Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1f5082c-a37c-367c-adb2-efd9890c1b4a.roa
File: a1f5082c-a37c-367c-adb2-efd9890c1b4a.roa (raw, json)
Hash identifier: ICmZX+uXAJhVueaCoOBh3XZTV9SEcxY6/Ol/MSRG7qo=
Subject key identifier: 90:C7:BC:26:EF:A0:1E:51:83:9E:30:14:FE:70:2B:C5:B7:AA:BD:FD
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C558A03D6A33932ECC4B6900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1f5082c-a37c-367c-adb2-efd9890c1b4a.roa
Signing time: Tue 04 Feb 2025 12:39:42 +0000
ROA not before: Tue 04 Feb 2025 12:39:42 +0000
ROA not after: Mon 05 May 2025 11:39:42 +0000
asID: 30036
IP address blocks: 173.23.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:a0:3d:6a:33:93:2e:cc:4b:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:39:42 2025 GMT
Not After : May 5 11:39:42 2025 GMT
Subject: CN=527ee142-ef8a-423b-a446-a94cbafa7b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:45:2b:d0:20:2c:c5:8f:83:14:6f:93:88:
c4:9c:89:5f:ca:d9:48:a3:e6:ba:99:7a:14:b0:53:
fc:61:f3:b9:23:18:32:60:0b:7f:bd:fc:44:35:9c:
dd:cc:4f:af:26:73:62:72:32:b9:e1:b7:c8:82:51:
b2:73:6b:1d:ca:30:f7:47:61:ab:54:18:47:e3:d9:
00:5e:01:d4:f4:1b:92:fd:d1:1f:81:0b:f0:71:b2:
5a:c0:90:06:db:21:d8:d3:30:89:de:d8:e6:e8:d8:
0a:aa:85:be:99:cc:cc:c7:d6:29:34:07:2e:7b:12:
5d:3b:eb:0f:49:94:8d:80:98:5c:9e:40:15:cf:d1:
38:cb:38:f5:72:93:88:4d:65:3d:11:1b:a7:0d:2a:
f6:4d:4b:19:60:2a:08:81:e0:67:ff:62:6e:0d:06:
a8:13:41:50:17:9a:f6:86:47:da:59:49:6d:d2:60:
67:fa:29:3f:2e:58:3a:21:74:3f:7c:3a:5a:34:dc:
c1:25:cf:0a:a7:a9:c4:54:21:13:e7:95:6d:78:fa:
79:f8:5e:f6:f1:6c:57:4c:ce:8e:62:44:49:27:16:
3d:36:4a:c1:f0:df:82:ab:91:1c:b4:23:d3:e4:a5:
36:2c:d9:b6:5f:0d:13:e3:1d:ca:fb:ac:bd:68:a0:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C7:BC:26:EF:A0:1E:51:83:9E:30:14:FE:70:2B:C5:B7:AA:BD:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1f5082c-a37c-367c-adb2-efd9890c1b4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:cb:5a:38:fa:7e:cb:a7:9c:15:9c:ed:63:f4:cc:ee:d6:5d:
5d:fb:a3:5d:b9:7d:bc:ce:df:f6:08:7e:f9:3a:0b:e2:8e:85:
3b:e3:1d:2d:e6:28:09:09:a0:68:7e:15:71:91:ac:91:77:2c:
f8:ae:66:46:86:5d:42:25:c1:69:9d:1b:67:6d:c9:26:64:79:
8b:86:6f:95:68:8f:f9:b7:68:ee:9a:96:31:77:55:c3:87:4d:
91:36:17:95:95:99:e7:4e:72:c0:07:e6:96:94:b8:14:65:92:
0d:bd:1f:94:3c:d5:ac:98:78:b2:7f:1d:a7:aa:47:15:22:5a:
ba:65:5d:57:8b:d2:3b:9a:f5:2a:10:21:90:e3:e0:00:95:56:
e7:bc:f9:96:52:e0:ab:3f:74:e0:c4:32:e4:c9:2f:56:e9:34:
72:a7:d9:f4:3a:54:62:c9:02:a8:ca:ff:29:de:92:28:d2:a8:
87:a0:18:0a:fc:e8:15:b1:ff:2a:5c:2e:46:90:2b:e8:f2:e3:
0e:f7:32:f7:5e:b9:73:c4:3b:69:23:81:2e:dd:e5:07:64:3f:
11:b4:9d:a2:63:3f:d2:58:00:b5:75:c3:c1:64:aa:50:2e:d4:
dc:b6:f3:9f:85:67:47:8e:ab:18:89:70:a3:de:ec:50:b1:cd:
11:ec:77:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:33 2025 by rpki-client