Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c41af962-f607-3db9-bfd4-9ba289adf078.roa
File: c41af962-f607-3db9-bfd4-9ba289adf078.roa (raw, json)
Hash identifier: dA1iLFmoWv1En/sMVrNaxNBssMBthOjfpOxAX2oKHmE=
Subject key identifier: 71:0D:D6:A1:79:83:53:EE:87:B4:17:35:C0:1E:F9:49:B3:2A:3E:88
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B73719D8F0F52F294844FF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c41af962-f607-3db9-bfd4-9ba289adf078.roa
Signing time: Thu 30 Jan 2025 11:10:50 +0000
ROA not before: Thu 30 Jan 2025 11:10:50 +0000
ROA not after: Wed 30 Apr 2025 10:10:50 +0000
asID: 30036
IP address blocks: 173.29.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:19:d8:f0:f5:2f:29:48:44:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:10:50 2025 GMT
Not After : Apr 30 10:10:50 2025 GMT
Subject: CN=495ab4ed-64f9-4758-a848-4e0fd319e483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:61:38:f1:49:8c:cf:61:28:81:9f:88:d8:
82:08:ab:ea:9c:13:7f:a6:98:a8:d7:3b:e4:b5:0a:
51:c2:30:53:12:ba:5b:26:58:0b:cc:57:cc:eb:59:
3b:67:8a:9f:cd:6c:b6:56:7e:61:ce:de:9b:94:a6:
56:65:00:d0:65:77:89:a4:02:2f:4c:de:d8:84:34:
be:3e:7d:f7:e0:fd:eb:c7:d5:e7:f2:e6:70:96:12:
06:41:67:75:70:0e:85:f3:6f:e1:48:07:06:35:a2:
91:ae:5a:51:bb:5f:b9:e6:e0:77:d1:2e:83:8f:4e:
ee:67:36:c3:7f:69:b6:3e:e6:7f:c9:3f:86:c4:8f:
86:e4:26:31:56:54:0f:f6:4c:bc:60:c9:ab:5d:a6:
58:88:6c:34:42:23:42:35:b9:6a:68:e7:7e:fb:ac:
f1:b4:13:bf:33:29:f1:54:28:0a:b4:07:f5:f7:72:
97:fd:1c:f9:b2:8a:26:74:13:54:bf:38:7b:a4:5c:
fa:02:7f:64:e6:13:4a:f5:94:f9:0e:31:44:c9:32:
19:01:15:db:9e:19:ec:d6:35:38:30:dd:60:5c:ee:
06:5e:dd:43:d0:4a:16:f8:01:7a:69:94:53:1a:7e:
65:4b:52:0a:9e:e3:df:8a:8b:d2:af:a1:18:a3:d2:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0D:D6:A1:79:83:53:EE:87:B4:17:35:C0:1E:F9:49:B3:2A:3E:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c41af962-f607-3db9-bfd4-9ba289adf078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:cc:05:78:d0:b9:44:17:87:75:4f:ba:aa:b2:c1:4e:e8:47:
ec:6e:49:73:35:40:3c:70:51:e6:4d:9a:60:52:97:3f:29:47:
8d:8c:53:b5:1f:45:c0:64:47:08:f5:88:bc:b7:06:80:ad:9e:
96:78:8e:10:e6:6a:bd:41:c6:ef:9f:2e:63:3c:d5:5c:3e:7d:
c6:2e:92:6d:7e:34:cb:7b:6d:83:37:e9:e3:a9:3e:49:68:dc:
42:b2:12:6c:64:da:74:24:d9:38:a8:32:78:56:0f:84:95:a4:
1d:6a:05:c7:a1:5a:d8:73:03:ed:06:25:b3:c8:8c:f4:ab:8a:
38:24:bf:5f:0f:3b:67:22:29:f3:61:7d:78:92:e2:db:b2:30:
60:58:99:8f:1e:26:4f:13:bb:e3:bd:1a:99:8f:9b:f1:f1:04:
03:aa:11:71:3b:a3:3f:e1:8a:12:c6:e3:35:ee:5d:b9:e8:72:
f2:09:9f:8f:e0:4b:81:87:33:24:90:e5:65:30:ef:ad:7e:d5:
cc:7b:ff:c0:1f:2d:2e:09:c8:8c:77:9d:7a:09:89:a6:58:04:
94:a3:6e:4f:06:a5:c6:c4:d2:df:ff:c0:12:24:e5:8e:f7:1e:
4f:f1:97:3a:e6:a6:97:b2:30:2d:50:68:15:06:e1:a6:92:00:
08:8f:e9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:53 2025 by rpki-client