Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de7fa412-764f-37aa-9d85-c7f360e51d54.roa
File: de7fa412-764f-37aa-9d85-c7f360e51d54.roa (raw, json)
Hash identifier: HAnXJ6EeA1IrNQGGDgjzhw1KIEeSbEMoV/dZ0YbUIo8=
Subject key identifier: F6:E4:3A:A0:68:78:F6:23:85:76:2F:92:7F:96:7E:D2:1F:1A:CC:55
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C55F26ECEF158F4DA84ED680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de7fa412-764f-37aa-9d85-c7f360e51d54.roa
Signing time: Tue 04 Feb 2025 12:52:51 +0000
ROA not before: Tue 04 Feb 2025 12:52:51 +0000
ROA not after: Mon 05 May 2025 11:52:51 +0000
asID: 30036
IP address blocks: 173.16.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:5f:26:ec:ef:15:8f:4d:a8:4e:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:52:51 2025 GMT
Not After : May 5 11:52:51 2025 GMT
Subject: CN=4bbcaa00-111f-44d5-888b-b87e62cc21fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:23:97:63:62:3d:50:81:d6:60:92:22:81:
98:e3:78:66:99:b2:68:48:d8:d3:4a:cd:6c:80:c2:
04:b7:36:c4:71:0d:f1:dd:19:d6:57:45:d7:98:8a:
7f:39:46:5e:0e:d2:aa:c4:2f:89:a7:f6:5d:bb:9e:
1a:9d:e5:33:1e:65:2c:c9:07:f5:49:30:c0:af:56:
cd:70:68:ac:21:54:41:16:73:ee:4c:f4:e4:4d:c6:
a8:7a:eb:0d:0f:07:c3:fe:0d:f1:f9:35:0f:d5:1a:
c3:a0:37:ba:a8:6e:d5:7a:29:93:43:5e:78:89:eb:
16:46:58:bb:83:1e:cc:42:e8:c9:66:8e:3a:fe:ba:
02:52:ce:f2:b9:d2:3f:db:21:77:07:a1:34:f6:8e:
79:ff:71:ad:77:e9:08:ae:c8:45:ad:c7:b4:90:be:
7c:28:57:49:f1:72:a5:3b:77:40:6d:22:8c:8a:34:
51:70:8c:58:38:51:ba:81:a3:8e:f6:44:2c:d0:7f:
f4:46:77:19:d5:27:ff:bd:3f:b0:ad:d7:92:f1:b7:
fb:79:ab:10:ff:cb:27:2b:fc:fa:59:7d:cf:6a:41:
5d:b0:12:c4:24:81:7b:b8:21:a7:41:d1:c9:c9:dc:
70:05:d4:d1:76:11:da:cc:5a:72:86:28:19:86:f4:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E4:3A:A0:68:78:F6:23:85:76:2F:92:7F:96:7E:D2:1F:1A:CC:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de7fa412-764f-37aa-9d85-c7f360e51d54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.50.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:5f:16:b0:45:53:20:4e:9d:b9:04:f7:3f:8b:23:2e:35:4f:
a5:f0:ff:b6:63:e6:60:28:d6:78:dd:9b:a9:50:1b:41:c3:0d:
fc:d9:33:bf:93:e8:b0:74:13:26:a1:45:b4:5c:9f:29:76:9a:
63:79:e8:83:9a:97:bb:bc:8f:b6:a5:2c:bb:0c:ea:f8:8b:0a:
74:9d:5c:02:00:f8:8d:6b:1b:ae:8d:dc:91:79:41:1c:1c:cb:
5a:46:d0:2b:92:d8:ad:63:61:95:94:ee:26:50:e8:0e:ac:44:
46:19:9a:0b:c2:90:97:a7:42:6d:d0:15:30:1b:f0:f3:99:c3:
a7:41:d4:ef:67:55:d1:c8:ee:0d:b5:cf:8c:7a:3b:dc:10:82:
18:78:0d:c9:3e:86:47:1a:bb:73:02:92:a0:22:cb:8f:19:f5:
36:6a:cf:e4:22:16:ed:06:68:f0:f4:8b:c4:db:fc:4e:67:55:
2e:46:b0:54:6f:64:7b:21:a0:4c:c7:a1:da:6d:bf:b3:51:54:
8c:f9:bd:59:eb:55:b4:d0:ab:ab:3d:cf:64:23:ba:08:bf:ca:
59:b9:69:d5:00:d8:f2:d2:7c:17:eb:e5:65:e3:4e:00:53:8e:
54:01:d0:3e:c4:7f:86:b2:9f:72:f7:1f:fd:74:77:5a:de:27:
05:21:16:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:10 2025 by rpki-client