Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa
File: ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa (raw, json)
Hash identifier: 7EfDoPZVQwpjtqHfVtjcXF/7phwqqTyTsBiXAPBH4e4=
Subject key identifier: 9A:3E:C5:8A:7D:C4:34:AC:5F:FE:9C:54:C0:6F:3B:62:51:80:10:9D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57744D3F6194166C802F000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa
Signing time: Tue 04 Feb 2025 13:41:27 +0000
ROA not before: Tue 04 Feb 2025 13:41:27 +0000
ROA not after: Mon 05 May 2025 12:41:27 +0000
asID: 30036
IP address blocks: 173.28.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:44:d3:f6:19:41:66:c8:02:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:41:27 2025 GMT
Not After : May 5 12:41:27 2025 GMT
Subject: CN=0761435d-c010-4214-b8f4-6f1a022064ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:76:e1:45:35:ae:27:9a:dc:40:21:a1:36:
18:b1:80:d3:fb:c9:33:9b:de:53:32:31:c3:47:4e:
9f:c9:dc:0d:c6:4c:84:9c:bc:83:99:dd:4f:b1:37:
93:90:47:a1:db:b9:94:87:b7:79:29:f6:5b:27:b3:
ae:bc:8b:16:ea:91:9d:99:6a:cd:9b:bd:a5:51:04:
0b:81:8f:fd:0f:73:70:5f:2b:44:97:35:d5:40:11:
05:99:12:f2:16:a4:8c:c6:28:27:0f:5a:4b:08:0e:
ec:21:34:73:0d:c8:45:fa:6a:2e:6e:17:86:35:43:
48:e3:4e:85:a2:88:1b:bb:14:05:85:10:49:c5:4c:
b2:54:87:58:fb:f3:bd:3b:13:63:40:67:91:c7:4c:
45:89:f5:a1:ff:b1:6f:85:6f:eb:03:18:f9:62:d2:
50:5c:04:65:94:f3:31:b2:98:3a:c5:3f:c4:0b:9b:
7a:da:12:89:df:f5:d6:2d:45:af:74:4e:cc:88:e0:
5e:cf:c7:89:1c:e6:19:e4:9c:1c:38:22:e7:1e:62:
c4:b4:8c:1a:40:dc:2b:ca:a0:b4:2a:55:a7:72:09:
28:75:73:c3:e6:48:49:10:63:c0:68:19:cd:75:4e:
f9:c3:4d:f2:00:85:e6:42:77:f7:23:60:6b:71:8b:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3E:C5:8A:7D:C4:34:AC:5F:FE:9C:54:C0:6F:3B:62:51:80:10:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:7b:3a:2c:c0:ad:20:65:4b:b6:6d:dd:55:95:c1:9d:e0:84:
b4:dd:79:30:1d:9e:59:61:4a:32:a6:53:8c:97:cc:04:63:ba:
1c:f8:2d:41:df:6b:51:05:89:86:71:ee:8f:d9:fe:47:9c:1e:
d3:1c:2f:ee:f5:e2:f5:12:df:8a:a1:5b:28:e2:fc:b0:d5:da:
3b:d3:bb:1e:3d:d5:b7:4c:c5:e3:e3:76:1f:15:b4:b3:c7:03:
25:41:af:d8:98:b7:ba:6f:a0:c1:f4:9d:76:0f:14:15:01:e6:
6b:be:4b:d1:59:09:14:90:6f:01:9d:9e:b6:05:49:b8:c6:6a:
0d:c0:13:9c:35:f3:ab:8f:b2:e3:d3:94:3a:e3:49:da:34:cb:
7f:b9:8c:3f:85:9b:99:ea:b1:4a:3f:13:64:3a:2a:fa:08:af:
6f:e6:98:a8:7a:41:ae:25:37:81:08:23:6c:93:dc:40:7e:42:
ce:cd:f1:77:18:3d:68:df:34:83:1e:33:7a:19:da:0d:3e:af:
f0:68:ad:ae:21:18:12:4a:d1:1b:6e:27:1e:18:6e:b0:dd:bb:
fe:d3:a8:06:d7:18:bd:70:21:32:45:fd:74:12:10:ec:b3:e8:
51:e7:1c:77:59:64:e4:23:b0:dc:5c:c6:d3:d4:17:43:76:81:
fd:91:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:04 2025 by rpki-client