Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa
File: c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa (raw, json)
Hash identifier: aWKXUvjoc0SJPRikWj1ucxIl/JM41A5+Lu18JEgZclc=
Subject key identifier: 2F:F4:ED:F7:C8:52:63:E6:3A:13:4F:31:EA:7D:B0:70:45:6F:42:E3
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C26415B494C738ACDF032700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa
Signing time: Mon 03 Feb 2025 11:15:22 +0000
ROA not before: Mon 03 Feb 2025 11:15:22 +0000
ROA not after: Sun 04 May 2025 10:15:22 +0000
asID: 30036
IP address blocks: 173.29.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:15:b4:94:c7:38:ac:df:03:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:15:22 2025 GMT
Not After : May 4 10:15:22 2025 GMT
Subject: CN=861d579e-7414-4f2d-aa85-b62ccaf27976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:ca:12:43:ca:53:fb:04:9f:49:2f:d0:fe:
50:9d:84:b7:4d:13:dc:59:6a:81:75:a4:f1:7a:b9:
5a:37:ae:12:7a:64:e5:42:53:60:19:83:db:2a:91:
8a:c1:75:03:b7:c8:4e:97:80:18:56:70:d2:22:8a:
ed:c8:6f:fc:b3:54:09:0d:47:c5:91:e6:37:c9:d4:
d0:28:3d:33:c3:1a:7d:1d:78:99:c1:74:e3:48:98:
f3:fb:86:1d:a2:6c:35:ea:62:98:d6:89:8f:7a:a6:
e6:76:e1:5f:2c:34:a5:e8:91:84:ff:52:f7:31:ca:
d5:a0:e1:d5:af:58:a2:39:7a:aa:30:0c:00:53:4a:
19:3e:a8:1d:e1:f0:56:38:c9:b2:2d:3c:e0:f3:c4:
38:6e:9f:fe:5a:60:63:f6:d5:29:c5:63:08:95:c0:
85:a6:0d:d4:77:99:22:11:18:e0:ea:fd:51:ad:74:
05:b7:3a:4f:e3:a3:e0:fd:33:10:98:86:3f:98:66:
03:a3:fe:25:33:f2:8e:c8:62:a3:6c:5a:4b:57:71:
12:e3:6b:4d:29:d8:33:c4:3c:23:ea:30:6b:60:b6:
35:2a:36:24:4c:af:b0:8d:74:73:62:81:bc:8b:ae:
90:74:8b:99:67:60:2f:c0:af:ca:f0:3a:9f:d2:ae:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F4:ED:F7:C8:52:63:E6:3A:13:4F:31:EA:7D:B0:70:45:6F:42:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e5:24:dc:aa:8a:c1:9e:08:95:fd:60:36:52:93:b3:fe:6b:
16:88:7f:a8:65:be:3a:69:4b:83:dd:9b:4e:86:56:fc:14:ed:
f6:8b:33:a5:92:a1:b4:08:87:6c:6b:94:78:87:3c:05:a0:dd:
65:b0:1f:2f:19:4f:40:a8:f1:ab:37:38:74:46:6a:d3:f1:34:
8c:7c:02:37:d0:5c:1e:04:88:01:d1:a1:59:90:2f:65:66:f1:
3c:3a:15:a2:6d:a1:70:95:b8:59:73:48:d8:ba:1c:4c:87:aa:
2a:41:29:85:43:c9:7f:88:62:c2:15:d2:dd:f3:c9:86:5d:51:
99:21:bf:73:e7:51:fe:86:9d:5f:21:91:bd:c1:47:18:60:f8:
63:2c:9e:69:e4:11:7c:ff:dc:6a:9a:99:55:8a:0c:34:42:45:
10:fb:03:8b:40:c2:9e:91:59:d4:8c:1f:9d:30:09:29:06:96:
a6:37:22:26:a4:c7:d8:86:88:f1:60:55:34:07:4e:7e:7d:42:
0d:7f:33:b3:f9:5f:69:db:59:7d:76:1c:ad:88:51:8a:25:dc:
a9:9e:72:45:6e:04:bb:f2:ec:9a:dd:6a:2c:3c:a0:99:46:4e:
8f:0a:7e:eb:1e:9a:1e:dc:da:d1:41:0e:bc:4c:73:67:ad:c1:
12:9d:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:58 2025 by rpki-client