Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa
File: d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa (raw, json)
Hash identifier: Xgb8Dq0zxCZclpyd2cY5PPnFTWJo9NDklbsRU6joazU=
Subject key identifier: D0:08:EB:A9:DB:38:27:0F:71:D4:49:35:B9:10:42:E2:5B:71:E3:85
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7FDB3AA1B04EE1F88200080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa
Signing time: Wed 05 Feb 2025 11:23:56 +0000
ROA not before: Wed 05 Feb 2025 11:23:56 +0000
ROA not after: Tue 06 May 2025 10:23:56 +0000
asID: 30036
IP address blocks: 173.20.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fd:b3:aa:1b:04:ee:1f:88:20:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:23:56 2025 GMT
Not After : May 6 10:23:56 2025 GMT
Subject: CN=1aeb9fc3-65d7-4c11-99a9-78b1cf2cca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:94:78:d8:64:83:99:8c:7e:98:28:f1:bc:
b8:66:1c:8f:bc:ca:69:7b:81:4b:a7:61:09:48:ee:
86:68:32:8b:78:03:67:95:08:9a:79:80:b4:ab:6d:
b8:13:94:1c:23:8f:e0:5f:90:ed:c1:a3:16:b9:fd:
eb:21:91:e2:1a:be:21:1c:85:bc:63:0a:62:e6:d1:
24:db:29:22:6d:6a:37:a2:4f:01:c1:d5:a3:53:b3:
f5:11:b2:46:50:38:c7:26:28:c5:ad:b4:c5:aa:17:
14:6a:a7:e8:46:a9:32:71:e9:5c:43:b4:98:83:1d:
ff:9b:46:93:73:06:89:71:c3:e5:39:d6:64:15:1f:
a8:ee:bc:60:e6:ae:97:80:08:6c:1d:f6:bf:40:cf:
50:ad:ca:b3:af:cb:5d:77:60:04:91:b3:fd:30:dc:
b2:c5:58:04:dd:08:0b:dd:3f:34:c5:7a:07:a0:16:
1b:c4:6a:d9:b1:80:fe:3d:b0:8d:6b:37:7b:d0:d9:
74:18:6d:2d:63:48:41:01:70:fd:76:d2:5e:7f:29:
65:58:51:12:65:78:f7:3d:f9:ff:3d:b5:6a:80:27:
17:14:78:77:e9:c3:66:46:4c:43:cb:a9:a4:1d:c4:
c4:75:c0:a9:fa:cd:79:e7:25:b2:5a:ae:1a:f6:72:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:EB:A9:DB:38:27:0F:71:D4:49:35:B9:10:42:E2:5B:71:E3:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:71:18:d0:1a:c5:5b:77:a1:e5:6e:ce:33:20:41:a2:43:36:
1f:89:32:1e:e8:df:bb:89:db:ba:29:1d:08:4c:ec:0a:ef:ee:
c4:37:f7:cb:59:16:a9:01:d8:8b:8f:c0:86:36:a6:51:b9:8b:
72:bd:92:d6:29:24:e3:4d:30:32:8b:86:33:b7:83:11:23:cc:
90:4b:a7:f4:c0:e0:df:1f:c5:9f:80:cf:95:c3:43:cb:ad:38:
28:29:fe:e1:ca:2f:6b:c4:91:e6:3c:1d:0d:38:cc:dd:e1:b4:
0c:7c:b0:7d:65:ed:7f:10:7a:41:66:a5:4e:5f:d7:b4:93:8e:
4b:06:d0:c3:b4:14:61:90:51:1c:85:9e:f5:56:b8:bc:a2:12:
1f:50:27:65:59:64:33:cf:79:b8:b5:a3:94:13:56:d1:37:ef:
d4:58:4c:6a:ce:f2:b0:57:52:d4:25:b1:a3:45:9d:f6:33:43:
be:c2:11:62:52:ba:f2:88:7a:b8:d4:26:3f:a7:d3:cc:dc:cc:
04:81:44:c5:90:6e:ad:dd:b5:51:0c:99:18:28:c5:38:bd:c7:
a5:21:a7:1f:86:75:22:5f:50:6d:75:1d:d2:d4:3e:f9:9c:47:
1d:19:71:e2:f6:70:13:66:aa:c3:30:71:bf:7e:06:30:6c:5a:
fc:9d:08:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:59 2025 by rpki-client