Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa
File: 6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa (raw, json)
Hash identifier: 6jL3apoqRlYyraFjUMHKpw1xohrFywLQOQd+T16/SHI=
Subject key identifier: E8:45:14:BF:DD:17:AA:F6:4B:E2:C3:1D:C5:7F:AD:0D:97:D4:D3:22
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C55880FAE95137C314C87280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa
Signing time: Tue 04 Feb 2025 12:39:27 +0000
ROA not before: Tue 04 Feb 2025 12:39:27 +0000
ROA not after: Mon 05 May 2025 11:39:27 +0000
asID: 30036
IP address blocks: 173.20.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:80:fa:e9:51:37:c3:14:c8:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:39:27 2025 GMT
Not After : May 5 11:39:27 2025 GMT
Subject: CN=ea5e4a26-7104-4bac-9d60-7035345e5518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:6b:9f:c7:e3:0f:be:e9:65:98:92:36:74:
44:00:b2:b8:d6:82:3f:2a:c0:b7:db:57:ed:c1:91:
52:94:69:e3:ac:93:60:c5:7a:99:2e:36:46:1d:1f:
3a:ec:ac:00:20:80:0c:4f:67:6c:c9:78:83:a3:2c:
57:b0:5c:1a:8c:98:bb:25:48:64:57:9c:8a:5e:00:
0e:4c:10:bf:71:95:8b:d0:55:66:9e:ae:48:41:7d:
59:f5:9a:6e:cf:8a:6e:52:03:bc:64:66:3c:b8:bd:
40:46:50:6b:18:2a:e7:17:9f:b6:99:14:91:d7:ad:
86:e0:bd:a8:ab:fb:2f:1d:2f:6d:ab:c5:d8:f3:49:
9e:d5:be:fb:4c:2f:ac:a8:ae:af:85:52:db:9f:d1:
2a:d4:f0:8c:26:08:0f:25:89:1c:91:f9:a9:66:87:
a3:3b:eb:0c:94:6e:75:4c:ba:34:27:a5:54:83:73:
83:69:92:8b:5a:b3:c2:80:6b:09:4f:e1:40:83:8a:
3a:4e:7b:6b:2f:c8:5c:cb:8a:9b:c2:d1:8a:71:3a:
29:62:51:cb:81:71:31:5d:d5:25:a9:92:87:4d:cf:
0d:56:e5:71:f1:7e:84:b5:70:d9:bc:b8:7b:3d:b7:
c7:d5:c6:dd:42:87:5d:53:61:4b:16:53:67:4f:17:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:14:BF:DD:17:AA:F6:4B:E2:C3:1D:C5:7F:AD:0D:97:D4:D3:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:22:6b:e6:53:e6:6d:e0:45:7c:5c:a3:62:2a:48:ca:98:ed:
a4:b8:39:a2:07:68:41:72:86:61:ab:57:c7:a5:5f:fd:9a:a9:
36:78:6c:62:30:51:1a:2a:ba:58:9b:4b:2e:c2:7e:7e:50:86:
26:69:17:68:04:1b:3a:8d:17:be:e1:a1:41:4f:28:13:05:c0:
4d:1f:d6:f4:c2:5d:22:7b:6f:8a:b3:01:04:4b:98:cb:a7:4a:
2a:4d:39:08:d4:84:5a:09:17:df:6c:39:68:e6:59:bc:3a:3b:
cc:90:60:50:f7:a7:d7:68:ce:6c:d3:60:d0:29:86:d2:6a:e1:
21:71:49:49:bb:80:f4:12:96:03:2a:b3:94:38:0f:31:25:3f:
04:d0:fb:e0:5c:42:1c:36:f6:56:ea:51:7e:97:48:1d:65:c8:
8f:fb:da:ec:8e:f8:52:63:9c:08:cf:84:ca:ce:a7:7c:bb:2e:
9d:bc:f8:23:3b:f5:6a:78:2e:cb:05:d7:92:86:dc:55:3a:37:
9a:1f:88:75:52:9b:9f:ed:dc:aa:e2:61:ec:3b:79:cb:6b:5d:
e5:ea:15:bf:c0:13:9a:75:07:a5:a7:9f:7b:7a:dc:f7:da:1d:
33:fd:74:d0:6e:5f:ff:8c:62:bd:da:65:df:20:93:c8:21:e3:
6c:3a:de:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:09 2025 by rpki-client