Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa
File: b8d06be2-2497-387b-b093-f9161a79abe6.roa (raw, json)
Hash identifier: i1M3uUdK+21mkPB3mz9JNXCaDCLah7sJtofidYecVMY=
Subject key identifier: 46:A0:C3:7A:CC:04:A0:85:A7:7F:66:06:11:59:EB:F4:09:79:14:1E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57DF199B8581085891C6500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa
Signing time: Tue 04 Feb 2025 13:54:54 +0000
ROA not before: Tue 04 Feb 2025 13:54:54 +0000
ROA not after: Mon 05 May 2025 12:54:54 +0000
asID: 30036
IP address blocks: 173.21.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7d:f1:99:b8:58:10:85:89:1c:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:54:54 2025 GMT
Not After : May 5 12:54:54 2025 GMT
Subject: CN=de68a49d-5586-4e18-8627-cc29b95d54b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:5b:67:71:f0:f6:89:3a:29:7e:53:60:70:
cc:b6:53:e1:f1:35:07:ec:56:76:fe:75:5a:2c:e6:
bc:2c:d2:d3:66:33:74:4d:2a:c2:ac:5e:b6:8a:a5:
63:a5:a1:41:4b:60:a1:e8:fa:32:59:39:eb:dd:2e:
38:a4:82:15:83:fd:65:f1:ff:6b:fb:ae:57:95:96:
65:0d:20:0c:32:ea:e6:ff:88:ee:66:d6:8b:cf:31:
cb:46:19:c8:26:61:c3:d0:53:a0:d0:0c:2d:38:cc:
e7:30:cd:92:40:2d:ff:05:67:76:b4:77:c1:81:35:
be:62:f7:75:af:b8:1e:58:99:2e:b0:e3:dd:d7:f9:
1c:f6:d9:ac:78:ab:11:b9:45:ef:03:a6:83:f5:ce:
0d:c0:5e:09:17:ad:16:8d:ab:40:a7:4d:4f:83:fa:
95:3c:6b:d3:10:b6:65:9a:c4:95:f6:28:b2:a3:2a:
f4:d0:c1:a3:e6:b5:30:92:d7:df:29:a4:8b:42:6a:
c0:3f:36:9c:b7:98:5c:4a:c3:1c:58:a8:f9:c2:e0:
6d:03:e8:7d:96:b1:a4:09:86:29:2c:cf:69:2a:a8:
86:41:2f:a4:64:db:12:27:74:2e:6e:31:72:df:ef:
18:9f:f4:d7:b2:c3:62:43:f3:25:26:8c:5d:5b:d1:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:C3:7A:CC:04:A0:85:A7:7F:66:06:11:59:EB:F4:09:79:14:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:d1:fb:04:8b:db:5c:67:ea:45:27:47:24:c0:cf:43:f2:7d:
73:9c:a5:3d:6e:37:60:5e:01:56:01:38:82:ce:14:b1:a4:69:
66:4a:1d:97:4d:11:2f:63:0d:c7:52:20:ea:2a:c8:05:8b:61:
68:a2:32:cc:50:5e:4e:79:33:bf:3b:04:1e:c9:e9:6d:b5:5b:
c3:41:41:f7:b3:86:98:84:3f:b7:d4:49:c4:66:af:66:3f:04:
46:d0:d6:3a:7e:ee:91:7c:ec:39:3b:bd:fe:5f:7e:23:61:19:
40:55:47:0b:4f:d8:16:11:a9:2b:1c:e8:9f:c3:b9:a9:2f:4f:
81:06:58:99:99:27:19:18:1d:c7:92:40:56:96:2c:a4:8c:17:
d6:71:7a:11:e3:90:8e:7e:11:ab:7e:15:4e:b4:da:8e:18:1a:
4b:5e:c3:24:5a:3c:67:69:f8:86:e7:b9:b5:3a:07:06:e0:6f:
91:21:34:11:19:57:9f:8a:dc:80:bf:1a:ef:71:b5:bc:e4:47:
a5:03:3b:f1:b7:b4:15:99:4a:ca:6c:ac:4f:01:7b:91:76:3e:
dd:58:2e:59:65:6d:fc:22:fc:31:9a:b0:50:fd:91:3f:60:cc:
de:8d:92:12:8f:0b:99:37:a3:c8:b4:7f:f4:bf:99:85:67:12:
f3:41:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:37 2025 by rpki-client