Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f30d287a-c55f-3bea-a250-a7fa9aba3d68.roa
File: f30d287a-c55f-3bea-a250-a7fa9aba3d68.roa (raw, json)
Hash identifier: YV7aU+U31h8lkOdSd8juQPGw2ebIsiWqRnJmjCUWI+8=
Subject key identifier: 63:EA:47:36:48:B3:EC:97:D4:B1:F6:58:4A:13:E2:26:56:93:2D:92
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B0587B79BF614EBE5A3AC9B8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f30d287a-c55f-3bea-a250-a7fa9aba3d68.roa
Signing time: Tue 28 Jan 2025 00:07:26 +0000
ROA not before: Tue 28 Jan 2025 00:07:26 +0000
ROA not after: Sun 27 Apr 2025 23:07:26 +0000
asID: 30036
IP address blocks: 173.27.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:58:7b:79:bf:61:4e:be:5a:3a:c9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 28 00:07:26 2025 GMT
Not After : Apr 27 23:07:26 2025 GMT
Subject: CN=cc4858bd-d3c8-40cd-8de0-f7ac8a5cc32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:25:e3:ae:57:70:ad:69:c7:72:06:82:42:bf:
34:61:ad:ff:a5:98:43:b3:ed:3e:25:cc:1e:3d:30:
1a:56:cf:ec:78:0b:07:0c:32:54:7d:57:57:dd:c7:
31:0c:62:76:bc:7f:0b:5a:89:2b:fb:30:c4:6f:20:
1b:b9:cc:46:34:91:bd:d9:e2:39:61:7f:96:74:04:
cc:72:cb:e0:06:2e:4a:43:6b:08:1d:31:4c:d2:d8:
96:36:7e:98:15:ef:7c:6d:5a:a2:08:35:48:bf:44:
2b:20:34:69:3a:3c:94:fd:bf:a7:3a:82:8b:1b:dd:
45:16:26:c7:6f:7b:1d:e8:d3:16:aa:de:94:0e:03:
30:ef:57:67:12:93:b4:96:54:da:83:5f:ae:ad:3b:
3b:0b:cb:07:bd:73:3d:84:f8:e1:72:a1:a6:59:52:
90:68:0a:66:35:42:97:e0:62:95:c3:f3:71:43:a0:
ae:5f:72:b2:94:ed:73:03:98:68:96:2a:88:d5:64:
2d:18:6f:3b:5b:7d:87:48:e3:f1:0d:28:41:80:93:
f4:5c:2c:51:bd:93:1f:5d:94:f3:61:49:3e:ab:f4:
b5:aa:03:41:d3:a7:08:06:9e:4c:7f:05:1b:cc:f0:
50:24:da:b8:b0:a5:21:5e:11:a2:ae:68:eb:8a:e7:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EA:47:36:48:B3:EC:97:D4:B1:F6:58:4A:13:E2:26:56:93:2D:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f30d287a-c55f-3bea-a250-a7fa9aba3d68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.27.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:c6:b5:3d:6f:40:cc:30:6a:cc:d4:c9:f4:0e:1a:b7:c1:1a:
cc:2f:c0:a4:fc:ca:ee:31:a3:26:7a:82:a6:bc:b9:0b:0c:95:
c8:d1:7e:1b:a9:88:36:92:02:ca:b9:fa:52:8d:36:fc:04:ee:
e5:a7:a1:5d:65:59:c6:6e:ab:41:f4:58:1e:aa:2c:87:2f:31:
64:38:cc:ec:e6:0d:50:54:54:3a:e9:10:c3:27:07:2c:7b:1c:
93:7d:da:37:26:a5:20:c1:53:82:be:2a:3d:37:73:c9:cc:f6:
3e:b1:a9:bd:32:28:0b:ae:ef:81:8f:84:b7:41:35:88:5c:51:
f0:f9:8a:c2:7d:72:d1:f3:e2:03:06:c8:16:ea:70:51:10:09:
d9:d8:af:cd:ca:b4:29:bc:a9:0c:7a:74:84:ad:29:9e:55:cc:
91:e1:a3:82:b5:c5:2e:f7:df:09:43:bf:d5:a3:18:31:a9:64:
65:e0:dd:88:4d:d2:e9:e7:c8:18:2e:37:f8:1d:48:fc:1f:a6:
3e:15:05:bb:a8:ed:14:26:7e:44:9a:0c:8d:16:fb:77:bc:12:
c8:0c:f6:fb:dc:c6:46:7e:0c:8e:cb:20:e6:ef:98:88:7d:6e:
61:f0:9e:64:88:8a:e7:11:9f:cb:61:c0:c8:49:14:29:90:65:
d7:c5:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:22 2025 by rpki-client