Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc62e678-d5d2-3d5c-9f24-c68905ce905f.roa
File: cc62e678-d5d2-3d5c-9f24-c68905ce905f.roa (raw, json)
Hash identifier: TQOeW2ahTfoXgaUjNlPXAnbpmcxo4XcllNvxYXXj6Y4=
Subject key identifier: 73:69:12:78:E7:A5:1F:6B:69:F8:57:D5:B5:AA:4C:FD:E2:99:3B:2B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C26123AE5235FD4E361A5B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc62e678-d5d2-3d5c-9f24-c68905ce905f.roa
Signing time: Mon 03 Feb 2025 11:09:26 +0000
ROA not before: Mon 03 Feb 2025 11:09:26 +0000
ROA not after: Sun 04 May 2025 10:09:26 +0000
asID: 30036
IP address blocks: 173.24.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:61:23:ae:52:35:fd:4e:36:1a:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:09:26 2025 GMT
Not After : May 4 10:09:26 2025 GMT
Subject: CN=a2b059c7-cd82-4c48-b5ee-4b593aff6d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:a7:8b:18:2d:3b:35:8d:07:bc:39:8c:2d:
54:ea:c1:9a:c8:f4:67:22:8b:93:ad:e1:db:ac:55:
aa:52:22:44:c8:62:55:0d:da:43:22:bc:cb:26:fe:
5d:d2:ca:78:f1:8d:1e:3f:2a:d5:0d:3e:2e:db:51:
06:7a:e2:49:ec:20:cf:18:81:96:6b:e3:99:bd:9c:
4a:d8:29:56:02:a6:0c:e0:fe:2e:2a:32:d0:83:59:
14:b3:d5:a0:3c:c0:07:35:ae:44:0f:41:85:32:42:
ca:19:cd:91:4a:12:6d:5e:6c:a0:a5:d7:5b:58:a4:
d0:30:c3:08:d3:a8:a6:6d:41:70:7f:35:f2:6c:6e:
24:2c:22:cb:c8:f9:16:0c:7f:fa:fd:15:4e:ae:6c:
5c:b2:f7:ca:f6:77:de:65:5d:dc:41:c3:ff:13:14:
0f:8f:96:42:bb:27:d4:c8:41:9a:1f:c6:06:e1:66:
ed:bc:d4:08:52:06:4a:75:09:00:af:84:da:2e:c9:
90:2c:dd:52:ab:2f:a0:d6:e4:b2:cb:a8:00:6c:d3:
ce:ac:94:54:3f:c2:a1:ae:fb:52:58:4c:d6:f8:4c:
22:19:21:42:65:04:d2:65:9e:6a:49:1b:9e:39:05:
a5:bd:6a:6a:1e:30:d4:e9:e9:a1:03:a2:e3:25:3a:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:12:78:E7:A5:1F:6B:69:F8:57:D5:B5:AA:4C:FD:E2:99:3B:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc62e678-d5d2-3d5c-9f24-c68905ce905f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:c4:d2:54:e1:64:34:4b:f2:d6:d5:a9:53:7f:6a:f0:50:d3:
8b:c2:f1:5f:51:7a:9c:04:01:f5:36:6b:5b:a7:7c:a9:3f:48:
da:7a:33:98:20:82:0d:72:fe:5b:3a:a8:12:be:c0:96:22:b7:
15:6a:58:a6:56:e8:42:a7:eb:2c:38:d5:1a:fc:b1:59:20:e7:
77:54:2a:a4:8c:ac:55:d3:ca:85:57:6d:64:53:b3:69:59:31:
7d:70:cc:85:04:f9:65:a9:70:f6:2b:31:83:88:40:f3:1f:2e:
1c:56:e6:a8:ca:47:73:89:e8:9b:03:08:5a:c7:17:bb:a8:58:
e7:1c:30:97:0f:db:cb:11:d4:d7:a3:d2:35:4b:f4:ef:d2:6e:
41:65:7a:23:8a:54:39:d8:30:72:87:3a:f8:b2:8a:9e:31:b4:
58:30:7e:0b:bd:59:94:af:ae:3a:2a:8a:aa:28:e1:bd:aa:3a:
8a:d3:96:d5:d7:82:cf:7f:a3:3b:0e:f2:f1:3c:c7:dc:48:bf:
65:e1:ae:be:47:62:b7:dd:f9:e2:31:f6:3e:01:00:df:3c:c8:
85:02:56:01:5a:5d:4e:e1:1f:c4:f0:36:d8:12:95:ac:35:7d:
07:3c:5f:38:c6:1a:e8:b5:e9:66:14:f3:2b:94:01:3d:3f:37:
d6:38:b8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:13 2025 by rpki-client