Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa
File: 9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa (raw, json)
Hash identifier: 1PMvVGHEf3MVD+lrpS8Of5ap3KokpoEMOSjYs3208OM=
Subject key identifier: F3:AB:78:5E:85:E1:59:6A:24:7F:70:0A:82:59:3E:68:2E:C3:B7:BF
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2636DECCEFDBC2B10A374A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa
Signing time: Mon 03 Feb 2025 11:14:03 +0000
ROA not before: Mon 03 Feb 2025 11:14:03 +0000
ROA not after: Sun 04 May 2025 10:14:03 +0000
asID: 30036
IP address blocks: 173.23.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:63:6d:ec:ce:fd:bc:2b:10:a3:74:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:14:03 2025 GMT
Not After : May 4 10:14:03 2025 GMT
Subject: CN=7b8f7c06-6dfd-4661-8e56-33843db3bcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:b9:a3:93:6b:c5:59:d8:82:87:bf:42:97:
1a:8b:c0:bb:00:c2:79:63:aa:45:0f:1f:a5:26:11:
d8:74:e6:a3:c9:58:6b:d8:22:32:af:b1:de:2f:94:
b7:67:82:3e:77:80:d9:4f:6d:85:2f:48:48:35:5a:
87:ba:95:8c:23:d4:5d:4f:bb:5f:f4:91:8c:ff:6b:
b3:7e:13:67:f2:4f:ed:51:c1:11:f0:15:ba:a2:8b:
c0:45:8c:99:5e:37:41:dc:97:31:d1:72:6d:34:f7:
26:20:51:ae:43:1d:2c:d4:3a:ee:0a:b0:b7:e6:c7:
94:c2:71:15:ad:d8:bb:d0:9f:ec:12:cc:2f:5c:2f:
20:95:24:3e:25:c9:ad:60:3f:8c:ec:11:51:5d:26:
94:83:45:a4:6f:3f:d5:d4:3a:e0:d2:18:72:43:93:
37:df:80:0c:75:b0:94:0e:99:68:3d:6f:54:a8:72:
ba:84:b2:5f:b0:4c:45:34:13:83:c1:8b:c6:d2:e8:
32:51:67:13:3e:bb:ac:ec:3f:a9:96:9f:64:ab:75:
0d:ed:33:05:64:fd:9c:c4:91:d1:1a:ec:ba:3c:29:
e8:bd:04:d9:4f:19:7a:36:f1:20:dc:d3:47:3c:a1:
ac:ea:78:7c:ea:4d:ce:48:1c:6b:5d:73:64:42:69:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:78:5E:85:E1:59:6A:24:7F:70:0A:82:59:3E:68:2E:C3:B7:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:df:a9:b2:d4:6f:02:8e:47:5e:56:35:81:0a:66:72:e8:1e:
38:11:7a:b9:02:f2:5e:71:7e:45:3b:54:07:9e:54:60:00:49:
ea:70:23:1b:a4:11:ad:84:82:eb:c1:89:6c:97:30:ff:63:95:
59:ff:25:b5:b8:ec:80:e5:ff:91:9b:6e:01:88:af:e5:eb:26:
68:39:e0:a5:b8:14:ab:6b:b7:c1:0f:89:8e:d1:cb:a1:53:05:
c0:1d:64:e7:37:ff:10:1e:2b:8b:c8:5b:61:4e:54:7a:64:94:
ba:70:7f:44:8d:4e:61:d3:d6:19:a7:56:24:09:0d:50:4f:c0:
65:36:be:4c:ab:e9:ec:48:d2:b8:9d:81:de:12:49:b6:78:81:
0d:d5:42:aa:29:bc:ff:63:62:05:a9:48:21:65:d2:3d:40:bc:
98:e6:be:60:7a:91:c5:b5:f6:55:cd:1c:15:66:13:5c:1b:72:
6c:e2:6f:1d:c2:d5:4d:b8:fc:c9:db:56:44:70:6a:98:22:07:
84:46:04:91:ce:0d:2a:8a:9a:fd:be:16:4d:7f:bf:e6:26:2f:
0f:ba:11:aa:b1:c7:89:a0:d7:01:74:49:7b:4e:4e:ab:a0:80:
3e:59:52:2a:e9:85:62:1a:09:77:2b:42:51:b8:a4:6d:1a:ec:
fc:d4:be:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:17 2025 by rpki-client