Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34e28fba-9008-3b9d-878b-6605842ac8c0.roa
File: 34e28fba-9008-3b9d-878b-6605842ac8c0.roa (raw, json)
Hash identifier: C+HuojZH9T2bXjGqz2oaik1wQOE9aZCH5EM+FuX1NlQ=
Subject key identifier: 48:CD:6F:9B:CD:F4:00:72:2C:4E:FD:3E:22:F9:44:67:E7:2A:30:94
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849194176B15247DF8BCFEB5D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34e28fba-9008-3b9d-878b-6605842ac8c0.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 30036
IP address blocks: 216.108.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:76:b1:52:47:df:8b:cf:eb:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=7389e635-02aa-4d01-b959-62fe7a2b3ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:8e:aa:77:d6:2e:d2:51:88:b9:fe:01:6f:
e6:84:42:6b:3d:6b:0f:cb:6c:fd:e5:12:65:99:df:
92:86:34:ae:d5:3e:e9:5f:5b:09:d6:24:e9:c7:f4:
f5:06:79:27:c1:d7:1a:58:cc:7e:ed:39:65:d8:8e:
85:1c:a6:12:ff:c0:da:ea:37:72:29:f2:42:0a:dc:
32:42:b1:60:f0:bd:05:39:e4:47:e4:0b:a1:e4:a2:
aa:9c:91:2f:27:92:9f:e0:e8:e3:ce:9c:fa:66:c1:
a8:b2:d4:8d:1b:90:41:c4:6a:31:2a:fd:df:e3:9c:
0d:79:15:59:6a:c9:e6:54:52:a1:e4:36:ee:0a:97:
ff:02:cc:da:79:f5:d4:b6:99:c3:33:a2:ed:ed:1a:
44:fe:01:b4:57:73:f0:44:0b:91:9e:fb:28:85:15:
e0:c8:0c:98:6a:90:4c:d1:cf:59:db:5d:7f:4e:32:
75:cd:b0:9e:27:c6:81:74:9b:d7:a3:42:9b:b5:5b:
57:ed:74:52:5d:02:b8:23:ae:91:17:52:e5:25:1c:
ae:91:d1:70:67:8a:55:11:b7:ee:6d:ff:b8:4d:02:
7e:11:ce:fb:24:78:bc:81:27:27:f9:a2:9d:1f:2a:
ff:92:84:9f:5a:fb:b3:19:9d:73:3d:f2:6e:03:01:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CD:6F:9B:CD:F4:00:72:2C:4E:FD:3E:22:F9:44:67:E7:2A:30:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34e28fba-9008-3b9d-878b-6605842ac8c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
216.108.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ab:9b:8c:c0:2e:3a:84:ec:3b:0d:b3:2a:e1:a2:fd:f5:8c:
a4:15:99:36:f3:5e:b1:bc:f3:23:53:ee:9e:79:e3:33:c4:64:
b7:33:ce:26:c3:f2:6b:5f:d5:0d:43:6e:13:94:d4:a8:2a:db:
c5:71:c0:7d:06:4d:a1:d4:76:e6:df:d0:9c:07:3f:81:8d:5a:
47:8b:76:78:b8:74:88:38:14:15:8d:2c:d7:d2:e1:b0:91:1e:
7a:a4:87:90:2e:c3:97:33:c5:45:e6:2c:36:8b:2c:a8:37:4c:
05:ff:b8:be:aa:19:bb:f1:57:d0:fe:e2:f2:9b:92:33:f0:49:
8c:f0:b5:c3:2a:13:32:2f:6c:82:63:4f:ae:01:78:20:c4:68:
0d:fd:d9:79:de:49:39:8c:aa:56:4e:ca:cd:66:27:ce:f6:07:
22:06:2a:11:b3:3a:ed:7c:3f:fc:c2:9a:1b:44:8b:58:18:fa:
d6:02:bd:02:3c:70:c7:77:03:8d:50:73:ec:4f:13:af:41:c4:
09:4b:87:91:80:ab:f8:d9:f7:f4:18:ec:ed:ce:e8:e8:b7:2f:
14:8e:7c:ca:ec:c2:3d:49:41:ff:7f:c2:d6:b2:dc:70:44:aa:
04:34:dd:9f:08:4c:48:6e:88:17:9f:ab:4d:75:0c:94:46:03:
b5:a7:43:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXaxUkffi8/rXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk
NzM4OWU2MzUtMDJhYS00ZDAxLWI5NTktNjJmZTdhMmIzZWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTKOqnfWLtJRiLn+AW/mhEJrPWsPy2z95RJl
md+ShjSu1T7pX1sJ1iTpx/T1BnknwdcaWMx+7Tll2I6FHKYS/8Da6jdyKfJCCtwy
QrFg8L0FOeRH5Auh5KKqnJEvJ5Kf4Ojjzpz6ZsGostSNG5BBxGoxKv3f45wNeRVZ
asnmVFKh5DbuCpf/AszaefXUtpnDM6Lt7RpE/gG0V3PwRAuRnvsohRXgyAyYapBM
0c9Z211/TjJ1zbCeJ8aBdJvXo0KbtVtX7XRSXQK4I66RF1LlJRyukdFwZ4pVEbfu
bf+4TQJ+Ec77JHi8gScn+aKdHyr/koSfWvuzGZ1zPfJuAwHYNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjNb5vN9AByLE79PiL5RGfnKjCUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzRlMjhmYmEtOTAwOC0z
YjlkLTg3OGItNjYwNTg0MmFjOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GzSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSrm4zALjqE7DsNsyrhov31jKQVmTbzXrG88yNT7p554zPEZLczzibD
8mtf1Q1DbhOU1Kgq28VxwH0GTaHUdubf0JwHP4GNWkeLdni4dIg4FBWNLNfS4bCR
Hnqkh5Auw5czxUXmLDaLLKg3TAX/uL6qGbvxV9D+4vKbkjPwSYzwtcMqEzIvbIJj
T64BeCDEaA392XneSTmMqlZOys1mJ872ByIGKhGzOu18P/zCmhtEi1gY+tYCvQI8
cMd3A41Qc+xPE69BxAlLh5GAq/jZ9/QY7O3O6Oi3LxSOfMrswj1JQf9/wtay3HBE
qgQ03Z8ITEhuiBefq011DJRGA7WnQ4Y=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:59 2025 by rpki-client