Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6805f66-5e30-366f-979f-449aa0675c32.roa
File: d6805f66-5e30-366f-979f-449aa0675c32.roa (raw, json)
Hash identifier: 5y29WPLjVhoxonyuNCqZ4Rl5/B8mXO/O/y/hU7HWQIg=
Subject key identifier: 2B:43:63:DF:A7:5D:95:FE:9B:9B:26:38:C3:DA:FB:99:C9:17:AB:CB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F794F2A3AA09D8DEA95840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6805f66-5e30-366f-979f-449aa0675c32.roa
Signing time: Wed 05 Feb 2025 11:11:36 +0000
ROA not before: Wed 05 Feb 2025 11:11:36 +0000
ROA not after: Tue 06 May 2025 10:11:36 +0000
asID: 30036
IP address blocks: 173.28.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:94:f2:a3:aa:09:d8:de:a9:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:11:36 2025 GMT
Not After : May 6 10:11:36 2025 GMT
Subject: CN=a8010778-6f58-462e-b50e-f1b84b73dfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:1d:2a:21:fa:83:33:70:5c:73:fa:b9:38:
bb:13:75:2d:46:96:09:e0:da:45:79:a3:f2:d9:38:
79:a5:a8:ff:4e:89:ea:0a:46:c6:58:f1:ab:b2:9f:
fd:a7:0b:04:e7:44:51:b1:fd:f1:9e:0d:49:86:11:
48:52:12:4c:89:c0:1d:a6:70:48:41:53:66:63:47:
d3:83:9d:bf:f4:b1:5a:29:c1:34:4e:01:42:eb:18:
33:34:88:08:e3:8c:62:f2:8a:85:66:08:d4:f8:1b:
a4:5c:31:72:2c:dd:86:d6:7d:7f:df:b7:e3:d4:9d:
53:5d:2e:18:34:f5:ce:57:23:29:4f:1f:19:13:4d:
4b:8e:d8:d5:53:ce:73:7a:a0:de:27:a3:9d:9a:a9:
90:23:2f:a7:5f:1a:dd:f2:bb:81:52:82:51:36:79:
29:d5:d7:66:fe:59:4e:f5:65:2f:e7:29:43:40:f1:
5d:87:94:ad:79:1a:8f:0f:4e:06:40:d5:85:9c:7b:
fe:81:5a:1e:8a:99:5e:31:a7:2f:5c:45:b4:78:f8:
17:c0:e0:05:d9:73:17:e5:84:51:36:9a:7a:fa:d8:
bb:e2:7a:86:c3:37:f9:38:0f:f3:35:bc:bd:af:9a:
f5:49:71:2b:81:f7:16:f2:9d:3f:b5:29:d6:f5:13:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:43:63:DF:A7:5D:95:FE:9B:9B:26:38:C3:DA:FB:99:C9:17:AB:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6805f66-5e30-366f-979f-449aa0675c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:07:5a:48:fc:d6:de:63:17:c4:f7:e7:43:af:ce:28:57:69:
ff:4d:77:ba:0d:42:79:a6:87:56:9a:1a:2f:34:d8:da:f9:da:
23:b4:86:39:b4:47:08:64:37:a0:22:80:56:c8:1d:1e:2a:5c:
dd:75:5a:41:02:52:da:e4:33:02:28:57:c8:be:e2:92:9e:72:
67:12:da:46:66:44:e2:ab:5f:11:31:8e:bd:08:00:91:1f:c3:
e1:1b:47:f2:e7:a5:26:f4:b2:a7:9d:fb:b8:f0:d3:5a:b5:ec:
1e:b9:1b:5e:88:77:05:97:e8:a6:a5:7a:b1:f8:dc:4a:59:65:
66:e1:7a:d7:f8:bf:05:95:ea:ae:bb:88:58:08:54:3c:2c:3c:
c4:76:6a:47:38:fb:78:9d:53:b4:89:ad:ed:a3:93:c7:07:86:
f1:94:ea:49:bc:5a:fa:71:8b:9b:87:0a:68:31:87:a8:a4:81:
dc:2e:08:b5:01:93:ea:a5:bd:b6:73:e7:a2:9b:9f:41:2f:b9:
76:20:62:c1:a1:21:1a:fa:bb:ce:fc:02:5b:d8:84:d2:4a:44:
d6:9e:13:3d:69:66:14:a8:6b:d6:9f:5f:5f:3a:62:f0:8b:c7:
e2:e0:ee:43:c4:e7:56:8a:bc:ac:c7:72:fc:5e:01:01:9d:2d:
73:e4:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:39 2025 by rpki-client