Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa
File: ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa (raw, json)
Hash identifier: J+wHZSqB+B0Q466N6xb+f0geaF9bi9u0Q5fa9ZAQ/r0=
Subject key identifier: 91:04:94:EA:51:69:2E:A9:8D:2B:CB:5D:0C:04:A4:94:CF:B4:7D:52
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C533F0021BBB1291CAD21780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa
Signing time: Tue 04 Feb 2025 11:25:47 +0000
ROA not before: Tue 04 Feb 2025 11:25:47 +0000
ROA not after: Mon 05 May 2025 10:25:47 +0000
asID: 30036
IP address blocks: 173.28.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:33:f0:02:1b:bb:12:91:ca:d2:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:25:47 2025 GMT
Not After : May 5 10:25:47 2025 GMT
Subject: CN=8c53579b-c140-42f3-b4f9-24358ba59fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:11:32:a6:da:ed:e7:54:9d:d4:30:55:ee:
ee:f1:5c:e7:70:8b:48:c0:ab:10:04:38:aa:7e:4c:
80:b6:33:6a:15:14:57:e4:ee:a3:7c:71:dc:c1:c5:
16:67:fa:57:b9:59:c3:de:ee:92:a8:b8:90:77:c1:
2b:9b:0c:b5:ba:d5:ea:55:5d:2f:f3:e9:d9:83:f8:
aa:81:17:3a:f8:73:58:f3:4f:47:f1:16:61:f1:d2:
e6:b4:2a:d6:1d:1f:49:f0:2f:8f:b2:be:c2:67:2a:
bd:9b:73:c3:43:15:9e:e1:1f:f1:05:72:60:45:ef:
a1:e0:01:c5:ab:f0:4f:9c:23:3d:ef:38:db:9a:11:
a0:df:65:34:99:3f:5d:5d:4a:e6:33:ed:4c:1b:34:
f3:14:f2:b6:41:93:8c:c5:17:12:6c:7b:5c:9b:2f:
21:bd:9a:9a:da:c1:d2:18:d3:41:0e:5e:a3:6f:7d:
9d:28:e0:cb:95:ab:fa:48:38:19:23:7a:72:1c:14:
ff:77:cd:ee:76:97:cd:c4:95:0a:90:c6:72:c0:d7:
3a:cd:94:50:9b:35:1f:ff:3a:84:fb:54:a4:d6:14:
99:91:53:ea:f4:90:82:e8:ec:96:48:30:3a:93:37:
a2:eb:83:7a:e2:42:3e:da:d5:22:9a:5d:88:73:5b:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:04:94:EA:51:69:2E:A9:8D:2B:CB:5D:0C:04:A4:94:CF:B4:7D:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:9e:69:17:be:42:b4:ac:d7:a7:c5:6b:e8:32:7b:45:30:16:
8c:f4:70:4e:a8:d3:a6:26:e8:46:19:43:af:44:8f:7b:29:f2:
60:17:7e:cb:95:2b:2d:59:d4:6a:91:0d:9a:9b:1f:30:8f:1b:
d0:a9:81:da:cf:ef:8a:31:d5:4c:57:31:11:89:98:c2:f9:48:
0a:c2:21:4d:8c:8a:1d:88:18:f2:6a:44:2a:d6:e8:65:3a:ff:
94:4b:dc:fc:93:9d:4d:c2:fc:9b:b7:c8:50:68:61:0d:99:15:
dc:04:79:1c:61:9d:98:3f:03:bc:7c:ad:d6:ca:ee:11:e0:f5:
92:10:2c:f7:f5:ab:50:58:7c:c0:13:fd:71:8b:a0:1a:d3:7b:
0a:5b:4b:bf:d7:2b:d3:1a:c3:f8:5d:1e:50:ab:65:4c:a8:19:
e7:b2:7e:77:1a:70:d2:14:b9:4f:e5:a4:55:1c:80:8c:ce:00:
97:1c:1e:de:e5:64:7d:34:6a:6a:bf:29:f2:08:c1:85:ae:ef:
36:7c:76:99:2b:98:84:d9:c6:bf:fa:f8:89:2a:b4:63:82:a4:
f8:b3:42:a3:00:05:f4:0a:93:c3:87:ce:e2:05:b5:4b:89:f8:
38:5a:61:a9:ce:eb:25:ac:46:3a:08:df:a7:07:5f:71:1c:58:
64:d8:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:11 2025 by rpki-client