Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/872a6044-08ed-3add-beae-2974f9de2b65.roa
File: 872a6044-08ed-3add-beae-2974f9de2b65.roa (raw, json)
Hash identifier: 7r7IeX1oQhxFGFBUTnOsnjP72FfsSDtQMN8+1P3eoOM=
Subject key identifier: 40:4B:FB:ED:E9:5F:8E:A4:08:7A:21:91:7E:A8:BE:CF:4D:1C:DD:B3
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848A3B30609D93A223D94B50200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/872a6044-08ed-3add-beae-2974f9de2b65.roa
Signing time: Thu 23 Jan 2025 11:24:22 +0000
ROA not before: Thu 23 Jan 2025 11:24:22 +0000
ROA not after: Wed 23 Apr 2025 10:24:22 +0000
asID: 30036
IP address blocks: 173.16.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:b3:06:09:d9:3a:22:3d:94:b5:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 23 11:24:22 2025 GMT
Not After : Apr 23 10:24:22 2025 GMT
Subject: CN=8e41a190-1457-4b16-aaa0-97fade1ac893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3d:fd:a9:99:10:0b:57:24:1a:21:be:67:92:
18:86:de:e4:14:ab:25:df:f3:a7:b6:3e:b2:9c:69:
cb:e9:68:f8:e1:7e:33:aa:34:4b:c4:23:3d:51:88:
62:66:40:35:92:9a:5a:29:d9:11:35:7f:35:02:ea:
77:11:6d:08:4a:10:b9:4f:33:3e:3b:32:40:68:87:
5b:84:aa:32:9d:f2:5e:27:a2:a8:d4:cd:40:d3:34:
52:1b:b1:e5:73:01:d3:7e:12:2c:f8:73:b2:9b:9b:
02:77:b2:77:23:72:ab:25:c7:fb:07:62:4d:b7:ae:
a6:57:d2:6f:8a:1f:49:eb:62:38:7a:76:ef:13:7a:
96:b8:de:b7:29:a7:0a:11:9d:70:0b:f4:bd:f5:ea:
59:90:a8:18:8b:3a:11:57:dc:74:7c:b1:8c:6d:cd:
de:8f:16:03:90:e9:57:75:b5:a2:d4:49:cb:03:40:
b4:3c:d5:82:02:a4:a1:57:6c:cd:3e:c2:53:cf:17:
9c:b2:f9:89:52:a3:1b:4d:b9:30:74:58:3c:cc:00:
9f:38:c9:91:c2:8f:07:4a:22:3d:dd:04:0f:3b:fe:
13:1a:8a:c4:cd:92:75:76:f7:72:e5:c8:30:b9:3d:
ef:2a:fa:04:ac:14:93:09:6d:72:37:ae:1b:d6:56:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4B:FB:ED:E9:5F:8E:A4:08:7A:21:91:7E:A8:BE:CF:4D:1C:DD:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/872a6044-08ed-3add-beae-2974f9de2b65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:88:c4:49:39:70:10:f9:bf:dc:ec:8b:b6:f6:1e:4e:47:43:
39:c3:93:01:79:8c:a4:f0:ed:01:d5:1f:43:61:f3:dc:12:d0:
38:da:73:f3:9a:3b:f3:f9:06:c1:83:3f:84:68:cf:3a:37:59:
45:49:16:f7:45:65:41:d6:f0:29:69:b3:c4:2d:a7:2f:f8:99:
70:70:ad:ae:b6:63:28:11:55:8c:41:19:3e:28:9b:c8:3e:a5:
65:f6:81:ec:84:0f:43:84:6f:17:35:82:d5:a7:87:d7:52:7a:
a4:bf:51:1c:0f:79:79:91:9b:7b:57:d3:d4:00:88:af:eb:60:
c8:f0:cb:81:35:96:e3:20:85:8c:c4:59:83:b8:03:58:6e:21:
e3:5e:b3:1c:c9:e5:5c:46:a5:71:49:54:33:00:1f:f1:31:91:
e7:94:48:13:7e:80:b2:81:9e:de:17:f1:14:d6:1f:ee:3e:cc:
04:06:4e:4b:ea:d1:9b:5c:01:92:e5:d6:ab:c4:62:32:28:87:
c2:7a:9d:a6:b4:93:76:d6:42:a2:a1:84:1b:2f:82:a9:b1:f5:
3a:ce:4b:a4:85:83:17:c3:91:a5:d5:85:83:b2:2a:3f:ae:ee:
bf:13:39:4e:80:2d:cb:e1:a0:36:5a:78:f5:8e:ef:85:69:c9:
f8:91:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:46 2025 by rpki-client