Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afabeb14-ea97-3105-9a55-818daa5a9fe4.roa
File: afabeb14-ea97-3105-9a55-818daa5a9fe4.roa (raw, json)
Hash identifier: WDxGzwyH/p+5jHAWeo9WVMRdmtxSvx4ApJdGkTIPWOo=
Subject key identifier: 86:82:63:7A:33:78:A8:B0:62:E6:A8:CB:08:8A:BD:DB:7E:1D:22:35
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F432858493FC6563ED5CCEE478E351880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afabeb14-ea97-3105-9a55-818daa5a9fe4.roa
Signing time: Thu 20 Mar 2025 09:09:22 +0000
ROA not before: Thu 20 Mar 2025 09:09:22 +0000
ROA not after: Wed 18 Jun 2025 09:09:22 +0000
asID: 30036
IP address blocks: 173.17.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3f:c6:56:3e:d5:cc:ee:47:8e:35:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 20 09:09:22 2025 GMT
Not After : Jun 18 09:09:22 2025 GMT
Subject: CN=179cc5dd-45f8-4684-88d0-4cfeb7c06926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:ad:27:aa:62:e6:e9:f2:17:eb:3a:fa:87:
5e:ca:78:62:8b:a9:98:79:3f:00:86:3e:c9:5d:31:
48:b2:70:1f:94:7c:a2:00:01:3e:f2:80:05:f4:59:
f6:1d:51:b6:82:da:4b:24:c5:e4:e4:49:43:89:71:
7d:77:b7:a3:df:98:1d:45:76:35:23:9f:a6:65:48:
18:34:01:70:8a:4d:8a:66:6f:1f:a2:c9:19:8a:ae:
9c:ba:c0:a2:e5:27:8e:83:4a:28:2e:0e:d8:d2:2f:
3a:a5:9d:f1:69:15:6d:5c:b2:0c:36:95:11:89:cc:
24:d9:a2:1b:8f:a6:92:47:79:df:ef:d7:eb:64:88:
7e:8c:97:03:5c:8e:65:55:6c:26:9b:bd:1f:39:17:
2d:e7:89:18:12:e8:c2:73:8c:39:81:79:6c:92:fa:
30:4b:12:d6:e2:23:44:cf:f7:97:93:5c:95:ba:62:
9f:14:50:39:1d:88:09:cc:3a:b2:58:41:43:dd:b1:
ed:a3:b3:60:ac:75:09:fc:2f:11:d8:4d:c1:2c:d7:
ad:20:a8:60:44:53:82:da:55:20:63:78:9f:e7:76:
98:e2:7d:c7:ab:15:5f:21:5f:f3:28:c5:08:d0:8e:
8a:81:d5:93:4e:65:50:1c:4a:55:20:ed:20:d2:90:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:82:63:7A:33:78:A8:B0:62:E6:A8:CB:08:8A:BD:DB:7E:1D:22:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afabeb14-ea97-3105-9a55-818daa5a9fe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c0:24:f6:86:e6:46:72:2c:b7:2b:97:92:4d:68:75:8f:07:
00:35:c7:39:34:97:f3:a0:22:9f:4f:aa:da:68:c6:74:70:9d:
46:1d:bc:3c:f5:c5:e8:dc:eb:2e:67:b2:ed:bb:78:8d:1b:3a:
df:21:f7:19:47:b2:38:b5:31:09:e8:50:13:9b:16:f4:4c:24:
50:0a:02:ba:64:82:a2:23:e5:a4:b8:60:60:21:80:3a:97:a6:
56:e4:ba:3b:65:cf:58:aa:0f:ca:93:d1:70:c6:9a:0d:f1:42:
04:27:dc:10:5a:06:d5:2e:48:9d:93:0e:ec:fc:ec:4a:8b:e2:
0a:e5:65:7f:c9:5b:0a:eb:4b:36:e7:40:e8:56:4e:2c:7b:48:
30:58:8c:78:43:fd:76:6f:20:8f:c6:1c:68:62:fc:a1:86:86:
89:bc:50:46:87:82:bb:f2:d3:ae:86:60:b8:72:77:8d:b6:5e:
2f:5f:23:35:fa:40:af:ea:e3:d8:b7:72:c9:8d:d1:78:49:6a:
1f:ce:08:5a:9c:36:e7:7c:8d:48:e7:dc:8d:e1:c6:b6:d4:65:
a2:b7:56:7c:d3:aa:e0:97:ad:7f:97:28:c4:cc:12:a5:f8:7b:
87:63:eb:fd:f0:b6:41:17:5f:a0:39:30:5a:35:df:37:fc:14:
b8:b5:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:00:52 2025 by rpki-client