Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa
File: 2cd172de-b031-3b7a-8374-eced4e55a452.roa (raw, json)
Hash identifier: rnxQd98DA+V/CKRIXdSaGaYkGWuOUqpU/iTl/5LGJNQ=
Subject key identifier: D5:E0:97:47:25:D2:71:8B:92:B0:E8:E1:B6:30:5B:EE:08:95:A6:EB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C532D1D689B350DDE5504400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa
Signing time: Tue 04 Feb 2025 11:23:32 +0000
ROA not before: Tue 04 Feb 2025 11:23:32 +0000
ROA not after: Mon 05 May 2025 10:23:32 +0000
asID: 30036
IP address blocks: 173.20.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:32:d1:d6:89:b3:50:dd:e5:50:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:23:32 2025 GMT
Not After : May 5 10:23:32 2025 GMT
Subject: CN=f23cde4f-1687-43fe-97aa-9c0dfaa37b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:be:d7:bc:78:bc:32:1b:29:4d:c0:50:64:
76:b2:2c:23:8c:ab:35:4d:1f:af:f1:ee:28:2a:a0:
f9:1c:19:84:24:97:8d:36:c1:d8:26:04:df:ea:08:
60:eb:d8:23:52:4c:c8:44:c4:05:cb:cc:88:51:70:
0a:10:3d:a1:d4:fa:4b:0c:12:83:3c:2f:d4:7a:6b:
88:56:d2:9c:67:84:8e:5f:f0:80:f0:2f:b7:a4:0d:
1c:58:6b:e9:29:27:ac:06:19:f2:93:eb:8c:c1:57:
bb:5a:af:e8:54:af:81:1e:67:dd:bc:7a:22:a9:7c:
0d:7c:84:4e:b6:5b:61:31:fc:81:c5:30:0a:a2:e2:
d3:c2:87:2e:09:4e:29:f4:bb:1d:1c:71:bd:c2:4c:
ff:ef:37:85:73:5a:04:f3:ac:6e:30:af:07:29:16:
bb:01:46:e2:04:35:d3:7d:97:64:73:48:91:e5:92:
d3:e1:57:a2:a4:f3:54:1f:a6:58:ed:fb:b7:a0:2e:
c0:6b:bc:35:63:d0:86:aa:a6:df:24:ab:ed:50:12:
41:4e:62:4d:0d:d0:6c:ab:26:e1:2f:f9:9d:b3:7f:
ff:a8:54:ba:91:b1:84:21:26:80:e8:c3:fc:d1:00:
d9:9d:e8:a8:da:0b:ce:dd:f6:8f:f5:1c:d6:d4:a6:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E0:97:47:25:D2:71:8B:92:B0:E8:E1:B6:30:5B:EE:08:95:A6:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:8f:11:51:54:d7:38:17:a4:55:d5:ac:c5:22:a7:9a:c4:3c:
9f:f0:72:93:6e:77:7f:08:28:b6:06:97:5f:eb:75:4d:69:87:
1e:de:68:50:d6:0c:7e:c6:2b:7b:1a:fc:4d:49:76:ba:5f:68:
3e:76:0c:82:fd:68:a5:3b:fc:70:2a:42:0a:b8:48:31:13:0a:
2a:15:13:06:88:d2:a7:88:a7:eb:cf:96:09:f0:f6:04:c9:1a:
35:f9:69:52:d5:00:2c:87:45:3d:ff:a6:31:6f:e9:f2:1e:5e:
bc:45:1d:d7:ee:a8:ee:51:d7:27:79:00:e1:21:5d:8d:ec:f2:
75:4c:27:83:01:86:6a:c0:a9:b1:1d:d4:be:44:91:05:e3:b0:
81:d2:07:30:8e:cb:7d:a7:98:05:ba:d6:91:21:57:95:39:e8:
f8:56:c2:a8:9f:80:01:c4:01:c8:6c:be:43:0c:4c:a3:67:80:
d7:7a:90:01:02:57:e0:ee:e6:e9:6c:0b:47:d3:d5:d3:6a:4e:
80:da:1c:d1:d1:3f:da:1d:2a:9e:80:1d:6a:ac:40:b5:f6:f8:
14:59:4d:44:0d:c8:2a:5b:af:d7:16:dd:52:f8:3c:ce:fe:05:
b5:2c:b3:1b:10:96:7a:e6:5e:20:75:0d:dc:b9:b3:0b:c3:f1:
20:c4:9b:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFMtHWibNQ3eVQRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDExMjMzMloXDTI1MDUwNTEwMjMzMlowLzEtMCsGA1UEAxMk
ZjIzY2RlNGYtMTY4Ny00M2ZlLTk3YWEtOWMwZGZhYTM3YjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydC+17x4vDIbKU3AUGR2siwjjKs1TR+v8e4o
KqD5HBmEJJeNNsHYJgTf6ghg69gjUkzIRMQFy8yIUXAKED2h1PpLDBKDPC/UemuI
VtKcZ4SOX/CA8C+3pA0cWGvpKSesBhnyk+uMwVe7Wq/oVK+BHmfdvHoiqXwNfIRO
tlthMfyBxTAKouLTwocuCU4p9LsdHHG9wkz/7zeFc1oE86xuMK8HKRa7AUbiBDXT
fZdkc0iR5ZLT4VeipPNUH6ZY7fu3oC7Aa7w1Y9CGqqbfJKvtUBJBTmJNDdBsqybh
L/mds3//qFS6kbGEISaA6MP80QDZneio2gvO3faP9RzW1KbrjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXgl0cl0nGLkrDo4bYwW+4IlabrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmNkMTcyZGUtYjAzMS0z
YjdhLTgzNzQtZWNlZDRlNTVhNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRROMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyPEVFU1zgXpFXVrMUip5rEPJ/wcpNud38IKLYGl1/rdU1phx7eaFDW
DH7GK3sa/E1JdrpfaD52DIL9aKU7/HAqQgq4SDETCioVEwaI0qeIp+vPlgnw9gTJ
GjX5aVLVACyHRT3/pjFv6fIeXrxFHdfuqO5R1yd5AOEhXY3s8nVMJ4MBhmrAqbEd
1L5EkQXjsIHSBzCOy32nmAW61pEhV5U56PhWwqifgAHEAchsvkMMTKNngNd6kAEC
V+Du5ulsC0fT1dNqToDaHNHRP9odKp6AHWqsQLX2+BRZTUQNyCpbr9cW3VL4PM7+
BbUssxsQlnrmXiB1Ddy5swvD8SDEm/g=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:20 2025 by rpki-client