Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7a9023-27f5-3b24-9bfc-f32fddbb7b13.roa
File: 7c7a9023-27f5-3b24-9bfc-f32fddbb7b13.roa (raw, json)
Hash identifier: z/ytVtyJOP+xFxbGJTKJ4TK1BTQVBr+Ue3AnJsPnP5U=
Subject key identifier: 4A:BA:EE:A0:C9:B4:47:D8:16:26:C9:6D:BA:66:86:7E:8C:7E:C4:0D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F7C4C6054348884FF47680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7a9023-27f5-3b24-9bfc-f32fddbb7b13.roa
Signing time: Wed 05 Feb 2025 11:11:58 +0000
ROA not before: Wed 05 Feb 2025 11:11:58 +0000
ROA not after: Tue 06 May 2025 10:11:58 +0000
asID: 30036
IP address blocks: 173.31.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:c4:c6:05:43:48:88:4f:f4:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:11:58 2025 GMT
Not After : May 6 10:11:58 2025 GMT
Subject: CN=c1e314ac-830f-4301-a157-b344e7ae337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:c5:6f:d9:b5:54:bd:d0:b3:d0:dd:8b:e0:
25:56:9c:66:03:ae:f1:f9:63:9b:40:a7:f8:9e:f0:
9f:bd:81:8d:98:14:b9:57:36:c4:40:9d:5a:59:19:
ad:30:80:d3:76:67:9f:c4:78:d2:39:a6:a3:af:85:
7d:36:7e:14:df:58:6c:84:01:11:92:3b:21:20:8b:
bb:53:8b:55:95:b3:be:fe:45:0a:b7:bf:d1:70:0f:
a5:86:6e:13:e1:c5:05:05:d1:4a:45:70:74:76:af:
e1:90:24:0f:3e:f8:bf:42:38:a8:1a:81:b9:07:f9:
e7:a7:64:b1:29:41:e7:53:7c:8b:e3:71:05:dd:b6:
09:70:1e:92:47:a2:9e:07:4d:df:a1:01:36:3d:e7:
cb:e6:42:37:ab:64:d3:e7:41:39:a5:99:d6:88:c2:
9d:6a:f7:76:43:b2:1f:03:15:c1:a8:92:1f:7a:66:
dd:66:0f:d7:d0:c0:32:c8:a3:f5:7f:89:ff:f9:0b:
56:4f:99:09:21:c8:98:d4:0d:f8:25:9b:68:40:bd:
fd:ab:2d:49:35:34:dc:2d:a3:51:1d:f4:eb:c3:15:
72:e9:35:c9:3a:7f:3c:4f:db:0f:b8:a8:e5:04:c2:
21:ad:73:00:70:c5:29:3c:65:3b:36:3a:9e:06:fc:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BA:EE:A0:C9:B4:47:D8:16:26:C9:6D:BA:66:86:7E:8C:7E:C4:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c7a9023-27f5-3b24-9bfc-f32fddbb7b13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:20:56:51:81:af:3e:15:43:a4:fd:9b:61:07:52:5f:9d:4d:
f8:f9:7e:eb:7c:ed:ef:fd:0b:16:88:17:0f:3d:b9:d9:3c:ff:
cb:6d:88:fd:7b:49:bd:f7:d9:68:41:8a:7e:67:b1:8d:38:73:
5c:ff:c3:ee:c2:23:77:4e:89:36:2c:46:41:f2:a4:86:e7:d1:
bb:b2:fb:db:5e:62:13:7d:aa:1d:b4:02:55:31:af:46:d3:f6:
77:31:68:ec:ec:79:d9:48:54:c7:8a:14:06:82:d4:75:37:46:
b1:c1:2f:99:65:d1:57:ab:4e:4e:ad:6f:57:69:de:ab:b7:d1:
ec:9a:2b:88:20:6c:46:cf:c1:11:25:4a:46:fd:25:eb:fd:68:
76:43:18:36:c3:6a:3a:55:b3:ff:b4:34:91:df:2a:c3:0e:b5:
97:b9:a5:71:19:18:02:a8:81:76:47:ff:85:2c:bd:6c:a9:b9:
b3:cb:5f:ad:76:9c:de:29:5b:d0:47:b9:d8:2c:2c:17:dd:de:
97:8b:f2:77:38:ef:c4:f0:86:7d:4b:83:ec:4d:d2:6d:64:be:
9a:21:1b:7f:ad:82:a2:8e:2f:ab:cd:70:1f:9a:6e:47:d1:af:
03:34:a2:fc:77:c8:8c:4f:ca:2c:a2:26:0a:b2:7e:3f:b3:8b:
51:96:2f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:00 2025 by rpki-client