Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b7ea0f0-e66c-3770-ab74-0647ff2747a6.roa
File: 0b7ea0f0-e66c-3770-ab74-0647ff2747a6.roa (raw, json)
Hash identifier: VCXhzU2+S9CrjKnHDfqNbN6N5W9Lxo+jG1Lce2Mpsq4=
Subject key identifier: 2D:9F:69:92:78:26:B8:B8:BE:36:71:7A:37:9C:67:4A:7C:C7:12:11
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C53385BBA70578326C64D480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b7ea0f0-e66c-3770-ab74-0647ff2747a6.roa
Signing time: Tue 04 Feb 2025 11:24:57 +0000
ROA not before: Tue 04 Feb 2025 11:24:57 +0000
ROA not after: Mon 05 May 2025 10:24:57 +0000
asID: 30036
IP address blocks: 173.19.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:33:85:bb:a7:05:78:32:6c:64:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:24:57 2025 GMT
Not After : May 5 10:24:57 2025 GMT
Subject: CN=4ef93f29-a0bd-46d0-b6b7-60a412470e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:38:e0:35:c6:cf:81:26:ca:19:a8:58:21:
fc:11:eb:d4:13:60:4e:b0:02:12:c3:dc:1f:12:a7:
0f:4d:66:3e:7e:be:12:21:e3:92:d6:91:0c:07:f1:
a9:1d:ca:26:7f:d3:50:46:b3:b6:97:3a:0c:2e:f3:
e2:a9:a9:e1:4a:48:6b:62:30:0b:d6:f7:c2:16:d6:
26:6e:b5:34:3f:be:85:68:7c:63:e5:f9:27:aa:b5:
3c:97:17:a7:f9:67:3b:e3:65:2c:55:2c:1d:15:32:
6b:d0:f8:36:67:a0:22:35:55:78:11:16:3a:ba:44:
f2:d1:99:88:30:ba:db:77:32:4d:29:bd:29:73:8b:
19:ff:5b:5f:50:4a:c0:d5:7c:de:f1:04:e7:a4:77:
74:0d:9a:47:3d:25:80:39:c2:bb:68:54:39:fb:7f:
e1:37:c6:94:dc:f4:2c:65:a7:55:bf:52:f3:0a:9d:
9d:55:c3:62:d5:af:5d:c8:46:ba:2f:e9:7e:ea:ac:
77:19:7e:a3:6c:af:c8:90:ec:06:18:e8:94:bb:d4:
81:4f:1d:b7:ce:03:98:6c:63:c5:a6:81:18:e1:15:
15:1f:4b:33:e1:5b:11:ce:01:21:e1:8d:60:8a:bd:
fe:fd:63:5f:7e:ad:83:ba:0c:d7:6f:55:1e:73:78:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9F:69:92:78:26:B8:B8:BE:36:71:7A:37:9C:67:4A:7C:C7:12:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b7ea0f0-e66c-3770-ab74-0647ff2747a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:1d:f7:e6:db:83:05:d3:65:21:20:94:79:d9:3c:9a:da:4c:
9d:0c:d1:01:e5:79:df:5f:f3:3e:97:ff:b3:c1:24:cc:d7:9f:
34:b3:4c:0e:1d:eb:72:ed:4d:fc:01:e9:ce:82:72:70:5b:5c:
f0:9d:53:24:97:2b:7c:b1:ec:bf:0c:6f:40:6d:20:17:cc:12:
2a:1f:ad:a3:cd:07:f4:b9:08:77:9f:76:ea:cf:87:92:c3:31:
ad:3c:93:a5:ee:e5:3c:cf:40:55:35:b4:19:88:9f:1b:9d:3d:
da:bf:77:a3:b5:34:54:27:46:b4:fd:4b:3b:00:75:28:f0:eb:
22:c1:70:fa:00:20:f1:1d:82:48:0a:b9:02:91:48:d7:f1:53:
74:73:cc:38:48:93:70:28:96:6a:b7:e6:b5:b6:02:75:08:21:
01:e6:be:03:01:69:a4:25:03:61:46:8e:96:25:ab:d2:bf:3c:
22:44:de:70:37:85:1c:9d:8f:d1:18:d9:c4:90:d9:3c:58:a9:
32:43:dd:a1:0e:d3:42:83:15:21:7b:d3:45:bc:87:29:bb:56:
46:d7:64:ef:8d:3f:9e:c9:38:f9:d1:b6:2b:8f:ad:b8:d2:21:
ec:d1:3a:8d:dc:5b:0f:ee:c2:15:b1:75:74:e0:80:3f:50:64:
07:25:f1:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFM4W7pwV4Mmxk1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDExMjQ1N1oXDTI1MDUwNTEwMjQ1N1owLzEtMCsGA1UEAxMk
NGVmOTNmMjktYTBiZC00NmQwLWI2YjctNjBhNDEyNDcwZTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nc44DXGz4EmyhmoWCH8EevUE2BOsAISw9wf
EqcPTWY+fr4SIeOS1pEMB/GpHcomf9NQRrO2lzoMLvPiqanhSkhrYjAL1vfCFtYm
brU0P76FaHxj5fknqrU8lxen+Wc742UsVSwdFTJr0Pg2Z6AiNVV4ERY6ukTy0ZmI
MLrbdzJNKb0pc4sZ/1tfUErA1Xze8QTnpHd0DZpHPSWAOcK7aFQ5+3/hN8aU3PQs
ZadVv1LzCp2dVcNi1a9dyEa6L+l+6qx3GX6jbK/IkOwGGOiUu9SBTx23zgOYbGPF
poEY4RUVH0sz4VsRzgEh4Y1gir3+/WNffq2DugzXb1Uec3hiWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC2faZJ4Jri4vjZxejecZ0p8xxIRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGI3ZWEwZjAtZTY2Yy0z
NzcwLWFiNzQtMDY0N2ZmMjc0N2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEd9+bbgwXTZSEglHnZPJraTJ0M0QHled9f8z6X/7PBJMzXnzSzTA4d
63LtTfwB6c6CcnBbXPCdUySXK3yx7L8Mb0BtIBfMEiofraPNB/S5CHefdurPh5LD
Ma08k6Xu5TzPQFU1tBmInxudPdq/d6O1NFQnRrT9SzsAdSjw6yLBcPoAIPEdgkgK
uQKRSNfxU3RzzDhIk3Aolmq35rW2AnUIIQHmvgMBaaQlA2FGjpYlq9K/PCJE3nA3
hRydj9EY2cSQ2TxYqTJD3aEO00KDFSF700W8hym7VkbXZO+NP57JOPnRtiuPrbjS
IezROo3cWw/uwhWxdXTggD9QZAcl8Uk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:46 2025 by rpki-client