:70:dd:1c:82:59:
65:4e:60:c1:5e:12:c1:b5:b6:9f:9f:28:2e:eb:15:ac:4e:09:
8c:ae:fb:51:34:78:fb:12:9f:f7:fe:69:08:4d:33:d8:98:4e:
7e:00:21:a7:be:d4:7b:16:af:ba:4a:cd:26:26:73:ff:6d:36:
d2:a8:97:c8:54:99:b7:98:aa:77:86:ef:dd:b7:c5:67:f4:79:
de:98:1a:e4:ce:66:d3:48:2e:84:46:3d:c9:26:a3:5b:f4:b5:
fc:50:a0:3a:61:17:ae:d7:3d:ef:46:0f:dd:e0:3a:84:70:bc:
49:ec:83:8f:50:f1:6c:46:d2:2c:76:23:ac:6a:7a:9c:de:04:
dc:c5:ad:a0:f9:02:d3:67:f9:95:46:e9:84:ff:cf:e7:5a:e1:
cc:80:f5:5e:b4:57:62:b6:30:63:75:10:6a:38:69:28:28:0c:
3c:8d:43:92:83:94:6c:38:6c:c9:8d:0f:67:82:5e:9a:3b:d1:
5e:31:6c:ce:64:49:fb:79:19:ef:1c:61:85:e6:5e:09:47:74:
10:da:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:01 2025 by rpki-client