Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d883a0da-302b-34e3-b6f3-927b6ce8b469.roa
File: d883a0da-302b-34e3-b6f3-927b6ce8b469.roa (raw, json)
Hash identifier: 4LD0FGO6hV9WvZUPEFGnOoqTAuJyi4ZqWP1slOlb00Y=
Subject key identifier: 1E:AB:93:4C:98:F8:20:4A:5A:3A:7F:B4:34:41:7A:1F:58:87:5A:74
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F64F4B1013A2016CA821B0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d883a0da-302b-34e3-b6f3-927b6ce8b469.roa
Signing time: Wed 05 Feb 2025 11:09:02 +0000
ROA not before: Wed 05 Feb 2025 11:09:02 +0000
ROA not after: Tue 06 May 2025 10:09:02 +0000
asID: 30036
IP address blocks: 173.18.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f6:4f:4b:10:13:a2:01:6c:a8:21:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:09:02 2025 GMT
Not After : May 6 10:09:02 2025 GMT
Subject: CN=decaf69a-ebe9-4899-b94f-7763362cd08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:92:7c:58:67:19:66:d3:7f:c3:54:c8:dc:
78:16:6f:11:25:a3:e1:27:f4:82:ba:91:b8:e6:fe:
7d:8f:2e:8e:96:ba:d0:d4:4c:df:03:f1:e2:64:6e:
c4:26:e2:51:be:03:cb:7a:3c:ed:6f:d5:03:8d:fd:
d4:1a:92:2b:06:4f:e8:b7:b9:91:0f:01:78:2b:33:
e4:80:72:80:62:65:3f:24:79:25:51:bc:58:3c:19:
d3:c1:62:a5:01:39:0c:02:66:7c:ed:56:29:13:99:
5b:2e:9c:26:35:92:02:b8:97:18:76:72:3c:03:95:
47:23:d1:4c:e2:1a:da:d2:8d:e2:e7:e2:00:c0:d7:
6c:3d:f9:c7:dd:86:4d:a5:ac:c5:6a:5b:88:0e:69:
3a:e6:f9:a9:43:25:17:45:00:ff:cf:f5:5d:9b:53:
22:fa:d0:c2:a0:9b:ce:38:cf:bc:69:c2:af:e9:77:
0b:a7:b2:d6:5d:8a:1f:e6:8c:2d:ff:60:12:0a:0e:
70:ea:23:ca:d3:fc:bc:35:d7:2b:b7:21:0a:2a:c8:
d1:37:d0:c6:24:cf:bb:c2:f1:3f:98:5d:ce:7e:e0:
47:89:c9:ba:77:b9:de:04:6c:eb:5a:0b:20:8c:97:
e9:01:33:1c:25:b9:54:99:71:0f:d1:c5:2e:a1:5e:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AB:93:4C:98:F8:20:4A:5A:3A:7F:B4:34:41:7A:1F:58:87:5A:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d883a0da-302b-34e3-b6f3-927b6ce8b469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:82:ce:0a:f5:6b:3d:b1:4f:84:7b:15:8a:32:99:e2:86:e9:
66:19:1d:6f:d9:46:0d:04:a1:4b:7c:20:95:04:85:f4:af:ed:
6a:bd:6a:22:15:9c:0a:32:83:99:4a:df:46:eb:2a:ee:96:44:
60:b0:b8:aa:45:a9:85:5e:bd:c4:c7:3e:be:f5:99:83:bc:ed:
88:d8:e4:29:ce:42:97:1b:ad:33:f2:a3:ba:e2:b4:09:2c:71:
b5:c8:b9:66:1e:55:ae:4a:61:67:47:11:13:22:85:0b:ed:59:
71:b5:a0:f0:8a:c8:ca:37:78:e9:68:81:a5:b1:54:99:91:49:
8c:d8:2a:e4:25:b0:74:95:86:06:b2:b9:08:aa:6e:bb:d3:63:
5b:cd:90:f0:0a:6b:2b:89:20:41:ee:67:94:31:ed:4f:85:b9:
e0:e7:6e:7b:f9:ac:73:00:b5:0a:1d:3e:6d:d4:a7:ab:e8:83:
5b:c7:80:24:33:50:dc:87:89:aa:82:cc:a6:47:92:74:f8:bd:
95:66:4d:dc:83:22:52:14:be:9c:3b:e8:3d:ef:ff:c8:11:5c:
f7:db:b1:e9:45:bc:43:dc:df:22:b3:c4:ea:e7:0f:fa:4f:a1:
b0:ef:ea:91:58:fc:83:16:bc:5e:95:f3:4a:b6:4c:f0:55:c6:
05:30:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:52 2025 by rpki-client