Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa
File: a525a691-83ca-3334-8085-c21e4f6b991c.roa (raw, json)
Hash identifier: wHDOurS80WIHbAbUVrZlnHYSiztQBkzr4MbORVSIOCY=
Subject key identifier: 07:89:F7:8D:E2:50:EF:1F:1E:23:6D:9B:E9:A4:D9:F5:80:DB:03:19
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C558A294FA61BA6FADB5C580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa
Signing time: Tue 04 Feb 2025 12:39:43 +0000
ROA not before: Tue 04 Feb 2025 12:39:43 +0000
ROA not after: Mon 05 May 2025 11:39:43 +0000
asID: 30036
IP address blocks: 173.23.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:a2:94:fa:61:ba:6f:ad:b5:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:39:43 2025 GMT
Not After : May 5 11:39:43 2025 GMT
Subject: CN=6f9ccef8-cd2e-4180-8368-60eb16869b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f5:f1:f5:09:22:db:25:5e:42:e8:43:3e:90:
e8:a3:b6:10:e3:21:1b:c5:7b:6b:85:b8:0b:0a:6b:
70:37:5e:a4:df:00:63:b7:e7:ae:4b:39:e3:df:54:
be:9f:d2:14:0b:51:12:20:7d:25:31:c8:fe:4b:72:
e3:ee:f4:1d:d6:b1:d2:62:69:16:9d:da:0b:4c:63:
7e:b0:5b:02:d6:ff:8c:28:98:ec:67:f9:62:18:d7:
d1:1d:b9:27:47:7b:1f:e4:d6:76:63:59:8e:7f:39:
5a:76:36:59:f9:e3:87:b9:41:14:15:c3:f6:39:36:
bd:b0:d0:81:ee:bc:36:73:4b:ee:78:1e:a0:6a:17:
5a:f1:e8:d4:f5:00:a6:08:74:ac:00:78:85:75:4b:
c5:71:bc:fb:bc:a3:59:87:e8:a8:71:15:c1:35:b4:
5f:f2:fb:34:29:d1:e5:40:f7:92:ae:63:50:58:63:
77:2b:34:43:ff:9b:38:ef:35:7c:15:86:e2:c4:d3:
ae:b5:6e:20:45:d7:c2:a2:32:22:6f:6e:59:10:8a:
11:b4:33:9a:90:4e:0b:6e:16:e3:e7:db:03:80:c8:
11:4b:ab:21:65:eb:e9:bd:c0:8d:53:58:68:d2:2b:
c0:46:04:ca:17:fe:81:4d:58:0e:38:70:3d:4f:9f:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:F7:8D:E2:50:EF:1F:1E:23:6D:9B:E9:A4:D9:F5:80:DB:03:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:97:ed:f7:0e:d1:96:a4:95:96:cf:6d:7e:b2:0b:8f:d6:b6:
9d:95:cd:11:6d:74:0d:1e:d7:55:79:1d:be:5b:c1:48:6d:29:
59:c0:23:bb:d9:9b:e0:56:cd:b7:ac:05:11:b8:18:8b:92:1d:
ed:90:f2:7b:24:c2:12:31:09:4c:f3:f9:9e:ff:ae:a3:02:92:
71:01:7c:e7:3b:b8:02:f2:d8:da:6e:aa:29:c1:50:4f:2e:5e:
fc:af:99:f3:6f:3b:1e:e0:5b:c9:49:47:4b:ed:36:c8:43:7f:
3a:cb:b5:c8:4f:62:1b:3b:1b:66:73:46:03:06:1e:ac:09:fe:
32:13:ee:89:6a:b3:75:ed:22:04:8a:d5:88:45:e1:e4:3b:f9:
76:9c:d5:29:51:cf:b7:bf:86:66:a4:d6:24:d1:9e:03:e5:dd:
cd:ad:c8:8a:db:59:84:62:48:2a:c3:15:fa:f6:f1:e1:f8:d1:
70:b7:fa:09:40:ea:af:50:2f:cd:24:7a:f6:e0:26:b3:bd:6c:
de:78:96:6a:0b:1b:85:1f:f0:3b:ae:2f:5e:0b:86:52:a6:3a:
8f:d0:31:fa:5d:1b:48:de:43:a5:7c:c6:43:55:4c:a7:76:d6:
b2:c3:2a:74:6e:8e:b8:33:31:04:19:5e:ca:0f:84:57:56:06:
2e:03:a5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:59 2025 by rpki-client