Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f20d531-3e0b-388f-9365-e78405e59dfd.roa
File: 2f20d531-3e0b-388f-9365-e78405e59dfd.roa (raw, json)
Hash identifier: hobg1LlaUToslWdJ5DDa/4YZg6Pl3PncVRHSFw2lpc4=
Subject key identifier: 9A:B6:03:67:1A:1B:D9:69:BA:66:CD:ED:76:B5:77:E8:EC:B6:0A:08
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5758B705FF0C3AD1150A2E2
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f20d531-3e0b-388f-9365-e78405e59dfd.roa
Signing time: Tue 04 Feb 2025 13:37:58 +0000
ROA not before: Tue 04 Feb 2025 13:37:58 +0000
ROA not after: Mon 05 May 2025 12:37:58 +0000
asID: 30036
IP address blocks: 173.24.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:75:8b:70:5f:f0:c3:ad:11:50:a2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:37:58 2025 GMT
Not After : May 5 12:37:58 2025 GMT
Subject: CN=78f30716-5cde-46f9-b530-3e343bf9901a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:93:ce:77:00:87:62:72:47:89:42:2c:7e:
1c:ca:0b:a7:ff:e9:3f:d4:39:2d:49:4c:cf:c1:57:
06:b1:57:40:70:09:96:5b:2a:95:fd:cd:47:c3:6e:
6b:be:cd:72:99:dc:cf:51:f1:d7:9d:62:57:33:55:
2c:21:69:b0:81:5c:a3:d5:ac:e1:d2:93:81:5d:99:
38:5e:5f:67:9a:69:2e:1c:7f:54:81:f6:68:4c:e0:
81:5e:6f:18:29:c0:d7:83:51:a3:ee:c9:73:e9:d0:
59:6d:37:02:5d:ec:7c:b7:9d:dd:89:27:2f:51:66:
5c:c8:5f:82:4d:40:59:b8:07:e8:ad:94:98:62:49:
d8:99:a4:02:b0:5f:75:00:1d:55:d6:4d:68:dd:f3:
ea:a1:8e:08:8e:c5:30:f3:79:37:bf:52:b2:8e:40:
68:27:19:10:0b:a0:bc:22:76:ba:97:f1:8f:32:86:
b4:e1:ce:0e:f8:15:3b:10:52:b9:4e:1f:20:b0:b7:
31:26:45:74:bc:1f:04:ee:47:73:60:6b:2d:93:2e:
68:8e:8d:48:9b:05:d0:cd:60:39:c2:04:45:25:0e:
7b:71:30:33:c9:85:fd:b3:31:f2:8b:f9:88:ac:96:
44:a8:7c:cc:3e:5a:f4:6a:dd:6f:d3:d0:a4:5a:56:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B6:03:67:1A:1B:D9:69:BA:66:CD:ED:76:B5:77:E8:EC:B6:0A:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f20d531-3e0b-388f-9365-e78405e59dfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ba:12:a6:3e:ad:9c:15:af:6a:d4:21:39:e1:33:bf:7d:23:
5a:4f:8b:fe:a2:33:f7:11:e5:07:79:a9:45:42:bc:28:3a:95:
4d:68:bb:bc:be:37:f0:b4:45:23:38:3b:4e:e5:66:3f:ae:be:
35:28:42:c5:36:52:6d:ac:b3:9f:14:4c:63:16:85:f4:3c:85:
86:b4:22:19:86:f1:99:5a:04:53:6d:1a:83:ed:cb:4d:1a:0d:
bf:e8:cf:2f:ad:2b:c8:4c:e6:94:c3:5e:08:1a:2e:89:db:80:
2b:2b:a1:03:ed:39:b7:36:98:da:52:61:ba:2e:ec:f8:89:a9:
47:75:15:25:85:91:87:ba:e7:0f:77:f5:b4:f7:0c:69:4f:4b:
b4:d6:d6:23:5a:a2:5f:9a:b8:ff:5c:2f:9e:90:ef:21:81:0f:
38:45:f9:fa:32:fb:59:70:1d:25:68:cb:ad:0a:be:4e:0a:a2:
0e:49:d2:b6:52:0e:8a:73:e1:f0:85:d4:7c:8e:df:ca:9a:3a:
d8:9e:ee:fb:13:f5:77:d0:ed:f1:b9:66:e1:93:7e:c9:c1:5e:
36:6b:1a:28:6b:3e:0a:a9:32:db:be:6e:94:59:76:5e:93:a1:
73:4e:a0:d9:11:4e:c4:44:a6:3d:bd:3a:f1:54:5c:f5:26:c0:
13:cf:fe:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdYtwX/DDrRFQouIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzMzc1OFoXDTI1MDUwNTEyMzc1OFowLzEtMCsGA1UEAxMk
NzhmMzA3MTYtNWNkZS00NmY5LWI1MzAtM2UzNDNiZjk5MDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu++TzncAh2JyR4lCLH4cygun/+k/1DktSUzP
wVcGsVdAcAmWWyqV/c1Hw25rvs1ymdzPUfHXnWJXM1UsIWmwgVyj1azh0pOBXZk4
Xl9nmmkuHH9UgfZoTOCBXm8YKcDXg1Gj7slz6dBZbTcCXex8t53diScvUWZcyF+C
TUBZuAforZSYYknYmaQCsF91AB1V1k1o3fPqoY4IjsUw83k3v1KyjkBoJxkQC6C8
Ina6l/GPMoa04c4O+BU7EFK5Th8gsLcxJkV0vB8E7kdzYGstky5ojo1ImwXQzWA5
wgRFJQ57cTAzyYX9szHyi/mIrJZEqHzMPlr0at1v09CkWlaLnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJq2A2caG9lpumbN7Xa1d+jstgoIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmYyMGQ1MzEtM2UwYi0z
ODhmLTkzNjUtZTc4NDA1ZTU5ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIK6EqY+rZwVr2rUITnhM799I1pPi/6iM/cR5Qd5qUVCvCg6lU1ou7y+
N/C0RSM4O07lZj+uvjUoQsU2Um2ss58UTGMWhfQ8hYa0IhmG8ZlaBFNtGoPty00a
Db/ozy+tK8hM5pTDXggaLonbgCsroQPtObc2mNpSYbou7PiJqUd1FSWFkYe65w93
9bT3DGlPS7TW1iNaol+auP9cL56Q7yGBDzhF+foy+1lwHSVoy60Kvk4Kog5J0rZS
Dopz4fCF1HyO38qaOtie7vsT9XfQ7fG5ZuGTfsnBXjZrGihrPgqpMtu+bpRZdl6T
oXNOoNkRTsREpj29OvFUXPUmwBPP/nk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:54 2025 by rpki-client