Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa
File: ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa (raw, json)
Hash identifier: mcqjKwuB5n/xtNp2PBXhyJJfuoRpaVEgEkOfC6eY3Vw=
Subject key identifier: 45:E2:9C:9B:31:3D:9D:D8:15:DE:A1:74:9A:8F:D9:58:AA:87:DC:69
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B736ECCEF60FC44DAA508340
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa
Signing time: Thu 30 Jan 2025 11:10:29 +0000
ROA not before: Thu 30 Jan 2025 11:10:29 +0000
ROA not after: Wed 30 Apr 2025 10:10:29 +0000
asID: 30036
IP address blocks: 173.21.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:36:ec:ce:f6:0f:c4:4d:aa:50:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:10:29 2025 GMT
Not After : Apr 30 10:10:29 2025 GMT
Subject: CN=001ea83d-2d99-4b2e-a3d1-3da5d8209dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:00:c1:4c:94:25:a3:cf:07:9a:e2:7d:d2:
7a:d9:32:3a:74:a1:b6:73:87:cd:8f:62:09:b6:15:
e9:bf:57:64:6d:f2:0e:92:b9:92:7f:67:8e:6a:7d:
f3:a8:31:98:73:ca:b5:97:ee:1b:e2:31:eb:84:29:
40:da:b1:40:1b:23:a3:40:e7:66:82:20:09:a1:ad:
2d:25:76:80:31:82:ef:d8:f1:ed:af:60:95:0c:cd:
20:a4:33:7f:f1:26:cf:b5:10:0e:d7:ef:99:2e:c2:
b2:4d:d5:d9:29:b2:2b:66:40:51:ad:0c:ce:ff:92:
f4:a6:34:09:89:59:98:14:13:5a:03:5a:89:dc:b3:
bd:3c:36:7c:03:b9:da:1e:7e:36:06:f0:dd:7f:72:
1d:62:2f:28:e3:c1:4d:e8:4b:9a:be:86:65:65:07:
dd:79:ba:aa:60:f0:90:10:32:50:ea:f6:e6:f5:84:
f1:32:dc:a0:66:c7:37:de:b5:65:bd:ef:ca:b8:a6:
1d:05:4b:43:92:27:f7:6e:ae:18:4a:7b:f0:de:86:
47:cd:7b:32:a9:57:05:95:89:94:4e:ab:5a:af:98:
d9:de:03:33:8f:9e:58:4e:93:44:d3:d9:45:39:64:
6c:a4:e7:5b:d7:17:0e:69:bf:5c:ce:0d:42:8e:ae:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E2:9C:9B:31:3D:9D:D8:15:DE:A1:74:9A:8F:D9:58:AA:87:DC:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:a9:29:a8:57:59:01:d1:05:86:96:a4:51:9a:5e:1e:88:84:
05:cd:b2:0e:ee:58:1c:33:6e:44:50:65:19:af:6c:db:be:68:
30:95:17:3c:5a:ce:39:86:40:66:03:ba:59:7f:82:5a:b7:77:
4c:ed:49:9a:b5:98:c3:15:b1:f9:23:53:66:60:0c:b9:4b:d9:
44:66:08:06:7d:c3:d5:ea:fc:02:12:d8:bf:33:0f:92:d9:72:
37:74:62:31:bd:64:74:ea:1e:bb:fc:55:e7:9e:2d:5a:fc:a6:
b8:fd:a8:c2:80:dd:d6:77:2b:6f:70:2f:9e:4d:00:7b:81:c5:
83:c1:d1:61:8f:9a:df:64:07:fe:da:a7:6c:f6:54:0d:e6:36:
f8:0e:04:e6:42:90:be:18:2c:8a:0c:79:38:46:6b:bc:c3:3e:
cf:cd:dd:f4:af:bb:a3:45:71:91:51:8c:c6:6c:fb:8f:2c:6b:
aa:fe:dc:80:e9:7d:6b:bd:e8:3c:5c:f3:7e:56:77:18:de:01:
be:14:72:15:bb:11:c7:5b:db:cf:1f:54:73:c7:e5:3d:4e:ec:
2d:57:58:6a:38:cd:82:de:3c:83:01:dd:59:6d:6e:50:0d:75:
8a:02:38:03:6e:7a:d8:3e:8a:1c:a6:48:ed:63:4e:71:80:df:
89:20:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:30 2025 by rpki-client