Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/146c450d-5661-3ac3-b61e-59ddd5a6500e.roa
File: 146c450d-5661-3ac3-b61e-59ddd5a6500e.roa (raw, json)
Hash identifier: HEfwBJrDy5jHaFxshfx3gl9APfDp/jzbtod5B5bkXag=
Subject key identifier: 94:41:A7:BD:A1:C4:5F:EB:73:B1:39:5B:47:42:2C:66:43:2D:5A:7B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57DF3DB989305E709638080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/146c450d-5661-3ac3-b61e-59ddd5a6500e.roa
Signing time: Tue 04 Feb 2025 13:54:55 +0000
ROA not before: Tue 04 Feb 2025 13:54:55 +0000
ROA not after: Mon 05 May 2025 12:54:55 +0000
asID: 30036
IP address blocks: 173.21.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7d:f3:db:98:93:05:e7:09:63:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:54:55 2025 GMT
Not After : May 5 12:54:55 2025 GMT
Subject: CN=080cfc27-c486-4126-b13b-1b5c551dae76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:f9:e9:b8:9d:cf:a5:06:97:94:a3:3c:56:
9c:e9:94:45:29:a2:e2:8a:cd:01:4c:82:10:38:4b:
c2:50:6c:68:3d:b6:e4:63:d6:15:4a:dd:c5:72:36:
4c:93:e4:cc:d8:81:05:e3:ab:0a:9a:48:fa:c3:29:
42:65:82:63:ff:61:6c:07:ca:eb:d1:63:98:67:4b:
17:64:cd:fa:99:78:66:bd:e7:03:f3:f4:c0:91:3f:
d7:0a:4a:a2:84:07:ec:3c:ed:b5:e6:9e:01:17:7c:
3d:6c:50:69:e8:46:46:1e:71:3a:16:99:e3:e7:72:
34:4e:40:5b:31:ec:7d:77:b7:69:84:be:38:53:cf:
6e:21:88:06:5b:d1:1d:30:68:81:2c:ea:ae:3e:4e:
d0:7b:9d:0e:88:1e:40:96:bd:12:47:16:87:85:88:
25:bb:b1:b9:28:c8:9c:39:98:a0:bd:83:ec:9e:6d:
60:6b:71:36:b9:64:a3:9a:45:fe:a9:90:49:bf:07:
f1:05:20:7c:7a:b2:46:72:41:db:0c:54:b7:30:c3:
2e:6a:ad:14:03:f6:c8:7e:93:c3:84:0a:67:d0:c6:
46:b1:bb:ee:1c:9f:7f:48:42:6f:a9:68:56:47:2a:
9b:69:89:c5:7b:51:26:5f:22:26:c9:94:cc:b6:29:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:41:A7:BD:A1:C4:5F:EB:73:B1:39:5B:47:42:2C:66:43:2D:5A:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/146c450d-5661-3ac3-b61e-59ddd5a6500e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:8b:19:f7:ac:54:37:ba:e3:de:24:c2:a2:c5:0e:bf:3b:f6:
5a:11:7b:89:02:72:54:ca:27:16:c0:58:05:11:07:21:8b:24:
25:98:3b:6c:fe:d0:28:9e:b9:b8:61:7e:4c:fa:c8:e3:21:c4:
4f:20:54:63:d8:05:04:31:65:a6:83:76:30:1a:0c:be:79:be:
54:b4:4e:83:91:7e:a4:a1:ba:7d:8e:20:c9:78:37:73:8d:3f:
f2:69:0b:c3:94:ce:27:39:ca:f1:d1:4d:60:b8:13:24:56:af:
26:38:30:4e:89:dc:12:69:5a:b4:9b:c6:14:bb:55:eb:1f:fc:
e9:cb:3d:c3:39:f5:3e:ff:92:2c:d3:fc:74:7f:fe:4a:6b:cb:
55:5e:5d:49:6b:e0:0c:f5:81:4f:30:07:3b:48:b7:ef:af:76:
de:27:02:7f:0b:57:82:17:42:d8:ff:02:18:70:03:70:d9:7b:
3c:cd:f7:f0:6b:d7:01:5d:ca:10:84:1e:37:33:3d:e8:68:37:
82:9a:a4:53:9f:3f:6d:20:68:75:b5:ab:15:84:5e:2b:ac:77:
ac:e2:94:04:1a:4b:b3:c0:28:f0:f9:c5:3b:aa:57:3b:bc:2b:
f2:b9:76:c1:7b:f3:16:a7:dc:f6:9f:79:de:bb:c2:86:95:2a:
0e:3a:a2:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFffPbmJMF5wljgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNTQ1NVoXDTI1MDUwNTEyNTQ1NVowLzEtMCsGA1UEAxMk
MDgwY2ZjMjctYzQ4Ni00MTI2LWIxM2ItMWI1YzU1MWRhZTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMz56bidz6UGl5SjPFac6ZRFKaLiis0BTIIQ
OEvCUGxoPbbkY9YVSt3FcjZMk+TM2IEF46sKmkj6wylCZYJj/2FsB8rr0WOYZ0sX
ZM36mXhmvecD8/TAkT/XCkqihAfsPO215p4BF3w9bFBp6EZGHnE6Fpnj53I0TkBb
Mex9d7dphL44U89uIYgGW9EdMGiBLOquPk7Qe50OiB5Alr0SRxaHhYglu7G5KMic
OZigvYPsnm1ga3E2uWSjmkX+qZBJvwfxBSB8erJGckHbDFS3MMMuaq0UA/bIfpPD
hApn0MZGsbvuHJ9/SEJvqWhWRyqbaYnFe1EmXyImyZTMtinMaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRBp72hxF/rc7E5W0dCLGZDLVp7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTQ2YzQ1MGQtNTY2MS0z
YWMzLWI2MWUtNTlkZGQ1YTY1MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRX4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASLGfesVDe6494kwqLFDr879loRe4kCclTKJxbAWAURByGLJCWYO2z+
0Cieubhhfkz6yOMhxE8gVGPYBQQxZaaDdjAaDL55vlS0ToORfqShun2OIMl4N3ON
P/JpC8OUzic5yvHRTWC4EyRWryY4ME6J3BJpWrSbxhS7Vesf/OnLPcM59T7/kizT
/HR//kpry1VeXUlr4Az1gU8wBztIt++vdt4nAn8LV4IXQtj/AhhwA3DZezzN9/Br
1wFdyhCEHjczPehoN4KapFOfP20gaHW1qxWEXiusd6zilAQaS7PAKPD5xTuqVzu8
K/K5dsF78xan3Pafed67woaVKg46omg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:26 2025 by rpki-client