Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4b5e94a-6b60-3496-b03c-5f4cbe337664.roa
File: d4b5e94a-6b60-3496-b03c-5f4cbe337664.roa (raw, json)
Hash identifier: PxfLGF3LwyyAK5akO4Pik98Xl8l2VJSMw4DzVeUWYuU=
Subject key identifier: 01:F9:40:24:8B:90:77:A0:B4:2E:59:BC:7C:60:1E:5E:EA:58:2B:8B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C261C47C62CBF5708383AA80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4b5e94a-6b60-3496-b03c-5f4cbe337664.roa
Signing time: Mon 03 Feb 2025 11:10:42 +0000
ROA not before: Mon 03 Feb 2025 11:10:42 +0000
ROA not after: Sun 04 May 2025 10:10:42 +0000
asID: 30036
IP address blocks: 173.20.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:61:c4:7c:62:cb:f5:70:83:83:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:10:42 2025 GMT
Not After : May 4 10:10:42 2025 GMT
Subject: CN=8f5e4561-389d-4ee2-8f29-04493949987c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:e4:2b:20:3d:37:c4:61:33:19:64:b6:dd:
7c:27:f1:72:d9:28:aa:69:22:cd:8e:75:86:f8:49:
ba:9e:ca:6c:18:06:71:b3:8d:dd:01:0c:e1:2b:ef:
9c:c0:58:ba:55:80:04:fe:16:ef:ca:6a:cc:1a:80:
f1:41:78:c8:66:e0:75:a2:47:f2:5e:fe:b8:38:d5:
b6:bd:f9:26:e5:60:d5:ac:25:de:ce:57:d4:97:0e:
bb:c3:fb:f8:61:58:5a:03:86:7a:03:3a:8b:5b:1c:
b3:8d:d8:b0:8e:2c:32:e1:82:d7:cb:4e:08:f5:12:
3a:96:f5:c2:1b:51:99:1c:6a:35:92:d5:2c:73:22:
76:ee:7e:2c:ed:a2:39:d1:7d:6e:ff:3d:7d:a9:67:
2a:c6:bb:fe:3e:17:01:de:d8:a1:4c:6e:03:15:07:
a0:d5:bf:a9:45:3b:db:4d:ec:bb:97:f7:4f:62:0f:
11:86:1a:e0:a1:f5:53:2d:b6:a7:8b:31:d1:d3:e3:
76:3c:25:0a:c7:52:06:34:6d:a8:b8:a6:84:2c:2e:
ca:b3:72:2e:86:3a:f6:6b:49:fe:0b:9f:99:53:5d:
75:76:c1:82:88:6b:a5:60:3d:56:f7:0b:c2:ed:f3:
62:49:ed:60:c3:bf:73:8d:1f:e9:68:d4:f2:5c:37:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:40:24:8B:90:77:A0:B4:2E:59:BC:7C:60:1E:5E:EA:58:2B:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4b5e94a-6b60-3496-b03c-5f4cbe337664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:49:1f:e8:de:79:0e:0c:07:be:91:50:1f:8e:3f:78:8f:c9:
b3:56:b0:1e:c9:91:1f:3a:84:78:0f:9e:1c:05:74:eb:d5:20:
cd:52:36:07:6a:c4:93:cd:06:55:41:46:d0:1c:ad:7d:b8:52:
b7:4b:22:4b:f1:ef:18:f2:a3:89:e0:ba:26:07:71:f4:e1:42:
c8:f0:7f:8f:7c:cc:60:18:60:a5:a5:6f:8a:74:af:5a:64:38:
3a:07:0f:6f:20:1a:53:26:de:9f:84:a7:17:be:de:bf:e4:69:
94:16:df:75:02:d6:20:cc:ce:29:55:00:37:32:ee:f1:1f:b3:
be:34:4c:bd:77:e9:69:6c:c6:0c:5e:f8:a4:86:08:3f:77:b4:
32:a5:1a:71:98:f7:a6:17:d7:13:79:10:69:7c:fe:9b:9e:b0:
82:7c:87:78:17:ee:01:4a:5f:f4:44:47:da:64:b6:a6:68:c8:
aa:30:46:52:04:62:83:6e:a5:4b:2b:c1:7e:ba:77:aa:d9:5c:
a4:1a:e8:10:dc:0e:81:fe:4a:1f:45:75:79:14:85:be:0b:db:
2d:b7:65:ef:14:8f:59:61:38:53:bf:f1:85:df:c4:4f:a8:11:
f2:8d:df:76:45:c8:3f:15:18:b2:fb:13:cd:3e:8d:dc:95:7b:
0d:0f:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:55 2025 by rpki-client