Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05d56e05-1215-3148-b76f-a00f62c90929.roa
File: 05d56e05-1215-3148-b76f-a00f62c90929.roa (raw, json)
Hash identifier: rl5jOyDR8K/X3GoZTEjn45nA6w+Uy+aIcODjlv8wVrg=
Subject key identifier: F0:D8:AB:7E:30:67:D7:44:D2:41:92:5C:C9:67:38:E6:EE:1B:7F:54
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57EC0AA8411830866614140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05d56e05-1215-3148-b76f-a00f62c90929.roa
Signing time: Tue 04 Feb 2025 13:56:31 +0000
ROA not before: Tue 04 Feb 2025 13:56:31 +0000
ROA not after: Mon 05 May 2025 12:56:31 +0000
asID: 30036
IP address blocks: 173.17.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7e:c0:aa:84:11:83:08:66:61:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:56:31 2025 GMT
Not After : May 5 12:56:31 2025 GMT
Subject: CN=79bdbcfe-7a26-4a92-885a-fba1b5520f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:06:6a:71:58:d7:22:7a:88:4b:2a:96:9e:
8b:fe:8b:50:cc:a5:be:1e:35:1a:75:a0:fb:51:24:
35:14:bb:83:8c:05:9a:e2:7a:67:34:73:00:34:81:
78:f3:48:d2:74:f2:4c:79:35:7e:7c:d2:b5:01:43:
ff:88:04:dc:8c:62:ae:57:d0:51:10:50:a0:ce:8c:
ec:d8:4e:23:ab:66:b5:3b:e8:da:8a:13:9e:f7:53:
03:2d:6a:14:be:7c:68:d4:52:24:7e:55:2f:58:ac:
8e:42:c0:c6:ff:cf:07:0b:aa:2d:42:e7:b1:52:83:
6c:c9:b8:2e:65:34:99:35:c9:51:61:80:ff:a0:76:
38:ff:81:6b:ba:93:64:b3:bf:7f:67:2d:24:19:ff:
69:da:62:db:17:53:29:5c:45:b0:ef:0d:20:4d:2d:
61:db:fc:ba:ac:4a:24:f4:a1:6f:e8:44:f6:17:a8:
c5:9f:c8:89:55:9a:41:69:b5:6e:ea:63:5a:73:f9:
aa:1a:30:c1:61:fb:a4:fb:f6:54:af:d5:aa:fd:58:
b5:c7:9d:1c:d2:6a:55:0f:ee:9b:d4:27:84:31:59:
70:b4:9f:75:ed:c4:c9:d2:f9:77:26:50:8b:d8:24:
f9:7d:de:4c:82:87:8f:2d:08:e5:e5:4d:f4:e2:44:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D8:AB:7E:30:67:D7:44:D2:41:92:5C:C9:67:38:E6:EE:1B:7F:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05d56e05-1215-3148-b76f-a00f62c90929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:41:20:6e:b5:7a:ef:92:87:e8:42:b4:f7:8b:61:1a:c3:a3:
5f:43:88:6f:75:9c:54:f5:dd:86:3c:4a:be:07:bf:ac:bc:1a:
c2:ed:37:06:c9:83:8c:0a:f4:c6:71:78:21:45:77:39:f5:17:
53:29:9d:75:66:04:52:50:69:d3:d7:b0:2f:72:81:18:e7:3b:
ca:3c:c3:ec:27:39:0b:48:fa:b4:bf:65:4a:cc:32:d3:3d:40:
1b:04:3f:52:26:b0:2f:5f:b9:64:cc:d0:a6:70:67:9b:1a:23:
7d:d5:61:e7:bc:b5:f2:2d:94:89:3d:ce:bc:f0:ad:c0:1e:8a:
40:28:f7:91:10:69:8e:be:2b:62:70:43:42:79:64:73:c6:21:
62:ad:bc:d1:20:1d:ff:de:fb:3b:65:81:f8:cc:80:b2:c4:7a:
26:4b:ed:c7:27:70:7a:18:23:d5:3f:0d:ce:4b:c3:1a:f4:88:
d3:af:4b:dc:82:ec:53:f2:98:2e:f1:99:a7:fb:17:97:86:44:
20:e7:e2:8b:93:71:42:f5:6b:28:10:ee:3d:b3:bd:04:9f:dd:
e4:38:c3:f2:b0:a2:60:e5:2f:81:24:f4:9f:d9:50:97:ac:d1:
1c:b6:0b:f8:ae:81:08:78:e2:73:53:c2:ee:87:86:fc:47:c0:
5a:cd:56:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfsCqhBGDCGZhQUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNTYzMVoXDTI1MDUwNTEyNTYzMVowLzEtMCsGA1UEAxMk
NzliZGJjZmUtN2EyNi00YTkyLTg4NWEtZmJhMWI1NTIwZjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kkGanFY1yJ6iEsqlp6L/otQzKW+HjUadaD7
USQ1FLuDjAWa4npnNHMANIF480jSdPJMeTV+fNK1AUP/iATcjGKuV9BREFCgzozs
2E4jq2a1O+jaihOe91MDLWoUvnxo1FIkflUvWKyOQsDG/88HC6otQuexUoNsybgu
ZTSZNclRYYD/oHY4/4FrupNks79/Zy0kGf9p2mLbF1MpXEWw7w0gTS1h2/y6rEok
9KFv6ET2F6jFn8iJVZpBabVu6mNac/mqGjDBYfuk+/ZUr9Wq/Vi1x50c0mpVD+6b
1CeEMVlwtJ917cTJ0vl3JlCL2CT5fd5MgoePLQjl5U304kT+zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPDYq34wZ9dE0kGSXMlnOObuG39UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDVkNTZlMDUtMTIxNS0z
MTQ4LWI3NmYtYTAwZjYyYzkwOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElBIG61eu+Sh+hCtPeLYRrDo19DiG91nFT13YY8Sr4Hv6y8GsLtNwbJ
g4wK9MZxeCFFdzn1F1MpnXVmBFJQadPXsC9ygRjnO8o8w+wnOQtI+rS/ZUrMMtM9
QBsEP1ImsC9fuWTM0KZwZ5saI33VYee8tfItlIk9zrzwrcAeikAo95EQaY6+K2Jw
Q0J5ZHPGIWKtvNEgHf/e+ztlgfjMgLLEeiZL7ccncHoYI9U/Dc5Lwxr0iNOvS9yC
7FPymC7xmaf7F5eGRCDn4ouTcUL1aygQ7j2zvQSf3eQ4w/KwomDlL4Ek9J/ZUJes
0Ry2C/iugQh44nNTwu6HhvxHwFrNVpg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:21 2025 by rpki-client