Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bb1cb5e-d3ac-3c3a-8cbd-e3152281f532.roa
File: 0bb1cb5e-d3ac-3c3a-8cbd-e3152281f532.roa (raw, json)
Hash identifier: 1dJ4dA/DtnXmccAIzjmjP5nzcQk8EGprt33dWX8GK8k=
Subject key identifier: 2F:9B:2E:B3:B6:5F:49:39:FB:5D:88:78:E0:E4:E9:66:01:17:D4:31
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5339991806F66B2B2D260B0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bb1cb5e-d3ac-3c3a-8cbd-e3152281f532.roa
Signing time: Tue 04 Feb 2025 11:25:06 +0000
ROA not before: Tue 04 Feb 2025 11:25:06 +0000
ROA not after: Mon 05 May 2025 10:25:06 +0000
asID: 30036
IP address blocks: 173.20.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:33:99:91:80:6f:66:b2:b2:d2:60:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:25:06 2025 GMT
Not After : May 5 10:25:06 2025 GMT
Subject: CN=2e131ed9-9e58-4235-bc23-68e53d76eb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:6e:db:2a:bf:1f:71:a3:63:f6:2f:f6:8d:
b1:3e:e5:36:c8:9d:0e:4a:2e:4b:a2:c1:82:4d:d3:
81:ee:ba:2c:ea:c7:4d:67:82:30:92:e9:e5:ba:bb:
69:f0:88:67:97:8f:b4:3a:2b:f2:8e:db:cc:b4:ff:
0c:43:d4:bb:35:1c:81:ca:0a:98:09:14:04:08:8c:
f4:8b:40:ec:69:74:d6:19:14:30:50:23:a8:90:69:
d9:96:13:89:2a:1d:61:fd:01:cd:f0:07:ce:c0:4c:
79:14:cb:3e:d1:45:b5:2b:d8:6f:b1:71:58:32:96:
c1:08:97:23:c2:fc:6e:29:93:9f:29:d0:47:07:ac:
26:65:be:a9:68:35:d4:6a:cd:ae:a3:88:e9:8a:0d:
00:9c:7d:8a:ff:5b:3b:0c:e4:3f:f2:5e:6b:10:be:
80:f8:e5:55:41:50:30:5f:e1:f3:42:4a:0e:75:52:
e4:d7:d5:5a:9c:42:03:35:53:e1:40:ab:2d:7f:08:
b8:c5:11:5f:32:fc:29:56:ea:34:91:f3:af:46:64:
f9:3b:0c:d7:e8:73:57:8c:0a:59:19:2b:36:aa:0a:
65:32:74:e9:c4:e2:91:ac:fc:e4:b2:7d:a8:ff:af:
14:1d:67:12:86:7b:c9:d6:35:33:b9:18:34:a8:6d:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9B:2E:B3:B6:5F:49:39:FB:5D:88:78:E0:E4:E9:66:01:17:D4:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bb1cb5e-d3ac-3c3a-8cbd-e3152281f532.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:2f:9a:c8:a0:60:45:89:17:68:c7:8b:9e:a1:83:ce:d6:96:
bb:e6:d5:dc:ce:d2:41:1c:65:20:bf:73:59:80:a8:73:f6:8c:
fc:b9:eb:48:2d:0e:20:2a:99:d5:9f:19:96:a8:4a:cb:ea:81:
5e:5a:45:21:4f:f9:83:cf:92:81:e9:eb:93:f8:41:ce:28:91:
09:7a:45:5b:f3:f8:43:1b:21:67:bf:e4:0d:c7:51:e3:b7:4c:
bb:4c:c1:5a:1b:70:d2:52:16:6f:ec:a5:6a:b2:00:aa:7d:17:
9e:f0:8c:f8:1e:c9:31:bb:50:c7:8a:27:4c:c7:3e:15:3b:11:
fc:1a:fb:bc:13:32:58:45:1d:ac:ce:57:8a:2e:87:b6:1a:9a:
30:66:f4:32:34:cc:e2:70:0f:54:ae:fa:14:9d:2c:84:bc:e5:
b9:f6:12:59:16:4d:9b:30:1a:6e:1a:e5:2f:b3:a7:8b:5a:8b:
b1:c0:aa:c6:63:e0:52:b4:67:49:ba:9d:ec:05:58:65:4c:f0:
b8:f1:9f:17:92:3c:d0:ab:c6:e9:a5:5b:e8:12:ee:15:ba:01:
c4:65:89:ee:5b:6e:40:81:08:48:23:7b:a1:dd:c1:20:dd:ba:
18:0d:25:ca:9f:60:20:59:e5:c2:93:fd:e1:30:87:54:e7:61:
5b:4a:77:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFM5mRgG9msrLSYLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDExMjUwNloXDTI1MDUwNTEwMjUwNlowLzEtMCsGA1UEAxMk
MmUxMzFlZDktOWU1OC00MjM1LWJjMjMtNjhlNTNkNzZlYjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhttu2yq/H3GjY/Yv9o2xPuU2yJ0OSi5LosGC
TdOB7ros6sdNZ4Iwkunlurtp8Ihnl4+0OivyjtvMtP8MQ9S7NRyBygqYCRQECIz0
i0DsaXTWGRQwUCOokGnZlhOJKh1h/QHN8AfOwEx5FMs+0UW1K9hvsXFYMpbBCJcj
wvxuKZOfKdBHB6wmZb6paDXUas2uo4jpig0AnH2K/1s7DOQ/8l5rEL6A+OVVQVAw
X+HzQkoOdVLk19VanEIDNVPhQKstfwi4xRFfMvwpVuo0kfOvRmT5OwzX6HNXjApZ
GSs2qgplMnTpxOKRrPzksn2o/68UHWcShnvJ1jUzuRg0qG3bkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+bLrO2X0k5+12IeODk6WYBF9QxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGJiMWNiNWUtZDNhYy0z
YzNhLThjYmQtZTMxNTIyODFmNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQvmsigYEWJF2jHi56hg87Wlrvm1dzO0kEcZSC/c1mAqHP2jPy560gt
DiAqmdWfGZaoSsvqgV5aRSFP+YPPkoHp65P4Qc4okQl6RVvz+EMbIWe/5A3HUeO3
TLtMwVobcNJSFm/spWqyAKp9F57wjPgeyTG7UMeKJ0zHPhU7Efwa+7wTMlhFHazO
V4ouh7YamjBm9DI0zOJwD1Su+hSdLIS85bn2ElkWTZswGm4a5S+zp4tai7HAqsZj
4FK0Z0m6newFWGVM8LjxnxeSPNCrxumlW+gS7hW6AcRlie5bbkCBCEgje6HdwSDd
uhgNJcqfYCBZ5cKT/eEwh1TnYVtKdxQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:59 2025 by rpki-client