Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfc07bf0-abf8-351d-81e8-9dfbd9389b53.roa
File: bfc07bf0-abf8-351d-81e8-9dfbd9389b53.roa (raw, json)
Hash identifier: 0noJnCGIY7vEowOZCHge6U2a8uWy4Pq8KqXO91Zod8A=
Subject key identifier: 0C:8A:E2:9D:31:85:D2:7F:0C:12:E2:53:F9:98:D3:1B:F7:DC:64:C0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B736CF475A2B2577B2F6F0C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfc07bf0-abf8-351d-81e8-9dfbd9389b53.roa
Signing time: Thu 30 Jan 2025 11:10:15 +0000
ROA not before: Thu 30 Jan 2025 11:10:15 +0000
ROA not after: Wed 30 Apr 2025 10:10:15 +0000
asID: 30036
IP address blocks: 173.18.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:36:cf:47:5a:2b:25:77:b2:f6:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:10:15 2025 GMT
Not After : Apr 30 10:10:15 2025 GMT
Subject: CN=9f2a142c-596b-40e4-8342-bd7c8ace729b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f1:20:57:e9:79:19:52:31:29:d0:90:cb:1c:
88:e6:86:45:14:60:44:d3:d6:d1:b5:9c:a9:fe:2e:
10:c7:6e:a2:d9:52:b2:da:d4:90:de:81:68:13:39:
3d:71:90:1e:14:de:76:6d:59:6e:6f:e9:7a:e6:c6:
64:15:19:26:2a:ae:6c:e2:26:c7:a7:93:17:c3:ed:
7f:f6:1c:a0:85:fa:cb:45:42:84:ea:a2:d3:98:f8:
d5:fe:fd:01:54:5a:be:4e:68:97:fb:95:14:9f:11:
65:09:f2:33:77:bb:8d:ab:8d:bb:b4:81:63:49:aa:
5a:b8:23:92:1f:80:f5:c2:ee:89:43:d1:d4:e3:c4:
60:e8:db:67:32:ce:cf:97:6c:2e:83:8d:4f:b0:1e:
f8:46:1f:1c:3a:05:75:86:3b:de:8c:c0:07:e1:28:
e3:87:e7:d7:cd:37:5e:7d:84:f9:60:f8:f6:f8:69:
ba:74:eb:75:55:a6:0b:9a:b0:9c:48:8a:e3:b6:12:
b9:72:1e:b8:86:9d:cd:61:3b:c8:21:d3:07:0c:8b:
ad:4a:d6:40:64:d2:df:bc:5a:ec:83:4e:9f:9e:0c:
c1:77:fe:69:cf:d8:c5:88:f0:c7:03:c1:56:f9:dd:
f2:d0:a3:32:9e:dc:44:c1:ad:21:5c:22:15:3d:1a:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:E2:9D:31:85:D2:7F:0C:12:E2:53:F9:98:D3:1B:F7:DC:64:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfc07bf0-abf8-351d-81e8-9dfbd9389b53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:87:e1:47:aa:98:f5:f6:56:7c:a8:00:de:b9:6e:20:18:43:
4f:c8:7d:bf:cd:f0:68:9e:79:3d:ec:32:84:04:e3:db:96:25:
09:dd:ea:f0:71:b5:cd:45:88:ae:d6:e8:88:71:fb:8e:3e:dd:
94:49:b9:99:b3:5f:b3:1c:02:c7:97:90:58:e1:cc:09:7b:d7:
bc:b6:5d:b8:09:51:85:2d:da:20:1c:51:c2:d8:f5:ac:88:ca:
9c:ae:31:21:3e:e7:c8:a4:da:c0:fd:3b:3b:69:ba:04:e0:6e:
fb:3c:22:be:c1:66:30:4e:cd:de:65:cc:1a:2d:4f:2e:4a:a4:
5c:35:1d:e6:61:2a:96:75:cf:fb:58:cc:52:10:31:05:1b:c5:
f9:39:f7:05:3f:eb:09:31:34:17:7e:8a:3b:0e:0c:ba:75:a8:
fa:5e:42:9e:9c:99:fb:9a:6f:1a:ee:40:62:fd:18:d2:57:13:
c3:e7:be:19:2d:33:91:0d:45:44:b9:43:31:4d:bf:35:52:6e:
e4:76:09:bc:55:8b:ba:9b:ec:53:80:37:4b:7a:3e:41:e9:2a:
41:75:20:d6:88:ec:76:e1:08:a2:99:89:c9:c5:14:2f:7c:9b:
a6:5e:a8:a1:cd:4e:88:13:6e:01:40:ba:76:d8:a6:fb:a0:a5:
2c:68:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:41 2025 by rpki-client