Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9b3e35d-47d1-3af0-9773-086c2338376c.roa
File: f9b3e35d-47d1-3af0-9773-086c2338376c.roa (raw, json)
Hash identifier: DSUcbMkO5koCkwhehVSNLpHKj6xilRu3W7MzJbG985A=
Subject key identifier: D7:E3:55:14:50:27:D4:13:1C:E6:02:FD:BF:80:42:D4:61:70:11:76
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57F129C34A56A71877A55C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9b3e35d-47d1-3af0-9773-086c2338376c.roa
Signing time: Tue 04 Feb 2025 13:57:10 +0000
ROA not before: Tue 04 Feb 2025 13:57:10 +0000
ROA not after: Mon 05 May 2025 12:57:10 +0000
asID: 30036
IP address blocks: 173.20.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7f:12:9c:34:a5:6a:71:87:7a:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:57:10 2025 GMT
Not After : May 5 12:57:10 2025 GMT
Subject: CN=e94220f7-86bd-4373-854d-92e0cd136f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:ea:9e:60:59:e7:e2:e3:de:06:b8:94:68:
68:8f:28:c5:9b:79:73:52:f5:c3:97:9d:11:64:93:
92:e2:d5:64:61:3e:e7:f4:c8:4d:fa:fa:6d:12:f8:
47:96:00:01:80:c6:33:44:7e:67:93:6c:05:31:36:
6e:44:b4:ba:86:da:7b:7d:bb:dd:dd:43:7e:e8:c2:
94:2a:45:11:8f:18:8a:a3:49:c2:5b:fe:e2:f8:24:
12:de:2c:f0:fb:f2:ad:49:2e:7a:d7:ce:04:fb:da:
53:a5:98:e2:ae:47:1c:c8:be:19:4d:9d:6a:f6:e8:
fb:ce:2a:3d:21:be:bf:ba:a5:c2:02:cb:f3:15:ee:
6b:79:83:70:1d:2f:d9:45:8a:f9:d0:cc:e9:0d:5d:
5a:66:d4:1d:7f:94:42:0b:c4:27:67:29:1a:15:3b:
f6:8f:92:1f:52:5e:b3:40:68:43:d0:35:1e:bb:8a:
c3:9c:1f:16:68:ec:eb:98:f6:98:02:db:dc:71:07:
e5:66:04:6d:13:1d:96:1e:39:7a:0c:ba:5f:a4:0a:
63:d9:95:8f:7e:23:4e:05:cc:64:66:9a:24:95:e7:
1b:6d:55:0d:b2:a9:e7:16:1d:f1:a5:88:3b:40:83:
d3:02:f0:d3:e1:33:67:f4:d7:b3:a1:11:4f:15:19:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:55:14:50:27:D4:13:1C:E6:02:FD:BF:80:42:D4:61:70:11:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9b3e35d-47d1-3af0-9773-086c2338376c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:01:78:e7:59:d7:86:40:b8:5b:1e:27:be:46:d2:3f:54:8d:
bb:3c:45:3d:f7:0a:91:f3:17:f7:57:c1:28:10:32:d0:1f:70:
c3:5d:93:61:d0:35:10:2b:d7:42:7c:da:3d:07:cd:73:cd:df:
d5:3b:93:a8:3a:ab:c2:b0:2a:0f:26:68:f9:49:e4:d7:ce:6b:
dc:45:b7:4e:c5:35:ff:08:52:1f:11:ae:d5:d6:6e:4b:1a:1a:
ae:4d:eb:cc:b2:0e:f4:93:a8:94:7e:3e:ea:16:f7:08:44:2c:
34:a0:7a:b9:55:d7:5c:c1:9d:2c:b7:8e:5e:b1:e2:b3:e3:b9:
eb:b4:0f:1a:bc:3a:a6:20:c0:ab:9e:46:82:e6:61:32:88:83:
86:c3:73:3e:cc:6d:c0:01:e6:fc:20:3c:5d:73:52:0b:3d:0b:
17:5f:e5:49:a8:0a:bf:e5:ff:dc:5b:15:21:df:04:7f:46:71:
a8:1e:06:06:e0:63:bd:fe:c9:69:aa:2c:a3:1f:c6:c5:db:55:
49:80:53:1c:18:95:0e:96:c2:9c:0d:28:d3:46:26:a4:af:18:
3a:4e:9b:c4:90:a3:41:94:d3:f7:b8:80:c2:2c:22:1b:7f:7c:
f3:7a:9f:e6:54:78:83:3e:2a:5c:f8:3a:69:37:c7:b2:7b:94:
56:3a:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:32 2025 by rpki-client