Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe0f1f3-45a3-365b-948d-b553e267569c.roa
File: cfe0f1f3-45a3-365b-948d-b553e267569c.roa (raw, json)
Hash identifier: hfnzDngZqO3jPMiRNoygb/JepOw1PXhpD63YRbOBk20=
Subject key identifier: F4:71:20:53:16:B9:C3:AE:1A:37:C5:3D:5E:63:63:D2:32:56:4D:7A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57DEA6C85705A8F62C90C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe0f1f3-45a3-365b-948d-b553e267569c.roa
Signing time: Tue 04 Feb 2025 13:54:50 +0000
ROA not before: Tue 04 Feb 2025 13:54:50 +0000
ROA not after: Mon 05 May 2025 12:54:50 +0000
asID: 30036
IP address blocks: 173.20.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7d:ea:6c:85:70:5a:8f:62:c9:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:54:50 2025 GMT
Not After : May 5 12:54:50 2025 GMT
Subject: CN=adba4452-5a1d-4ede-a3eb-cad010a253af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:27:67:29:04:0b:9b:20:38:f0:1d:df:d7:
2e:58:f5:e7:25:e3:d0:f7:11:74:bc:3e:0d:6a:3c:
9c:13:2d:08:8a:38:9b:23:bf:6b:f2:a3:4a:3c:45:
3b:38:42:ed:76:c6:f9:8d:16:91:12:08:e0:91:7b:
4a:f6:2b:de:7b:1e:3d:ad:19:4a:d7:f5:e1:04:31:
0a:2c:ca:9c:9f:65:1e:70:28:40:5d:0b:3e:d0:26:
06:58:ba:25:9e:02:0c:c6:00:65:0e:6e:19:00:b8:
29:a5:88:21:59:1e:6c:3a:0a:8a:6b:31:26:9e:57:
f7:30:ac:59:5c:08:e7:45:68:8f:d0:4e:5d:51:1d:
30:ce:a6:2c:ea:e4:77:59:4c:8a:48:f3:38:06:80:
d4:c0:ef:aa:cc:b0:4d:4e:11:4c:75:8a:01:4b:1c:
8a:ff:36:18:b8:d5:f2:cb:62:0e:77:8f:29:d6:7c:
e1:54:8a:d6:81:3f:23:50:37:a5:5f:9f:08:63:de:
a5:80:ca:3e:a8:93:d1:50:79:99:26:72:39:c8:62:
9a:67:c3:4a:7e:0c:de:73:19:00:fb:18:a7:34:a2:
f2:d8:ae:e5:a2:69:96:b0:62:86:8c:85:2a:f4:83:
c4:42:44:b4:26:ba:41:f5:39:e1:6b:cb:44:4d:f0:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:71:20:53:16:B9:C3:AE:1A:37:C5:3D:5E:63:63:D2:32:56:4D:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe0f1f3-45a3-365b-948d-b553e267569c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:6b:13:e7:e7:b3:cd:00:de:33:06:43:b4:32:5c:71:29:d6:
c5:56:0b:ac:47:57:fa:eb:2b:36:f8:db:d6:e5:92:10:ea:68:
4d:14:b7:a5:b4:e7:c0:06:38:fc:6d:04:3e:be:4d:17:c6:5c:
9b:99:44:61:0d:30:9f:d3:00:1d:1d:ef:3b:ff:73:f0:e2:1f:
02:e1:21:aa:96:6e:3a:d5:46:ed:30:9e:d3:ad:e1:f6:81:cc:
07:2e:1f:b1:5b:51:85:7e:e2:2b:3a:77:20:05:0d:99:1e:75:
39:fa:7f:3e:19:70:5d:a9:9e:85:4b:8d:6e:94:2d:a9:73:c7:
40:68:50:9b:f4:25:a2:0c:ca:9f:da:ab:f6:2b:dc:83:97:38:
85:ca:56:16:15:11:29:7a:ae:29:ee:96:d8:b1:0e:84:44:fc:
8b:35:d5:64:5f:09:f6:3b:1c:76:39:64:26:b7:0e:ae:c6:2a:
72:7e:68:73:b3:fd:1b:20:74:89:ea:39:fb:ab:fd:6f:03:3e:
0c:3d:29:38:61:d4:05:0e:3d:93:be:f9:4e:11:3b:a0:e5:e8:
ff:91:f2:e6:ab:46:10:1a:d8:19:1c:e2:76:e9:51:a2:23:49:
4c:5a:7e:3b:54:ad:a3:e9:94:58:5f:6e:e9:a4:3c:42:a8:15:
03:1c:3f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:30 2025 by rpki-client