Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa
File: 99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa (raw, json)
Hash identifier: GoOLNgjT6WL66nYQbxH2qwB5hYCPzK9KVi8A4a/xST8=
Subject key identifier: F3:53:52:6C:E8:DB:B3:0D:76:B7:D4:DA:37:A3:80:87:6D:7D:47:C5
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57F19BBD079A9D72ED15740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa
Signing time: Tue 04 Feb 2025 13:57:13 +0000
ROA not before: Tue 04 Feb 2025 13:57:13 +0000
ROA not after: Mon 05 May 2025 12:57:13 +0000
asID: 30036
IP address blocks: 173.20.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7f:19:bb:d0:79:a9:d7:2e:d1:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:57:13 2025 GMT
Not After : May 5 12:57:13 2025 GMT
Subject: CN=eb7bc353-0f0b-43c3-a96c-b8e0a5a3b7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:5c:2b:52:d6:6d:73:75:22:3e:d0:57:95:
49:6b:d5:a4:43:98:3e:94:07:4f:4f:bc:d9:dd:67:
5e:40:ab:65:0a:6b:a5:d7:b2:f9:d0:22:b4:4f:53:
07:3a:c6:a3:c7:de:52:8e:32:a4:f3:d1:02:1e:f1:
07:cf:ce:46:cf:4a:f6:1c:ca:c6:9b:aa:7c:d6:7c:
1a:2b:2a:f8:bd:60:7c:56:70:71:8a:53:66:bd:dc:
74:d2:aa:6c:64:12:70:40:22:bc:df:b8:cc:a9:b3:
77:e6:4f:91:8a:d1:d8:e8:59:d6:1a:b3:2d:e4:5b:
68:4f:ea:b1:06:84:b3:7a:58:e4:df:06:88:cd:fd:
13:55:1c:69:85:56:52:a0:59:5b:bb:53:a4:93:de:
c5:df:ed:73:00:99:15:36:aa:02:9e:17:4c:63:17:
67:a9:8c:6c:01:9e:dc:ae:dc:70:c1:15:cb:ae:7b:
ef:92:81:95:ac:02:ff:cf:c2:40:76:94:55:de:56:
09:df:45:34:72:a6:66:6f:e1:da:06:10:54:bb:41:
5c:fb:58:1e:73:5a:84:61:88:ec:67:d4:7f:8f:25:
f1:9f:e8:18:c5:f3:89:6e:ec:38:2e:26:ea:bf:67:
50:25:4e:fe:f0:3f:09:7d:b5:24:97:af:68:4a:5d:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:53:52:6C:E8:DB:B3:0D:76:B7:D4:DA:37:A3:80:87:6D:7D:47:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:4c:6c:a6:ac:1a:d7:98:56:09:ba:73:67:80:15:37:90:8c:
58:02:a8:2a:a6:23:75:32:6c:f9:a2:76:1a:4b:5c:68:d1:35:
a3:0f:b2:01:30:fd:ed:c2:75:21:c9:b7:7d:f0:a6:19:44:71:
c8:7c:1d:ad:6a:7f:f9:c7:f3:69:b2:c6:2f:29:cf:27:d8:6a:
c4:90:28:d6:32:86:aa:ca:a7:c7:97:c9:f1:9e:04:85:ec:fe:
14:50:29:17:d7:2e:c9:15:d4:1e:52:df:ea:b2:8d:ee:e5:67:
03:db:84:10:00:43:35:f4:8e:a9:2c:47:ed:ef:53:2d:4f:f9:
69:1f:8a:d8:93:46:db:c5:32:8d:dc:14:14:c5:8c:dc:84:10:
60:1d:4b:df:d6:da:39:a0:a0:a9:25:13:c6:8e:55:39:4d:d3:
b5:8b:05:42:66:cb:de:56:e9:a5:9a:a8:a7:77:98:0e:fd:0a:
34:6d:16:39:52:bb:91:5d:2a:d1:db:fc:d0:eb:46:2e:52:2d:
c5:19:d4:f6:ce:3e:b1:13:dd:b0:9a:df:15:83:c1:b5:d0:cb:
aa:3d:68:69:3e:a0:40:90:d1:7a:bc:76:b5:a9:b4:83:86:d3:
9d:15:07:0e:3d:5d:46:58:db:12:c7:aa:a5:34:2b:38:f7:d0:
82:38:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:32 2025 by rpki-client