Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd00b111-7990-33b0-8121-1a8818039514.roa
File: bd00b111-7990-33b0-8121-1a8818039514.roa (raw, json)
Hash identifier: +Pp/U22BWuWQi8QZnHiOK2D0c32FQ9uDAo/QArRYg9w=
Subject key identifier: AE:AE:88:81:D3:E7:4B:E4:67:43:0A:71:6D:08:9B:B2:C9:A6:C8:B3
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5587A235E014E19CA0A2440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd00b111-7990-33b0-8121-1a8818039514.roa
Signing time: Tue 04 Feb 2025 12:39:24 +0000
ROA not before: Tue 04 Feb 2025 12:39:24 +0000
ROA not after: Mon 05 May 2025 11:39:24 +0000
asID: 30036
IP address blocks: 173.19.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:7a:23:5e:01:4e:19:ca:0a:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:39:24 2025 GMT
Not After : May 5 11:39:24 2025 GMT
Subject: CN=90ecdbdd-d2cc-4124-97d4-7ed2b0c2e39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3d:f8:a5:c2:4c:04:27:76:56:b4:bc:af:6e:
bc:00:7d:3f:3a:56:e4:87:5c:08:de:d6:d2:95:31:
09:b2:c3:d0:96:10:0b:fc:a0:ab:75:46:43:e2:f1:
54:b9:d1:fc:18:41:63:0b:ff:b0:15:ca:c9:1f:c9:
bf:cf:cd:f2:8c:2d:6f:c7:32:69:f2:ab:ee:98:51:
96:75:0d:aa:2d:d0:77:ae:5d:df:64:b1:66:e2:0a:
6c:15:d3:bb:bc:e6:55:27:26:ed:70:75:28:9f:4a:
a4:08:04:7c:dd:98:f4:8c:1f:e7:10:24:f3:4f:8a:
3b:56:a0:43:88:75:6c:45:74:df:34:c7:aa:58:cd:
ed:88:63:96:ba:0b:7f:84:a2:54:07:d4:13:81:d1:
60:b4:d8:ee:3e:ec:de:5c:66:51:ee:a0:6f:bf:a0:
00:61:ef:6f:ba:c2:ca:98:d4:8a:3c:8d:dd:01:de:
d1:8a:95:28:9a:e1:5a:fc:56:1c:7d:b5:b1:37:33:
8b:38:a3:2e:c1:e7:f1:d4:63:4c:b5:9f:c3:b2:52:
fd:75:77:0e:cb:53:2b:a8:ce:ca:e4:7e:55:fb:7e:
07:11:d5:80:42:9e:8a:72:bb:1b:4e:73:33:bd:cf:
a0:3e:f8:15:2e:ae:dc:80:c3:23:14:ee:2d:af:cf:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AE:88:81:D3:E7:4B:E4:67:43:0A:71:6D:08:9B:B2:C9:A6:C8:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd00b111-7990-33b0-8121-1a8818039514.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:35:ad:99:98:f1:a1:fe:ad:86:b3:00:3e:92:fd:cc:85:34:
37:84:b6:be:01:07:76:67:d8:4d:73:2e:3a:e0:98:99:d4:8c:
f2:ab:31:20:39:20:0d:ea:41:5a:42:ef:ed:ff:2e:d8:4f:75:
05:81:ea:d1:7e:50:ca:b8:3d:a1:61:08:4d:15:c2:94:c4:21:
b8:99:4c:a5:95:f8:4b:ae:77:1e:46:ca:65:53:02:c1:3b:d0:
ff:e1:70:11:c6:7a:91:e6:9e:36:a6:53:4d:28:6f:78:69:06:
b2:cf:fa:3a:79:70:a6:89:70:8b:26:21:67:1e:cf:3e:54:25:
c0:7a:f3:a6:02:b9:b6:12:0a:80:49:fc:da:24:58:08:73:35:
d2:eb:2b:88:7e:61:3b:ba:77:37:64:ea:54:3a:75:af:53:68:
af:c4:18:ef:ea:74:33:a0:ad:67:9c:5a:9d:83:ca:13:26:16:
fc:60:4f:1e:2b:c2:08:39:68:d6:77:6f:25:4a:57:c1:0e:a3:
ee:a0:96:90:84:20:f6:8c:ca:76:2b:b2:34:d6:4d:17:c8:13:
53:ec:7f:60:e3:d7:94:cd:4d:99:8a:bf:23:5a:75:4c:0c:ac:
c5:a9:d0:d8:bc:e2:21:73:90:af:d3:0e:2e:46:1f:89:93:14:
4b:f2:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:23:02 2025 by rpki-client