Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c7c8df99-b47d-38ed-8bd1-0427e070b88b.roa
File: c7c8df99-b47d-38ed-8bd1-0427e070b88b.roa (raw, json)
Hash identifier: 0onI2xShw4GE23oEb0u0fjj+vlO1cBNjZ+0/zFdEbPE=
Subject key identifier: DC:55:D2:71:08:E7:AC:0C:26:44:FF:1F:98:7B:14:9A:FC:3A:DE:B2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F7CC366A38F3ADF5478D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c7c8df99-b47d-38ed-8bd1-0427e070b88b.roa
Signing time: Wed 05 Feb 2025 11:12:02 +0000
ROA not before: Wed 05 Feb 2025 11:12:02 +0000
ROA not after: Tue 06 May 2025 10:12:02 +0000
asID: 30036
IP address blocks: 173.31.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:cc:36:6a:38:f3:ad:f5:47:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:12:02 2025 GMT
Not After : May 6 10:12:02 2025 GMT
Subject: CN=3421f551-2ed7-4af4-b25f-4609732c1265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:f1:c9:6b:d0:5f:43:97:cb:9d:91:65:13:
86:da:29:a9:d7:8a:df:cb:07:e2:38:6c:4a:c1:7e:
b1:58:bb:24:40:da:87:bf:1a:3d:25:b7:72:8b:b0:
47:bc:90:d7:ed:19:43:e0:f6:00:03:68:74:50:be:
a3:51:09:a9:d7:69:4c:d8:0c:67:fd:e1:ff:7a:36:
fe:d2:cf:e1:ba:74:4c:0c:d0:8f:31:77:01:ec:8e:
e4:ff:a0:4d:68:6f:ac:93:58:e0:0f:88:08:43:f2:
42:c6:3c:00:74:a3:e2:43:b5:31:8d:aa:80:5f:db:
ce:31:7a:7a:db:73:3f:5d:35:47:d9:3e:32:57:3a:
94:aa:9f:1a:57:17:d6:1d:ea:ff:f3:0d:eb:da:58:
61:4c:32:b1:ca:f9:be:4e:04:9d:92:87:dc:77:ee:
40:4d:b1:24:21:ac:da:71:4d:46:a8:07:bb:a2:a8:
c6:c5:50:bd:42:4b:27:af:48:91:a6:bf:bd:c7:33:
32:20:a3:a5:b3:4c:11:08:fb:c0:44:31:0a:e6:d5:
6a:08:ee:9a:e1:8d:ae:67:d9:d4:d5:bd:fa:38:c7:
d4:39:6a:90:33:40:ce:30:6f:e1:35:68:f2:69:b9:
45:00:01:95:20:6b:34:e6:15:c1:56:e2:d2:4c:ab:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:55:D2:71:08:E7:AC:0C:26:44:FF:1F:98:7B:14:9A:FC:3A:DE:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c7c8df99-b47d-38ed-8bd1-0427e070b88b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:ad:af:e1:17:64:12:9b:14:23:03:42:7e:44:45:14:bc:d4:
1a:73:cc:e2:9b:1d:99:24:86:51:3f:d6:ae:7c:aa:e4:7d:eb:
3d:7f:7d:37:d3:d8:4d:9f:fe:b0:cc:b4:5a:aa:87:98:1a:99:
a5:a7:ea:33:6d:68:1b:22:05:56:bf:79:50:8f:ea:5d:bf:f2:
bd:6f:30:85:71:2b:82:75:b6:a4:ac:de:8f:b5:06:20:80:3e:
09:9d:fe:f8:14:ec:05:f7:51:d6:67:32:01:00:7e:c1:8b:93:
6b:61:6c:86:fa:80:c0:bc:3f:b0:f1:f0:b2:b0:d3:d9:97:0d:
ce:5b:6b:ab:0d:d4:ab:b3:8f:a8:83:8a:f6:96:ed:c8:c6:d6:
e3:a2:b7:eb:46:29:27:c3:be:5a:29:fa:0a:48:16:62:ab:dd:
10:c6:32:c2:fd:8d:6d:19:49:e2:56:f3:3b:2c:48:e2:a6:37:
c5:30:0f:92:83:9b:44:d3:91:d4:ff:a7:43:ff:ba:84:0e:bc:
97:fc:c2:49:8d:95:22:18:7c:ef:73:fc:ca:82:00:5a:17:e1:
d2:24:8d:19:a8:29:ac:cf:0a:22:30:0f:db:82:d7:96:e7:45:
3e:a2:ea:f0:a6:06:90:b1:33:0a:8c:56:ba:0e:3e:6c:28:73:
5d:85:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:22 2025 by rpki-client