Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2c5b899-7b98-33c9-bb28-f6ccd86874aa.roa
File: a2c5b899-7b98-33c9-bb28-f6ccd86874aa.roa (raw, json)
Hash identifier: 5mVcOkeDpw6XBTJEj7G/IGMbXsyDMVBWXCDTKBmVK0U=
Subject key identifier: 4D:96:93:C8:02:27:F9:97:CE:18:77:CD:12:48:A6:50:27:0F:96:5F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B7373D74544A4CFC6B960678
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2c5b899-7b98-33c9-bb28-f6ccd86874aa.roa
Signing time: Thu 30 Jan 2025 11:11:07 +0000
ROA not before: Thu 30 Jan 2025 11:11:07 +0000
ROA not after: Wed 30 Apr 2025 10:11:07 +0000
asID: 30036
IP address blocks: 173.30.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:3d:74:54:4a:4c:fc:6b:96:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:11:07 2025 GMT
Not After : Apr 30 10:11:07 2025 GMT
Subject: CN=4623c456-5b54-4635-99f2-3169ad50c969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:30:72:cc:98:7b:af:64:65:9b:6c:07:eb:
2b:c0:68:1b:be:6f:05:19:15:c0:b0:4d:89:7d:00:
0f:93:7c:9b:72:58:d2:3f:3a:78:1d:52:4d:b3:ae:
55:6a:99:dd:6d:16:a1:08:f0:85:b1:59:88:ef:07:
d3:3f:31:fe:f6:5f:86:65:1e:ea:c6:ce:c2:6a:b0:
43:9d:7f:e4:f3:bc:27:2f:5d:e6:5a:ea:3f:1b:20:
39:90:dd:89:8b:cb:c9:a8:27:61:ac:dd:be:bd:df:
22:35:f9:a2:3a:9c:6f:55:24:31:b5:17:40:b7:91:
2c:f9:58:57:02:42:d5:af:e6:5c:10:58:66:59:b2:
69:73:80:d7:b7:3b:0b:1f:69:80:7d:31:5d:bc:1c:
53:2b:48:50:82:f0:f2:74:89:73:29:5c:60:f0:5f:
1c:03:65:80:3c:1d:19:de:b2:12:94:72:92:2b:2c:
9e:27:c4:ac:b5:84:85:01:99:3b:0e:8e:68:b7:9d:
89:c7:7b:83:ae:99:54:8c:81:2d:63:01:26:12:2f:
d3:c2:37:4e:da:a5:43:94:b2:d4:3d:53:b5:26:9c:
5d:a5:21:b6:53:ac:c3:7d:dc:e1:da:75:87:25:8c:
2b:81:89:d8:77:ca:05:3d:c8:95:98:d1:61:67:0a:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:96:93:C8:02:27:F9:97:CE:18:77:CD:12:48:A6:50:27:0F:96:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2c5b899-7b98-33c9-bb28-f6ccd86874aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.30.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:4b:a6:21:da:0c:f8:2e:29:75:71:cc:13:a3:34:f8:9d:db:
9a:c8:df:c3:f7:2d:d3:c2:19:90:a5:8c:c4:ac:08:61:b8:9e:
d6:71:db:86:d4:9b:6d:6c:15:3e:81:84:56:b5:93:73:76:8b:
b5:8a:7b:c0:f6:f7:0f:37:40:c6:f5:7e:ec:19:4a:e1:a6:12:
2e:15:75:1a:28:9e:7c:31:ef:fb:d5:cc:81:a1:3d:50:04:85:
9f:b6:fe:7e:ed:4a:00:02:0f:3c:36:d7:6f:1e:c3:a3:ad:5d:
4c:5b:2a:97:bc:cf:49:a9:1c:c6:d8:f9:84:c9:23:de:2b:b8:
e5:61:29:fd:2d:a5:f1:22:35:58:f8:31:cc:9c:c2:15:0c:0d:
af:be:b8:49:5a:d0:a7:72:f4:3e:8c:38:b2:c9:70:73:a2:37:
fe:c9:d4:cc:05:37:d7:0d:5b:ee:bf:c7:5b:4d:aa:40:60:17:
6c:78:e9:85:84:80:8a:2d:11:9c:f6:94:cd:09:b0:11:7b:d3:
71:8f:8e:9c:d2:60:c7:f2:e1:7a:a0:1f:ab:e0:a7:6d:1e:b3:
c2:75:24:5b:f3:65:f3:32:21:0a:f9:3a:f1:d9:73:2d:42:ab:
fc:a8:ca:b4:df:6b:46:7f:19:cb:0d:17:28:59:d4:3a:2c:00:
ba:4d:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:33 2025 by rpki-client