Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f51365-51a1-360d-9629-bff61c17c6e8.roa
File: f2f51365-51a1-360d-9629-bff61c17c6e8.roa (raw, json)
Hash identifier: f3m0b7bxaOZT6jqUL1nr24CNUo8xTkFbopE7p0Jl37k=
Subject key identifier: 02:7C:3B:DA:81:73:2A:8F:BE:EF:9E:24:08:AF:D0:1B:B4:B1:EF:69
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5865E17E3F8472071CD0540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f51365-51a1-360d-9629-bff61c17c6e8.roa
Signing time: Tue 04 Feb 2025 14:11:52 +0000
ROA not before: Tue 04 Feb 2025 14:11:52 +0000
ROA not after: Mon 05 May 2025 13:11:52 +0000
asID: 30036
IP address blocks: 173.28.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:86:5e:17:e3:f8:47:20:71:cd:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 14:11:52 2025 GMT
Not After : May 5 13:11:52 2025 GMT
Subject: CN=78a7a87c-b77d-47db-be14-39951297c6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:13:65:83:c5:3b:83:ea:f9:7f:f9:70:b1:3e:
c7:ab:63:03:1a:0e:f5:f7:12:c6:be:46:58:82:52:
ca:03:ef:09:65:c8:c4:ca:6e:5d:df:4c:74:8d:38:
d0:38:24:3b:25:eb:b7:81:5f:65:1d:1a:de:e1:2d:
88:01:7d:c8:16:6f:cf:aa:3a:31:63:c1:9a:b1:f3:
f5:63:5c:b1:fd:eb:e3:d2:b4:1b:5b:91:14:95:96:
2d:aa:fe:06:03:d5:22:f1:31:91:c7:26:bd:af:88:
66:70:f1:fa:17:6b:1f:22:b2:51:fc:40:3e:da:48:
e1:fb:53:c4:27:00:54:f7:52:c6:03:64:5d:29:e6:
43:8e:bb:87:b3:99:63:69:ab:24:93:ac:9c:42:e7:
c9:1f:4f:4d:1c:4f:ce:95:89:b2:d9:ca:f6:ad:0e:
84:d3:9a:ed:69:96:3e:73:82:67:99:0b:21:b9:1c:
89:2c:95:1f:52:ee:fa:c8:f6:22:c2:4e:10:4f:43:
5f:88:0d:39:30:fe:eb:d0:50:5e:6d:9e:88:6f:51:
3f:23:c8:d7:c7:9e:e7:c0:ba:d6:5b:1f:ca:ec:76:
37:65:70:89:e3:c7:eb:5f:81:a4:44:ce:97:8a:68:
3d:ca:25:28:66:a6:b9:e1:9b:8f:ce:91:4d:ed:c4:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7C:3B:DA:81:73:2A:8F:BE:EF:9E:24:08:AF:D0:1B:B4:B1:EF:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f51365-51a1-360d-9629-bff61c17c6e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:02:cf:d1:e8:0f:ec:e0:4f:98:bf:47:72:ac:fc:fe:f9:20:
e2:e4:11:1c:ad:b4:a5:cd:92:9a:c6:75:fa:dc:35:c2:16:83:
8a:d4:ae:d1:be:c5:9b:dc:e0:3a:17:06:4b:12:fb:cf:10:0c:
1d:04:f8:29:61:61:a9:04:8b:90:03:d0:d8:e1:d9:5b:53:90:
84:17:f0:97:00:6a:47:71:f5:27:e0:87:16:33:a6:0e:8b:e6:
67:08:b6:ac:7f:c0:a6:f2:af:97:6d:48:b6:0a:6d:d1:97:03:
bf:8a:2d:60:c0:05:12:f1:bc:c5:d7:d4:63:d5:f5:13:e9:ce:
ad:79:a3:63:2e:1e:31:5c:e6:8b:0e:ea:15:65:ac:28:36:2e:
2d:15:a5:48:e4:82:d9:0b:9c:2b:63:98:8c:73:ee:d1:46:1a:
b8:42:50:df:d8:c0:62:6e:75:10:ca:c0:9a:5e:82:a2:3a:d9:
0f:de:93:d9:e0:02:1e:3e:f9:59:a8:a7:f7:0d:2f:16:ae:80:
ce:bf:69:a0:e5:33:b4:d8:a4:11:26:c9:99:f8:bb:8b:67:e8:
7e:b1:f1:8c:da:7e:e4:d5:94:01:04:5e:b8:c1:09:4a:0e:e4:
22:87:23:41:e7:16:cd:ac:bb:6f:4f:2d:ea:5f:d6:03:7f:45:
37:89:69:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:03 2025 by rpki-client