Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72a9715a-3730-3727-b82f-bbd3a0b5cf0e.roa
File: 72a9715a-3730-3727-b82f-bbd3a0b5cf0e.roa (raw, json)
Hash identifier: KGjmi+Al8MQZEKSMbdDHl/4mtSXoQ5X64laSRijIl/M=
Subject key identifier: 54:1F:86:3B:30:66:E4:D2:F2:F2:49:97:4D:CD:1D:82:A0:83:21:98
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C53285C75E93EBD3CCE0FC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72a9715a-3730-3727-b82f-bbd3a0b5cf0e.roa
Signing time: Tue 04 Feb 2025 11:22:56 +0000
ROA not before: Tue 04 Feb 2025 11:22:56 +0000
ROA not after: Mon 05 May 2025 10:22:56 +0000
asID: 30036
IP address blocks: 173.19.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:32:85:c7:5e:93:eb:d3:cc:e0:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:22:56 2025 GMT
Not After : May 5 10:22:56 2025 GMT
Subject: CN=9796a963-a036-4ccb-91d6-6c550caf5441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:23:b2:c4:07:ec:8e:e1:a6:52:15:93:ca:
4d:47:64:c8:f4:24:14:cc:3e:1a:2c:50:9b:b0:46:
c7:8b:85:70:86:33:b4:af:57:d8:a2:2f:fc:85:04:
95:3e:54:96:48:1c:d9:33:e6:41:5b:c2:7a:13:ed:
e5:de:11:33:61:f6:b5:8f:e2:93:f5:d0:c7:0f:44:
c8:47:ff:29:4d:3a:0c:91:11:28:a1:c9:8a:03:6b:
95:3c:eb:e4:36:88:9d:ea:82:ea:6a:6c:45:39:31:
e0:fe:93:8b:47:69:07:fb:46:67:ed:14:bf:e1:70:
14:a7:b3:e8:4d:e9:27:e8:a4:16:90:3e:3a:33:64:
32:1c:2a:e4:d4:c6:16:e8:1c:0b:ef:4b:32:7e:b7:
ef:ee:a2:b1:6c:09:5c:e3:0c:35:96:af:19:ea:7b:
ee:fd:13:03:47:cb:f1:ae:f6:a8:a7:af:e0:6a:0c:
3b:e0:2b:c7:4c:5e:57:16:71:ab:0b:c2:2b:f2:d3:
3d:b1:12:c7:e3:64:57:3e:13:9d:3a:eb:c8:28:ca:
f4:eb:38:e2:94:42:ff:24:c5:c1:1a:40:31:f0:7e:
f3:40:3f:9b:56:73:6b:e9:3e:1c:1b:68:f0:d5:55:
b0:4a:5a:f5:82:58:3d:d5:38:5b:7c:e3:ba:d9:78:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1F:86:3B:30:66:E4:D2:F2:F2:49:97:4D:CD:1D:82:A0:83:21:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72a9715a-3730-3727-b82f-bbd3a0b5cf0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:4c:3f:2b:27:e0:d8:e5:87:67:3e:eb:e4:ec:6e:bc:e5:d2:
9d:9c:12:c3:3c:6a:0c:0b:1b:07:20:e3:9e:3f:9b:30:86:50:
90:63:63:ef:10:fb:4a:ad:e3:4d:e9:33:de:85:85:fb:61:0c:
42:65:c6:a3:91:ad:c7:72:d1:ce:88:4b:e4:0c:70:de:70:4d:
eb:75:f2:ca:23:4c:33:04:99:05:bd:0a:7d:d6:f7:cd:c2:26:
ab:4f:7a:b3:ae:78:0c:bf:e5:a2:bf:3a:a1:a7:64:f7:a4:b6:
de:64:38:21:02:20:4c:85:1c:0c:db:ad:66:c3:fa:a5:3a:cf:
45:98:fa:85:0f:ce:3e:0b:58:36:52:c1:63:97:a9:f3:51:69:
44:0a:c4:15:59:78:e4:63:a5:80:87:df:17:2f:11:a2:84:64:
99:0f:67:69:90:b7:91:1f:0f:bd:14:87:9f:b6:2c:d9:a5:e9:
4e:7d:1c:95:58:e5:3c:ce:8f:44:14:ed:51:63:a1:ab:67:1c:
c8:46:81:b6:1a:23:b2:11:c9:6e:b7:ce:83:21:de:4e:47:31:
a5:41:39:a3:53:f9:1a:11:a3:57:32:f2:a4:ec:68:50:fa:d8:
da:af:7c:58:14:05:75:d3:15:67:53:c2:3c:75:f3:e8:ec:dc:
f1:d5:f3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:47 2025 by rpki-client