Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da24ea1c-45de-3bb8-874b-d2d7edf5b0f4.roa
File: da24ea1c-45de-3bb8-874b-d2d7edf5b0f4.roa (raw, json)
Hash identifier: 9uZmqt/e9hQlfBCO+EGrYTlhztU47OwOI3y7S89kZTY=
Subject key identifier: 27:86:9A:A3:CC:39:2D:60:9B:18:2F:9D:D0:13:BA:6A:B3:3F:A4:1F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B73669923DF8F54F4F908A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da24ea1c-45de-3bb8-874b-d2d7edf5b0f4.roa
Signing time: Thu 30 Jan 2025 11:09:27 +0000
ROA not before: Thu 30 Jan 2025 11:09:27 +0000
ROA not after: Wed 30 Apr 2025 10:09:27 +0000
asID: 30036
IP address blocks: 173.25.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:36:69:92:3d:f8:f5:4f:4f:90:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:09:27 2025 GMT
Not After : Apr 30 10:09:27 2025 GMT
Subject: CN=0ab89cf0-33b7-4491-b55b-070169a2c0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:3a:5b:43:c1:33:af:fd:5f:99:99:bd:76:
ce:e5:c4:2e:b3:92:72:5c:82:97:1d:87:17:be:00:
f9:36:8b:b2:30:6b:0b:a3:8a:7a:db:a0:79:12:e0:
0e:67:3c:b9:0a:83:48:58:a2:08:04:9a:7f:13:5d:
fc:40:bc:f8:23:54:a3:0c:d6:ff:9b:ba:4c:fc:a9:
02:c8:8f:c7:0c:fb:88:e2:a5:a3:98:f9:b0:04:9e:
11:b8:11:f2:97:36:d5:6a:79:41:36:02:cc:23:1d:
4a:13:dd:be:68:06:b8:b2:c2:7e:11:ec:b4:58:78:
b8:12:47:ae:e1:b3:04:5d:97:fc:6f:bd:21:e4:98:
e8:1f:a1:43:61:ed:4a:ab:95:53:9e:af:77:df:62:
8e:c7:77:6a:f2:65:e8:e1:0f:52:a6:73:c6:c0:3c:
22:84:e8:09:73:65:e1:c5:7e:3d:e4:7c:8a:61:43:
c5:5d:86:ab:61:9a:8c:39:19:5c:6f:36:04:9c:51:
c8:8e:cc:37:00:ee:9c:23:a7:8e:88:86:e6:ca:d1:
ac:62:08:eb:72:33:a7:2e:71:81:38:82:a3:31:3b:
9b:3f:bf:3d:2d:1e:d4:1c:99:f3:54:54:03:53:9d:
c3:d0:c8:58:06:f0:77:16:40:c8:83:ec:7b:b7:ea:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:86:9A:A3:CC:39:2D:60:9B:18:2F:9D:D0:13:BA:6A:B3:3F:A4:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da24ea1c-45de-3bb8-874b-d2d7edf5b0f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:db:b9:f1:d3:bd:2b:d0:04:88:b6:38:93:82:d4:33:84:ee:
4e:fc:a5:b1:03:32:77:6d:bf:60:39:d1:c1:48:cb:08:4a:a8:
65:f3:1c:ac:c1:ec:01:5f:a6:c1:d0:6f:8c:d4:b4:82:7e:93:
d1:08:95:e7:fa:aa:98:83:38:4f:26:11:2e:36:32:17:4c:68:
ae:87:ec:c8:c7:69:78:0a:33:e7:a7:f1:87:88:7f:56:7c:ea:
e3:a8:fd:a0:4a:cc:f4:43:4d:64:fc:9a:ba:91:9c:3f:09:42:
3a:f0:97:24:8d:a4:c0:b2:e7:93:2a:a4:01:a2:8e:27:7a:be:
d8:80:a5:04:f2:72:c5:44:89:55:de:d5:8a:0a:32:82:91:16:
a5:c5:fc:c8:a7:b2:4f:07:8f:b2:5b:71:92:e9:27:61:70:8b:
7e:80:7f:66:ac:11:04:8e:a3:f3:cb:1d:ac:7a:eb:de:91:90:
fa:47:d5:6a:59:9b:d0:68:bf:44:19:08:7e:03:73:05:fe:df:
37:e4:0a:10:38:f9:ea:71:f1:f9:66:90:b1:64:3b:6d:bd:dc:
61:2a:a8:30:c7:b7:3a:c4:d8:d6:0d:8a:37:a7:c0:61:16:df:
48:90:ed:62:b9:71:df:85:27:e9:5e:6b:1b:77:2f:dd:df:35:
0d:47:71:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:12 2025 by rpki-client