Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf248ad8-cdcc-35a1-82a5-571430bb2417.roa
File: cf248ad8-cdcc-35a1-82a5-571430bb2417.roa (raw, json)
Hash identifier: X1R7RIgoJM+Kk1OuJ2akY9wwDcJ6p7qw0jB1WIOdW2w=
Subject key identifier: C7:79:2F:5C:6B:FD:30:12:73:F6:B6:12:F7:48:2A:33:AC:23:EF:C8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C26351449909806C142BC180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf248ad8-cdcc-35a1-82a5-571430bb2417.roa
Signing time: Mon 03 Feb 2025 11:13:49 +0000
ROA not before: Mon 03 Feb 2025 11:13:49 +0000
ROA not after: Sun 04 May 2025 10:13:49 +0000
asID: 30036
IP address blocks: 173.22.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:63:51:44:99:09:80:6c:14:2b:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:13:49 2025 GMT
Not After : May 4 10:13:49 2025 GMT
Subject: CN=cf1a248c-bb82-4670-9c87-0a5c24b54224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:55:1b:cc:8e:8a:83:0f:3b:d3:16:7d:f2:
90:2d:1f:4d:f7:10:7c:dd:ea:0a:15:14:d0:4e:09:
3a:d1:da:03:65:bb:38:ec:fd:86:23:c5:e5:bb:cd:
48:a5:1c:8d:6e:eb:4b:86:85:1f:34:e8:56:c5:a7:
d7:fd:2e:e9:4b:b7:40:7c:77:2f:38:58:dd:01:91:
b4:34:94:45:31:bb:69:93:92:a9:a1:da:1e:19:87:
99:7a:9a:af:c0:10:36:b5:69:c8:d6:49:cc:4c:bf:
e8:e8:a3:34:aa:14:e6:9b:52:51:ee:fe:19:50:39:
61:5c:bc:01:0c:45:c7:d5:76:ad:b5:a3:c3:ba:40:
ba:53:1c:6b:b2:8a:d6:ff:4b:03:f6:df:30:28:2a:
86:94:2a:86:a7:8d:1a:34:55:fe:bf:c2:37:5f:e8:
5c:6b:ca:b7:ad:f2:1f:1d:01:97:ba:d2:84:b2:40:
93:f4:f8:d4:23:06:c4:55:12:24:00:d8:e2:0a:42:
c3:b0:40:7b:48:d0:27:a0:5b:0d:be:91:5b:c3:5b:
00:2d:51:8a:9a:df:bb:29:ca:37:8b:4a:3d:f1:26:
c1:f7:bb:59:dc:32:b9:01:e5:30:c6:87:22:1a:86:
e3:4c:67:f5:f6:6e:c4:d7:fb:75:fd:ca:f0:e3:a8:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:79:2F:5C:6B:FD:30:12:73:F6:B6:12:F7:48:2A:33:AC:23:EF:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf248ad8-cdcc-35a1-82a5-571430bb2417.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:9a:35:c3:60:3b:3b:dd:11:05:15:38:b3:2f:33:4f:41:51:
4d:0a:41:42:63:b9:76:d5:70:e0:8d:1f:92:b7:90:da:c1:bd:
d1:81:16:db:6f:6a:1b:41:3d:38:0c:f5:2a:6e:38:ca:46:f6:
fa:b9:72:23:4c:d0:e4:ac:e5:35:d9:1c:87:b0:89:c0:86:c7:
ac:77:ae:1f:70:c0:26:94:f8:50:13:a2:70:71:65:c6:18:a5:
f6:5e:e1:d2:d2:53:fb:10:82:a3:bc:98:13:3d:bd:4d:d3:bb:
78:74:0b:89:d0:5a:d3:f6:4b:e6:0f:c4:69:52:a5:47:d7:e4:
c7:0f:29:cb:70:e7:b4:f4:c9:09:90:8d:80:11:89:b3:da:0d:
78:80:a5:e5:30:44:1d:91:2d:d7:a1:97:fe:1f:35:9a:19:a6:
40:d8:86:0c:15:dd:39:74:e0:f3:ee:05:1f:ce:55:08:69:88:
57:7f:15:f5:72:34:84:40:52:c4:a8:88:db:a5:cb:e3:9e:87:
9f:1e:18:54:0b:00:53:28:5f:df:a3:47:1a:3d:6f:38:ac:b4:
16:d7:69:4c:71:29:e3:4a:c2:fd:3d:2d:c0:5f:b8:26:4b:6e:
59:46:6d:a2:bd:f0:ee:4e:ac:8b:75:45:ca:da:a2:65:ca:c7:
66:9b:f4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:24 2025 by rpki-client