Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/829764cf-3738-30e5-93e1-768795997e26.roa
File: 829764cf-3738-30e5-93e1-768795997e26.roa (raw, json)
Hash identifier: GLgblpFqKBmlPW143fpSUVCvSv7DQ936WUoH7hofsos=
Subject key identifier: D5:8A:6B:1A:CD:A9:14:C6:23:1F:C3:81:81:E5:62:41:D1:B1:29:B9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57F714BB6E1B620A3AC4C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/829764cf-3738-30e5-93e1-768795997e26.roa
Signing time: Tue 04 Feb 2025 13:57:55 +0000
ROA not before: Tue 04 Feb 2025 13:57:55 +0000
ROA not after: Mon 05 May 2025 12:57:55 +0000
asID: 30036
IP address blocks: 173.25.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7f:71:4b:b6:e1:b6:20:a3:ac:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:57:55 2025 GMT
Not After : May 5 12:57:55 2025 GMT
Subject: CN=cc5ef94b-1c11-4b2f-a740-c63e85d2e43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:0b:80:eb:f2:e1:d4:1b:62:f1:bc:47:e3:
11:6c:07:1d:44:d3:07:2d:48:2c:69:98:06:63:70:
6d:30:43:6f:aa:23:01:33:a8:33:f5:e6:37:c0:01:
55:bd:8a:63:30:b1:89:2c:ec:7b:10:ab:3f:fe:db:
57:8f:2d:27:af:26:e6:db:4b:84:0a:6f:67:dc:fe:
7f:20:af:f9:4b:a0:8a:9d:8c:88:93:24:6d:e4:fc:
52:1d:64:cd:83:eb:d5:4f:5f:ce:ca:82:ab:1c:bb:
d5:87:d1:e7:86:7f:b2:1a:23:d8:74:72:91:61:5f:
29:9e:66:41:18:05:bc:7e:c2:b9:82:44:f2:12:1a:
66:d5:c4:8a:a8:04:43:a2:bb:0e:4d:f8:f3:2c:6f:
ff:9d:b4:8d:55:1a:43:98:61:6a:9c:52:91:32:84:
9a:06:7c:4e:09:c2:5e:b9:a0:4e:36:a6:01:91:34:
6d:bc:b7:b6:38:66:e0:96:92:e6:5c:48:b2:f5:69:
d1:15:eb:05:32:cc:19:6d:75:a5:56:03:07:68:80:
63:83:8d:60:79:63:0b:71:6f:a7:dd:f7:50:45:ec:
be:80:7a:6a:5d:83:f7:33:82:e2:56:f5:69:33:b1:
bd:bb:7f:8c:e5:78:39:8d:10:8f:7f:f8:5f:df:95:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8A:6B:1A:CD:A9:14:C6:23:1F:C3:81:81:E5:62:41:D1:B1:29:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/829764cf-3738-30e5-93e1-768795997e26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d8:da:37:79:91:c8:95:b0:ee:4c:f5:70:3e:b2:68:f1:86:
7e:77:99:40:e9:10:28:b8:03:da:c2:12:d6:ed:7f:d5:9a:73:
39:21:c3:b6:58:ee:71:c4:df:50:bf:f6:d5:03:5e:3d:af:2c:
bd:59:1d:1f:b2:6d:78:81:3b:e0:c3:ee:98:a1:97:29:64:b4:
cf:4c:04:9e:f1:0c:4c:da:70:c5:c7:a9:53:31:49:ae:03:d0:
17:97:46:93:20:a7:70:c1:46:5a:cd:38:dc:3a:1e:60:42:bd:
29:8f:22:99:64:96:db:a6:11:14:87:2f:39:0b:ac:9b:35:eb:
be:0a:10:4a:32:bc:a2:6f:cb:ae:41:c2:a4:aa:e4:a0:01:49:
00:e9:fd:7e:fe:4c:a8:d8:31:65:df:08:fa:7c:f1:41:8f:bd:
79:d9:fc:1a:34:7a:96:db:2c:3a:90:d4:ad:97:db:60:04:e6:
92:22:5a:ce:e7:5b:dd:e7:af:37:49:35:fb:3c:56:af:6a:f4:
8c:cc:27:26:54:05:6f:cd:a0:fe:de:8e:35:e5:7c:fa:2e:0b:
92:5e:73:a8:2f:df:4c:40:bd:67:ac:b8:02:61:39:9c:b9:e9:
05:f7:96:fd:71:0e:7e:ec:d8:8e:24:48:37:cf:27:65:b9:da:
8a:ce:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:58 2025 by rpki-client