Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fd65bbf-0b37-37c6-bfd2-5292534cf1ca.roa
File: 9fd65bbf-0b37-37c6-bfd2-5292534cf1ca.roa (raw, json)
Hash identifier: zYwEu15B1/PWFvJRoKJGlNPeOAvtWUtfHWm2M8yKhIQ=
Subject key identifier: E7:CA:5C:0E:FD:E3:12:80:BD:67:09:BF:CF:61:79:B4:A7:3A:71:E2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57FD809EADF5EF910018B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fd65bbf-0b37-37c6-bfd2-5292534cf1ca.roa
Signing time: Tue 04 Feb 2025 13:58:43 +0000
ROA not before: Tue 04 Feb 2025 13:58:43 +0000
ROA not after: Mon 05 May 2025 12:58:43 +0000
asID: 30036
IP address blocks: 173.31.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7f:d8:09:ea:df:5e:f9:10:01:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:58:43 2025 GMT
Not After : May 5 12:58:43 2025 GMT
Subject: CN=cd069b51-0758-4272-aac1-5c99a70a59c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:32:ec:bb:b4:8a:8f:29:fa:4b:f0:5a:9b:a9:
16:db:34:19:81:ec:db:6a:a5:75:68:fd:a7:69:0a:
6d:e9:cb:77:d9:cd:b4:a4:11:7f:14:23:01:45:a1:
1c:e0:3f:b8:40:11:4e:7d:8d:46:e6:8e:28:a2:93:
d8:36:b7:9f:85:44:f4:d4:a5:a1:c3:7f:fc:9a:a6:
78:37:ad:95:24:31:ce:c0:df:af:9c:ac:a7:9b:b6:
db:7f:2b:27:ad:d7:57:f0:b2:7a:ea:2a:d6:48:6f:
16:86:e7:84:50:91:27:0e:33:2a:9f:df:c7:e3:53:
23:50:f5:e2:8f:7a:44:8e:bf:2f:35:7d:a7:79:35:
28:0c:c7:b8:82:23:13:c8:b7:58:38:52:45:37:d4:
b7:7d:32:38:5f:0a:65:c8:a1:0b:a7:c6:4c:b6:c5:
6a:e1:a7:0a:8b:03:2b:c4:83:86:95:12:19:75:64:
8c:6e:22:e3:cc:b9:38:ce:82:b0:39:88:45:fc:25:
96:e5:56:39:4f:40:13:02:c4:87:1e:e1:bc:d0:55:
55:30:99:3a:66:a5:08:de:b7:6b:68:14:36:fe:5f:
67:4a:61:9c:0a:0a:13:66:80:c4:cf:b2:a1:e3:57:
1f:4f:d1:7d:a8:cc:ef:ab:d5:b2:9d:89:f9:43:2a:
6d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CA:5C:0E:FD:E3:12:80:BD:67:09:BF:CF:61:79:B4:A7:3A:71:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fd65bbf-0b37-37c6-bfd2-5292534cf1ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c2:1c:64:6d:e0:84:f6:7d:f1:af:b2:39:15:98:cc:01:d8:
90:1d:fb:75:3c:9b:2a:cf:be:e1:f9:27:21:84:1d:8d:54:f4:
39:37:ef:42:db:57:f2:ef:34:d8:98:41:ac:b2:27:e0:46:80:
6d:f2:9c:5c:2e:75:51:ae:3b:c4:14:7d:9a:f0:04:d9:1d:30:
db:9e:4e:42:95:0a:3b:f8:2e:da:fc:cc:dc:b2:26:13:a1:d0:
a7:f5:e9:6b:be:e9:12:9b:21:99:02:93:08:81:7d:ed:46:b0:
05:fb:35:e3:97:19:01:cf:a6:a8:6e:7d:b4:4a:06:c5:f6:ce:
aa:53:12:b3:71:ce:db:82:67:ca:c1:11:47:8d:40:11:bf:76:
5a:75:ed:a2:2e:65:ae:db:40:b9:e6:53:c0:14:c2:0c:a8:84:
54:cc:1d:11:3e:9b:3b:60:d9:5d:d8:04:03:bb:59:1a:1a:1c:
67:1a:c7:4e:7e:0e:47:53:8b:ca:bb:cb:b5:f6:1a:c6:3c:c8:
f6:2e:d6:97:88:b8:cb:76:43:37:eb:c9:c0:c0:e1:d8:c2:a2:
d8:ef:19:f3:51:86:b9:2b:c5:64:43:a4:d8:63:fb:bd:c6:87:
03:62:00:bd:46:a9:c3:26:4f:7d:23:09:2a:99:9a:56:20:b7:
7b:97:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:15 2025 by rpki-client