Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8aa5ab16-a4a9-3aa6-9e1a-523f8f97234c.roa
File: 8aa5ab16-a4a9-3aa6-9e1a-523f8f97234c.roa (raw, json)
Hash identifier: lgVXNDD+Phm0JqG0JV7ybONf811lZdBuIOy9FiCbwcg=
Subject key identifier: F5:63:B5:D7:3A:26:EF:96:8D:91:D4:35:78:D0:42:F8:71:9B:1B:15
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C55EFA22F2185DF7F9B60CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8aa5ab16-a4a9-3aa6-9e1a-523f8f97234c.roa
Signing time: Tue 04 Feb 2025 12:52:30 +0000
ROA not before: Tue 04 Feb 2025 12:52:30 +0000
ROA not after: Mon 05 May 2025 11:52:30 +0000
asID: 30036
IP address blocks: 50.83.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:5e:fa:22:f2:18:5d:f7:f9:b6:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:52:30 2025 GMT
Not After : May 5 11:52:30 2025 GMT
Subject: CN=f9cfa567-fc1c-4c55-87ca-1c9704054bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6c:81:2e:4d:a5:3a:b1:51:58:32:e3:1f:4b:
e1:75:b8:11:e2:e6:ef:f7:8e:0b:68:7b:0e:58:c6:
07:ed:dc:94:d3:d6:a2:88:18:50:d9:a1:e1:6d:eb:
c6:00:de:46:9e:02:e0:9e:1a:32:db:fd:43:60:1b:
18:46:f2:9d:d7:48:ed:1e:30:b4:09:f3:3b:dd:0c:
15:c5:bc:c3:65:23:db:71:ce:88:82:e3:34:33:33:
0f:de:55:8a:3e:41:a4:39:42:b9:db:91:5c:ab:45:
4f:8e:f2:af:f5:9d:8f:f0:b3:53:03:c8:45:8e:91:
03:88:78:e0:4f:0d:3e:7b:fe:31:9b:4b:9e:7c:04:
da:12:2c:dc:82:32:6b:1a:e1:49:b6:0e:e3:68:27:
8b:0b:d2:2e:36:3a:6c:6e:8b:fc:b4:c8:da:a7:bc:
fc:07:9a:e7:18:fd:68:53:a6:00:9d:db:5a:19:8d:
b5:42:85:9a:59:21:aa:f8:14:33:83:58:e9:68:9d:
91:eb:af:79:d2:7a:79:91:ad:d2:6a:9d:8b:42:7f:
63:82:4e:23:a2:31:ed:34:02:6c:72:19:8a:df:c4:
1c:85:ef:79:b3:7d:f2:65:24:38:cc:a1:a7:5a:32:
d7:40:de:d9:5e:f9:8e:a8:ec:62:a2:06:7e:71:7f:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:B5:D7:3A:26:EF:96:8D:91:D4:35:78:D0:42:F8:71:9B:1B:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8aa5ab16-a4a9-3aa6-9e1a-523f8f97234c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
50.83.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:0f:87:df:9c:bb:04:76:82:88:46:45:c0:3b:60:6f:d9:66:
34:4b:56:fd:2c:20:1e:94:d6:a8:e6:b0:33:9c:09:e0:b0:5d:
b7:62:9e:8d:1c:47:c4:39:24:bf:bd:8c:ed:d6:fc:0c:51:f3:
e5:46:6a:d7:5f:34:a5:3a:c2:bd:ba:96:9a:78:21:16:32:d2:
ec:21:08:5d:1b:52:f3:18:e9:7c:1e:f8:59:1a:fd:7b:aa:66:
3c:20:eb:9d:9c:da:c0:35:ea:a6:1b:9f:4b:2f:91:ad:14:1c:
91:48:a7:d4:7e:98:c3:bc:8f:4a:41:ad:46:4c:2a:d0:f4:46:
84:09:a8:7e:6f:52:ff:ee:c5:05:ef:aa:26:93:a3:d7:3a:35:
5b:14:9a:83:df:7b:73:5e:39:94:99:4c:1a:9a:aa:91:25:9a:
a8:a0:ed:c8:9b:63:bc:1c:73:85:29:04:a2:ce:93:16:62:5e:
6d:9a:5d:ac:04:c0:c4:42:99:e3:94:1e:08:3e:59:70:8b:29:
0b:43:0d:75:a9:83:2d:b9:9e:42:52:00:09:a5:4b:e8:cc:41:
c9:ec:87:80:bb:93:c4:6e:57:6c:e6:50:b2:fe:69:4d:94:82:
33:60:2a:59:f9:13:84:ec:49:ee:a3:a8:40:17:f0:4b:b5:22:
ed:00:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:56 2025 by rpki-client