Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa
File: a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa (raw, json)
Hash identifier: uzIOX0cLnEuXXTMdhmLIKhIQ4VmdjSkccfkCMipGYTg=
Subject key identifier: 4E:20:C8:F8:6E:CB:77:8F:F3:60:0A:86:E1:F5:B9:FD:6D:BF:76:F7
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C532F0AB04AF296AFD9DCB80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa
Signing time: Tue 04 Feb 2025 11:23:46 +0000
ROA not before: Tue 04 Feb 2025 11:23:46 +0000
ROA not after: Mon 05 May 2025 10:23:46 +0000
asID: 30036
IP address blocks: 173.29.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:32:f0:ab:04:af:29:6a:fd:9d:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:23:46 2025 GMT
Not After : May 5 10:23:46 2025 GMT
Subject: CN=0335fdfd-7789-44d8-b681-275179058f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:2b:58:f6:d4:88:ec:2c:46:ff:bb:52:7a:
73:0b:76:b9:40:e9:64:52:8e:6a:79:79:9e:f8:9d:
f5:83:f3:ab:2e:1c:30:dd:9e:dc:19:74:c1:a1:9c:
65:c9:a6:8c:32:94:10:6a:2f:2c:a2:3a:7f:01:51:
a7:53:23:d9:a4:d5:71:26:70:d2:2a:04:f8:d4:3e:
21:a5:cc:aa:e4:b3:28:2d:23:22:b0:9b:0b:7d:81:
9d:59:0c:8e:2b:35:39:5f:73:98:29:e5:14:47:f6:
eb:de:62:a0:04:1f:b5:8d:89:94:bd:f0:c0:15:c2:
2f:98:66:fa:e2:d3:81:c0:03:1e:58:e7:51:35:66:
e6:d2:47:ef:62:59:40:91:69:1c:62:1a:e7:1c:c4:
24:63:ed:fb:ba:01:b2:27:40:79:e8:b1:f3:5c:4f:
5c:4f:54:4e:48:cc:b5:05:71:f6:36:93:e3:15:99:
fe:31:76:4f:52:0d:0f:9f:30:e2:77:b7:8e:95:67:
ed:23:5d:b2:a5:92:a2:3d:15:b8:49:73:b8:f0:62:
8c:1a:62:6e:37:8d:f0:37:4c:d4:8a:49:1c:fe:d6:
50:b0:6b:d2:ce:d5:3a:96:53:00:9f:cb:49:fa:1d:
9f:02:aa:a4:30:cc:ad:15:41:7a:f2:66:8c:55:b2:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:20:C8:F8:6E:CB:77:8F:F3:60:0A:86:E1:F5:B9:FD:6D:BF:76:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.92.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:3d:ae:c7:20:19:2f:82:1b:b0:77:78:e0:20:48:81:6e:f2:
bf:a9:a8:0a:db:86:1a:5d:b7:0f:06:e5:8d:db:29:91:44:56:
70:c7:20:5c:48:44:94:8d:ba:ec:ab:b7:c6:bc:eb:ce:d5:d7:
e4:bb:14:3d:49:15:c6:d5:cb:76:9b:04:6e:3e:03:f3:2f:74:
b2:3f:93:e9:d8:9b:96:14:0a:23:c2:43:db:bc:19:ed:ac:64:
2f:ae:33:05:82:8d:27:7d:59:ae:26:a1:a3:62:0c:c0:a4:7a:
8f:73:50:1c:97:20:c8:75:ec:d9:68:2d:94:51:d0:00:5c:60:
c0:9d:31:a3:dd:52:3f:e7:07:17:c5:18:70:d7:be:90:8f:50:
60:78:6c:1a:1c:e1:e5:24:8a:e7:3d:60:03:be:de:e1:6f:41:
c3:98:d1:e4:ad:41:e3:d3:27:2a:73:c0:3b:f7:d2:c9:09:01:
a1:b1:9f:7d:c1:15:c8:3e:5c:17:61:95:59:16:96:27:f3:7e:
d8:dc:af:32:12:5b:30:2f:ad:e7:2d:44:7e:fa:83:62:fd:b8:
81:d2:78:07:64:f0:7b:e0:3b:4c:be:52:80:df:7e:30:ab:0a:
1b:a3:c1:3e:2a:6f:c5:33:1c:66:cf:ec:7b:df:9b:e0:fc:5b:
d3:2b:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:58 2025 by rpki-client