Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa
File: b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa (raw, json)
Hash identifier: NKvhFWVpc0job6IuxewVRGbFnD8jDx88UeYppFmAxBI=
Subject key identifier: 57:AF:36:39:25:22:BD:EB:B5:A1:0B:7F:05:49:14:98:6E:92:D3:B8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57F175DC83EF76211482C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa
Signing time: Tue 04 Feb 2025 13:57:12 +0000
ROA not before: Tue 04 Feb 2025 13:57:12 +0000
ROA not after: Mon 05 May 2025 12:57:12 +0000
asID: 30036
IP address blocks: 173.20.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7f:17:5d:c8:3e:f7:62:11:48:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:57:12 2025 GMT
Not After : May 5 12:57:12 2025 GMT
Subject: CN=45c4ef17-7bde-4f15-837f-f1da0b136a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:48:fa:27:35:ba:7f:84:7d:87:53:e0:1e:
12:75:0f:a0:0f:f2:40:7f:6b:fa:7b:af:e1:7a:ed:
94:bb:f3:a6:3e:17:84:00:d1:05:53:d0:2f:59:df:
20:70:98:7e:96:80:02:f0:66:1f:91:33:e8:8f:42:
cd:a3:d8:6a:84:3c:63:ad:b8:47:6c:94:14:b1:71:
88:f8:48:98:df:fc:7e:7b:ab:9c:22:51:3e:ce:04:
85:1c:6b:3e:66:77:93:8d:16:da:70:bc:06:50:32:
f2:38:42:e1:dd:3f:91:6a:bb:92:1f:bf:47:d9:28:
3c:8f:4a:b4:0e:79:24:e3:5b:ca:f1:93:1d:2f:20:
88:2c:c1:36:4b:de:0a:d1:0a:43:08:a9:7e:ff:fb:
2c:19:ec:0c:59:25:f1:ae:dc:78:99:f8:f8:74:cc:
c5:d5:41:1e:63:d6:22:06:7a:ce:f1:e9:e1:c2:43:
e2:4b:29:a4:34:b0:00:65:0a:7e:98:c4:1d:d9:9c:
21:06:8b:57:7b:c4:b0:69:99:89:14:6f:8a:b6:5c:
ad:f2:7e:10:46:cf:98:0b:94:22:4e:b3:b1:76:1e:
c0:ac:47:f0:ec:9e:5f:43:24:1e:68:a9:00:9b:1c:
09:76:55:a9:26:19:85:fe:f4:72:6e:80:92:fd:00:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:36:39:25:22:BD:EB:B5:A1:0B:7F:05:49:14:98:6E:92:D3:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:c6:74:5a:0b:43:0d:85:a5:f0:2e:a6:d3:65:bc:9e:c3:2a:
b3:74:d2:ef:86:7e:ed:e9:65:5b:23:79:36:5f:03:da:2a:a3:
ce:f9:92:51:c5:48:05:7b:88:5f:06:c9:0b:08:73:04:81:e8:
e6:e1:a8:2b:61:7c:dd:0c:41:e1:7a:a6:9d:48:78:16:c4:cd:
70:bd:56:c1:8d:55:a0:f7:64:0a:e4:f9:37:29:4a:eb:9c:ec:
95:79:41:87:be:9c:27:13:d9:aa:bb:9d:8a:9c:3b:4a:88:e0:
c8:1b:98:e2:74:26:03:87:8c:af:eb:19:64:cf:97:1b:1c:1c:
c2:f4:d9:31:62:bd:c0:a0:f7:14:84:2f:f2:89:c0:4e:cc:3f:
80:32:98:11:cd:09:ff:33:e4:cc:0f:58:4c:0c:61:54:55:1b:
c4:46:63:d3:18:93:e5:5a:ac:09:69:ba:84:02:67:37:7c:3f:
9c:35:94:cb:14:08:95:06:4d:cf:9d:a3:05:ff:4c:9a:1e:23:
0f:8b:c6:02:5d:0b:de:78:81:ac:50:16:e2:ae:95:1f:63:ab:
fd:17:c3:94:7f:7f:74:9b:9a:19:ad:aa:31:7f:fa:0f:94:12:
58:87:99:bc:0e:35:02:79:f6:2e:38:41:99:2e:3c:c2:46:cc:
38:df:4f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:41 2025 by rpki-client