Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa
File: bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa (raw, json)
Hash identifier: /WIDWLachiBt/DnpfI3VCyrUHym96kWqlDU2LIweHNE=
Subject key identifier: 8C:0B:B3:62:42:96:ED:29:04:70:13:C2:98:8F:1B:B9:6D:89:7C:8B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57796D3B4E672C805FDB670
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa
Signing time: Tue 04 Feb 2025 13:42:05 +0000
ROA not before: Tue 04 Feb 2025 13:42:05 +0000
ROA not after: Mon 05 May 2025 12:42:05 +0000
asID: 30036
IP address blocks: 173.31.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:96:d3:b4:e6:72:c8:05:fd:b6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:42:05 2025 GMT
Not After : May 5 12:42:05 2025 GMT
Subject: CN=145ec2f1-3101-4c81-98c4-91353c0b85de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:a0:4f:61:ea:5d:2c:22:02:9e:a8:7c:e1:
92:35:85:3c:38:80:45:b9:9d:a6:17:ae:d0:ac:a6:
b0:62:72:7a:41:ba:3a:48:9f:66:51:5a:89:58:6b:
5e:36:c8:57:1d:29:c3:29:2c:7e:10:11:b8:56:bb:
44:f5:32:33:17:07:52:1f:72:b2:71:90:5b:20:39:
61:eb:7e:24:ce:fb:ac:46:ad:37:b8:6f:fa:6d:94:
1d:18:dd:29:45:d4:3b:96:35:f8:9c:74:39:f2:58:
6a:ce:fd:cb:d4:43:91:08:62:ea:03:e3:64:68:50:
dc:2f:ca:a2:b8:06:62:46:e2:58:cf:b3:24:c8:56:
8f:cd:d4:8c:1b:e6:ac:db:11:84:df:02:1c:2e:76:
c3:7b:2c:a7:35:3d:6f:84:1c:c0:98:99:ba:8e:6e:
a7:86:cf:d2:98:78:12:90:3d:55:7c:0f:22:0a:89:
05:14:be:c3:5a:9c:2e:40:36:40:7c:a6:80:0b:38:
c5:88:15:58:dc:7c:38:43:a8:39:e2:81:97:a3:35:
d4:3e:7f:21:e8:9f:44:5d:3f:e8:51:fd:8a:47:87:
dd:fe:62:66:41:09:b6:05:3a:68:9c:58:62:8f:88:
fb:6d:30:9a:bc:47:56:c2:fd:01:19:1a:80:b0:08:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0B:B3:62:42:96:ED:29:04:70:13:C2:98:8F:1B:B9:6D:89:7C:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:c4:bd:6b:21:16:9e:7a:dc:d9:40:9c:90:e0:a1:9d:e9:fd:
26:cc:20:f9:1a:b6:3a:5c:e0:5a:73:7f:18:c7:af:0e:f8:92:
67:ba:6d:ac:dc:a6:66:ea:59:3f:a0:e4:62:6e:e9:0f:e0:75:
f1:1d:55:7d:7f:04:94:1f:7b:3f:9a:cb:8b:70:16:d5:d5:ac:
f3:41:e8:3c:cb:e2:d5:da:82:f0:1c:53:6c:c7:5b:f6:b7:f4:
74:a1:01:99:c8:41:ac:a2:99:10:d7:d8:af:4b:fa:d6:ab:f9:
b2:01:8a:13:35:f5:97:48:de:72:a9:f4:6d:c1:81:ed:2e:49:
22:0f:3b:b4:5b:7e:84:5b:9f:f0:6d:1c:ad:c8:8a:8a:c5:0c:
74:1b:c7:3c:18:ae:5f:ec:ba:d3:aa:c0:e7:07:66:a3:0b:0b:
81:51:1c:1d:84:6a:8f:8c:fc:e7:39:5b:d2:a8:18:31:89:e9:
9b:f6:7a:0f:6f:45:92:3d:37:31:47:9a:2f:fe:a9:d0:2f:a1:
0f:44:11:26:22:fb:96:e7:cc:12:43:2a:b3:76:20:f9:9d:4f:
29:a3:1f:76:e4:ca:de:2f:df:86:ef:52:bd:ac:20:f4:18:34:
dc:8e:58:8e:d7:f1:d4:09:3f:10:c4:51:02:7c:d9:2d:78:46:
5e:7c:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:51:01 2025 by rpki-client