Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa
File: a71b911c-6645-3ed7-91de-4999d41633e7.roa (raw, json)
Hash identifier: o5Z/sC531rmmjxMrtqYomdJfkr5UXZWW3YrSY+n3T4c=
Subject key identifier: 7A:4C:F3:C6:3B:04:F8:79:94:14:59:B8:99:5F:DA:AB:B4:A3:85:F6
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5588A6E4E10D2C60096E080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa
Signing time: Tue 04 Feb 2025 12:39:32 +0000
ROA not before: Tue 04 Feb 2025 12:39:32 +0000
ROA not after: Mon 05 May 2025 11:39:32 +0000
asID: 30036
IP address blocks: 173.20.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:8a:6e:4e:10:d2:c6:00:96:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:39:32 2025 GMT
Not After : May 5 11:39:32 2025 GMT
Subject: CN=49065079-4502-49c8-9493-3acb73738003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:58:7a:2d:bf:10:73:ae:d9:da:20:8e:c7:
d7:7a:67:f3:35:ac:77:51:52:bd:77:01:ab:3c:cf:
17:84:cd:0e:3e:6d:7a:dc:e4:1f:b1:62:6b:52:14:
d1:98:d0:65:88:90:b9:0b:e2:1f:6d:00:23:89:1a:
c9:c2:e1:a0:fd:ac:93:33:eb:83:c8:de:f6:f1:70:
e1:3d:ca:fc:ad:57:9c:e8:d4:56:63:91:c8:c5:8e:
70:4b:ed:35:ae:e4:70:58:5a:45:f4:ba:54:b6:0d:
cc:73:97:09:43:08:6b:be:b7:33:fa:01:6b:2e:91:
ec:18:3a:58:bf:f7:6c:cc:15:d8:ec:d0:61:32:35:
5c:2b:48:93:ef:cf:5c:7b:55:5c:70:df:e0:f8:af:
99:00:83:3b:85:f3:2d:3c:a3:77:6d:f3:39:bf:70:
f5:20:de:8d:7c:5c:9e:45:1a:2f:05:b5:2c:ab:19:
f3:7f:7d:df:af:59:ba:59:c2:72:d5:21:96:6d:75:
d1:43:8c:3f:41:a7:b4:21:e4:96:90:24:d4:49:d8:
6c:ea:1a:33:de:03:5b:de:68:63:5d:b4:74:8b:61:
51:80:95:c2:2b:48:2d:75:ea:2d:bb:54:ed:d8:3e:
b0:fe:ef:3b:60:f0:73:60:2b:e7:b6:58:3d:8a:e2:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:F3:C6:3B:04:F8:79:94:14:59:B8:99:5F:DA:AB:B4:A3:85:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:03:00:3a:b8:f0:47:eb:bd:c1:78:5c:78:fa:e0:c2:96:3a:
23:b8:fe:54:ce:79:73:3e:21:96:ea:20:5c:68:a3:fe:8f:29:
e0:cf:4e:65:da:18:e7:9f:4e:78:49:f8:db:75:25:72:2b:98:
e8:e8:01:82:95:11:51:1f:fb:86:24:6b:f0:40:9f:22:a1:4a:
90:5e:3f:0b:db:2d:42:bb:32:45:bc:74:00:3a:58:a4:03:a2:
16:54:e9:72:c4:e5:fb:19:e0:c8:ca:4a:3a:08:99:c9:9c:36:
0b:81:ed:6e:c4:74:ca:72:ce:02:23:0d:cf:51:16:22:63:b2:
04:13:f6:78:f7:91:b8:3a:7c:6a:44:f6:3e:a9:87:94:b5:b4:
53:7d:e4:ad:b3:65:e9:2e:47:00:86:57:a1:d3:69:fc:9e:22:
ae:bd:a0:cd:73:fd:b9:07:7f:c6:c8:22:8e:1d:cc:46:dc:a2:
cd:ca:8e:29:d6:de:85:f7:61:65:42:78:76:12:d9:3f:ba:19:
a3:82:75:dc:d5:a2:96:ba:fd:b1:9e:06:1d:6f:a5:c3:32:ae:
e2:70:96:ed:a0:68:d5:14:4a:e2:e8:03:3b:0d:7f:52:6e:1f:
9d:65:1b:a5:1e:3e:60:47:c8:80:36:1f:7d:ef:5b:d4:76:49:
96:b4:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:19 2025 by rpki-client