Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969e2a2b-4d00-3012-a4bb-0b4f05dd3909.roa
File: 969e2a2b-4d00-3012-a4bb-0b4f05dd3909.roa (raw, json)
Hash identifier: B4tpK3Cxd3QNvcJ1+/bsKpvHM/uUzIc8N7LyuQE3v7s=
Subject key identifier: 59:45:0B:14:8F:F7:09:6A:68:6D:C0:48:6B:48:F0:A6:25:5F:03:DB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C262AA2F310DA7545206A980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969e2a2b-4d00-3012-a4bb-0b4f05dd3909.roa
Signing time: Mon 03 Feb 2025 11:12:30 +0000
ROA not before: Mon 03 Feb 2025 11:12:30 +0000
ROA not after: Sun 04 May 2025 10:12:30 +0000
asID: 30036
IP address blocks: 150.195.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:62:aa:2f:31:0d:a7:54:52:06:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:12:30 2025 GMT
Not After : May 4 10:12:30 2025 GMT
Subject: CN=17d9d0a0-39ed-48d9-9a75-6ede7d83d30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:55:5c:8b:75:e4:69:cf:ff:ef:a0:0d:c5:
03:fa:b5:f6:1d:4a:85:ce:1a:4d:90:e1:e4:89:3a:
d3:ec:13:ea:c2:ee:68:a6:4d:20:42:6a:63:5f:b2:
39:83:b4:91:8d:91:ca:df:a0:0f:a2:eb:f7:b3:52:
7a:13:69:23:1a:32:6a:dc:c6:2f:e7:9b:20:b5:65:
8b:ac:e5:17:13:e2:ac:51:ae:3c:d1:67:c4:be:8c:
ea:6f:31:8b:09:89:c2:96:c7:af:3f:77:eb:50:5b:
f6:c0:6f:d5:11:f6:83:ac:c4:f1:b7:78:1d:9d:2f:
f9:bd:23:4f:79:03:2f:82:3d:7b:95:c0:6c:21:1b:
a3:ad:5e:c1:50:76:52:83:55:14:64:11:79:d2:84:
36:74:29:37:8e:b3:15:d7:4d:7a:bf:7b:72:00:9d:
8a:13:ed:d2:60:44:7c:56:e5:56:a6:7c:78:0f:8c:
52:9b:e3:be:f7:17:3d:a7:9a:37:b7:12:b3:f9:99:
7f:d7:6d:c2:6f:38:08:99:56:01:c0:1c:e6:45:bb:
fe:c7:e8:be:9e:ca:75:ed:c8:ca:a4:53:6f:8c:c2:
4b:bd:41:b9:fc:55:3a:ee:d5:8a:c5:58:55:9c:16:
d9:2d:12:d7:f5:5b:9a:51:70:c3:9c:5e:ea:a1:82:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:45:0B:14:8F:F7:09:6A:68:6D:C0:48:6B:48:F0:A6:25:5F:03:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969e2a2b-4d00-3012-a4bb-0b4f05dd3909.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:b0:9e:1f:88:dd:96:2a:ae:05:ca:bc:12:f3:39:34:e1:a4:
d8:54:34:e9:e0:5c:62:e5:3b:31:3a:af:17:1f:40:c6:23:c8:
33:bc:13:3e:e8:14:e9:22:a0:94:d4:f4:85:e2:10:c6:9b:b8:
0d:d9:82:1d:e7:c5:20:ad:d8:5d:d1:5d:3a:f7:5e:e5:24:a3:
81:a5:ce:62:3b:fd:8b:a8:2a:75:3c:43:96:35:e8:3d:b7:45:
d5:43:ad:97:2c:b4:2c:90:7a:f3:ed:86:84:eb:77:e8:20:f2:
1a:ad:c8:59:73:89:51:69:9e:37:49:25:a4:53:fa:ac:0f:9e:
bf:32:87:c9:c7:f4:c2:bd:b3:c2:14:8e:f2:1f:fe:2c:40:4f:
63:f9:c1:66:4e:02:b5:de:3e:bd:54:69:c7:64:1c:c1:f2:79:
1c:70:d9:25:22:46:8e:2f:ae:13:ff:1e:dd:09:84:78:6d:f1:
3e:29:c6:77:3a:95:e0:cb:81:7d:a6:55:bd:a4:75:c4:0d:6c:
57:0a:04:2a:f6:a2:3d:04:b1:db:bb:6a:cb:30:63:7d:c3:8b:
f8:56:db:61:1c:ab:c1:9c:b6:b5:35:03:cc:ee:91:51:8b:a6:
bb:0d:d6:f7:35:68:f4:a4:8d:56:44:0d:fd:08:ae:2b:d5:f2:
93:d8:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:42 2025 by rpki-client