Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa
File: ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa (raw, json)
Hash identifier: sxBxnrivzoAEgJ9NkQRWMWh6ANoHhdBskxBL7fSq44g=
Subject key identifier: ED:7E:16:8A:F7:E3:FC:8C:A1:BE:0D:1A:E3:BD:8D:E1:2F:2A:51:57
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C575959596DDAC943DF91480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa
Signing time: Tue 04 Feb 2025 13:38:03 +0000
ROA not before: Tue 04 Feb 2025 13:38:03 +0000
ROA not after: Mon 05 May 2025 12:38:03 +0000
asID: 30036
IP address blocks: 173.28.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:75:95:95:96:dd:ac:94:3d:f9:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:38:03 2025 GMT
Not After : May 5 12:38:03 2025 GMT
Subject: CN=9f1cebe1-5322-42c8-9513-839223a24524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:e0:0b:93:b8:59:77:ee:d4:f0:6a:6f:a0:
01:43:69:ff:62:f1:83:a7:f7:03:78:10:90:a1:37:
fe:1b:43:89:5b:d2:a8:72:80:6a:4e:c7:0f:91:9f:
f3:32:d4:a5:78:8b:0c:c8:1f:89:a5:54:e4:d0:24:
3d:c9:0e:88:c0:27:81:00:a2:38:4b:bd:db:cd:0e:
ed:a7:79:81:69:7b:ff:23:ac:3a:55:0c:f8:e4:9b:
b7:43:dc:ff:6b:a5:2c:ef:7f:b0:6d:e2:3e:47:83:
90:9e:c2:c8:0b:64:36:2d:f3:a5:b0:bf:79:55:2b:
1a:50:c2:1c:e8:8d:03:19:aa:34:2c:e3:fa:a9:a0:
0f:ea:da:32:52:c6:29:4d:10:40:d1:bf:34:6d:8c:
71:15:2a:02:7b:99:24:7d:d6:6c:7a:c8:08:20:a3:
3e:d5:19:98:9a:b7:03:ab:16:f0:d0:b6:92:dc:4a:
17:e3:fa:d4:77:27:65:85:e8:42:8b:b8:b3:51:fa:
65:e9:e5:f0:2e:ef:a2:3a:aa:8a:38:22:7c:32:51:
e5:54:14:24:d3:39:91:22:ea:c4:ef:a2:f6:4a:83:
33:ce:1c:1d:d0:f8:56:e6:37:45:f5:c7:3b:5d:86:
e5:70:d4:78:68:52:d8:a4:d6:af:a1:e6:9e:51:1c:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7E:16:8A:F7:E3:FC:8C:A1:BE:0D:1A:E3:BD:8D:E1:2F:2A:51:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:fe:8b:60:39:5c:ff:d2:eb:f3:6d:81:c6:2a:f6:bf:3a:5a:
e6:18:f0:a0:9b:30:01:c2:f2:89:63:8f:fb:8e:8a:45:0f:73:
2d:d8:3c:17:aa:ab:b3:21:75:31:cb:d0:a9:de:06:98:ab:0f:
12:2b:ab:7a:02:5d:ff:1f:c3:bd:76:87:0f:5b:d7:b6:1b:3d:
d2:3b:7b:de:e7:90:d5:22:c0:ad:99:cf:01:63:5c:9d:59:c5:
45:1e:67:f9:20:81:97:09:45:94:23:c9:68:20:f1:b3:67:cc:
be:99:26:61:62:ff:f7:a6:e9:f6:55:6d:5d:b6:62:02:99:3b:
eb:9f:18:32:c6:5f:cd:4a:00:8a:0c:67:5f:a2:c3:b3:dd:e9:
5d:cf:88:6e:6f:8e:63:91:a4:97:ab:33:9b:b7:f8:a2:18:33:
0b:95:79:8a:5a:1c:4c:92:76:14:a4:55:46:93:14:fa:3c:a6:
c5:9d:f2:e7:ab:af:79:5b:02:d4:0f:66:58:d3:86:7c:86:79:
6b:32:97:fc:cd:fd:77:52:7a:67:54:3e:6b:00:eb:b3:06:c8:
d3:6a:2c:d6:ff:af:f6:fe:88:52:45:77:7d:f0:72:1c:47:92:
31:bf:b0:5e:bc:46:72:d6:3d:ea:32:b0:80:1e:02:6a:fa:64:
9c:5a:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:40 2025 by rpki-client