Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa
File: d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa (raw, json)
Hash identifier: fH+Wu5ybJE4Y4ZyMoh2GTSA64mxCegb55yS19cAe93I=
Subject key identifier: 93:B0:7D:B4:25:08:98:18:82:99:06:B4:90:AD:3B:88:AB:BA:7C:09
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C532614B8610B6C74F24F300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa
Signing time: Tue 04 Feb 2025 11:22:38 +0000
ROA not before: Tue 04 Feb 2025 11:22:38 +0000
ROA not after: Mon 05 May 2025 10:22:38 +0000
asID: 30036
IP address blocks: 173.16.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:32:61:4b:86:10:b6:c7:4f:24:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:22:38 2025 GMT
Not After : May 5 10:22:38 2025 GMT
Subject: CN=a1b9e8c6-f1cb-4678-ab12-65c5413aba93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1d:3c:eb:5e:92:96:fb:ac:06:d5:9c:f0:64:
55:76:91:38:07:1f:dc:6c:1b:cc:92:f6:9b:37:30:
36:27:ca:38:e4:fd:19:a0:51:89:2a:2d:1a:4e:b7:
e5:2f:8b:37:2b:69:fe:a0:0b:27:51:fd:8f:4e:7e:
e8:c9:f2:2b:8a:76:14:52:22:a1:87:ad:17:73:b3:
3f:2a:0d:9e:a7:d6:bc:14:37:92:a6:1b:a7:25:a9:
f3:93:54:d9:38:40:c1:46:49:dc:23:d8:10:ed:5e:
e8:7c:d6:63:f8:25:d6:74:b8:8e:e5:6f:af:43:f6:
d9:8e:3d:d1:86:1d:01:37:da:60:ce:97:bb:b8:29:
87:4a:0d:0b:d6:89:2e:51:3a:76:5a:01:54:0d:ac:
56:36:a7:3e:91:f9:99:76:b2:f5:fb:2c:07:1a:cb:
11:f0:ff:57:f2:24:31:7a:1e:40:b5:8c:6a:ac:53:
13:de:6f:91:1e:59:7a:b7:15:6a:d0:3b:77:db:1d:
44:d0:a5:c1:46:e0:6a:b3:04:3a:26:f0:f9:96:3e:
5b:fb:b9:ba:ad:2a:e5:f6:d3:3a:74:44:06:0f:bd:
28:bc:da:9a:cf:35:2c:4c:8f:70:32:0d:ee:62:52:
c7:ff:bd:35:2e:e7:02:84:e4:13:b6:4c:8f:39:94:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:7D:B4:25:08:98:18:82:99:06:B4:90:AD:3B:88:AB:BA:7C:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:38:4f:2a:d0:01:c6:e6:99:c5:b1:82:f5:98:66:c4:7d:d2:
ee:15:67:5b:9d:da:bc:63:ea:84:5a:72:73:7d:e8:e1:bb:88:
a2:58:cf:93:15:fa:a1:b6:bc:f2:c8:69:30:91:fc:e5:cf:ad:
d0:c6:c5:87:bf:89:bf:34:7d:01:60:84:96:d2:ec:eb:99:02:
70:d0:f2:7d:b6:ee:5e:35:1a:ee:4b:cd:ab:4c:0b:4c:96:29:
02:b0:c8:ab:f5:f4:ca:f7:4f:62:d9:14:02:c7:89:5d:89:4d:
af:5a:3f:36:b0:fd:98:bf:b8:fb:06:a4:02:73:b7:e8:c9:af:
da:73:23:ed:42:31:49:d3:9b:14:a2:f6:6c:d7:24:66:e3:dd:
be:80:b4:76:9e:67:ea:7c:c4:7d:7d:19:26:ee:65:68:c7:bd:
29:07:b3:c1:9e:04:a9:99:d1:e3:44:15:e5:25:3f:5d:73:9d:
b3:dd:66:aa:97:a8:21:83:29:92:61:89:a7:c8:56:76:6b:a3:
6b:4d:d0:2e:d0:bf:af:6a:f8:66:0b:08:b1:29:3d:2f:33:24:
a4:ce:3c:c1:4c:3f:25:29:0f:04:89:e5:f5:5e:83:46:ff:22:
e3:67:c2:af:98:28:a8:27:df:94:82:c0:61:94:66:94:24:15:
17:15:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:42 2025 by rpki-client