Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa
File: 9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa (raw, json)
Hash identifier: R5isyrZ4umu+iClDHbbPTMcEN8UZGY1A+NrNchZONuI=
Subject key identifier: 95:D8:5A:51:71:26:4A:A4:BA:00:35:0B:80:D0:65:8F:2F:5A:EA:70
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7FDA7EFF1A4A2F132595300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa
Signing time: Wed 05 Feb 2025 11:23:50 +0000
ROA not before: Wed 05 Feb 2025 11:23:50 +0000
ROA not after: Tue 06 May 2025 10:23:50 +0000
asID: 30036
IP address blocks: 173.19.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fd:a7:ef:f1:a4:a2:f1:32:59:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:23:50 2025 GMT
Not After : May 6 10:23:50 2025 GMT
Subject: CN=d4508443-7855-45c8-b0ce-2041fd7362a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:a7:6f:99:ff:33:9e:ba:ec:07:1a:b8:19:
db:ca:6a:96:ce:82:76:5f:75:f8:a7:5f:08:b9:06:
32:88:fd:63:b7:ca:e2:f6:ef:c6:3f:1f:04:8a:44:
87:12:92:b1:dc:ba:b5:fa:d1:e5:bc:68:bf:75:1b:
57:92:ec:d9:35:20:47:db:1d:7e:41:2f:85:0d:ca:
2c:ea:cb:7e:9b:e2:0e:c6:2a:66:c7:4d:12:52:3a:
7e:35:6d:19:e7:af:0b:8b:23:ce:91:b5:47:57:72:
09:fb:4c:c6:30:10:94:0a:66:ea:34:0e:e7:ff:3b:
bb:04:bd:43:bf:07:14:e6:97:12:98:83:7d:c7:06:
11:f3:5a:bb:6a:42:fc:5b:87:46:91:68:c5:ac:b2:
43:70:91:a4:17:8c:61:1e:17:70:b5:1e:41:33:6f:
d0:b4:2b:00:bd:bf:5f:62:24:a3:3b:32:4d:00:ce:
1a:28:c9:77:6e:ee:04:c3:c4:19:5e:5b:e0:99:ed:
67:64:dc:78:43:36:be:e2:17:53:66:38:0e:05:10:
57:8a:95:fa:38:8d:f0:32:8d:66:8d:90:05:c1:bf:
4c:63:e6:68:6b:14:9c:4b:ee:b6:bf:d1:df:5b:b2:
8e:c5:18:01:f5:2f:6e:59:ba:c9:24:3c:40:2a:1d:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D8:5A:51:71:26:4A:A4:BA:00:35:0B:80:D0:65:8F:2F:5A:EA:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:bc:11:15:d9:c9:c9:a2:0b:ad:00:2c:45:98:d0:78:9f:75:
e5:2d:e2:08:bc:49:04:54:63:45:e5:79:e8:88:10:df:9f:85:
b3:2e:c8:60:f5:38:b8:5d:ce:48:84:fc:8f:03:f7:ce:14:91:
72:9f:a9:45:f4:86:07:37:24:da:ba:a0:07:c0:8d:28:6c:3f:
61:6f:aa:ac:47:1c:9c:fd:61:be:69:dc:e2:62:99:91:03:4d:
13:81:ce:61:58:28:fe:6a:3d:7b:c7:7a:81:70:6a:3c:2c:66:
6f:17:61:fb:1a:da:ea:13:c8:e6:be:f6:38:cc:c7:f5:83:9e:
b1:f2:81:69:5b:2b:bf:d3:9e:b0:bf:14:83:20:21:64:ee:00:
52:52:fd:a3:ae:8d:05:93:15:bf:cb:f1:ac:ac:17:f6:23:de:
13:81:35:af:4d:8c:8f:ed:d1:d6:46:da:3c:38:97:54:02:b0:
d7:8a:7e:e7:92:9e:80:67:39:14:75:15:05:1e:76:1b:eb:af:
72:e3:00:49:0d:c1:00:5b:93:28:c8:7c:26:88:e9:c3:4e:57:
5e:18:9f:76:63:01:d1:1a:78:dd:79:50:c2:a7:fa:e5:1d:34:
c2:b7:d3:cf:6b:5f:5d:37:8f:a4:de:eb:44:ce:be:2b:ae:a3:
fe:58:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:25 2025 by rpki-client