Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39d86fec-ee41-3d19-9a1c-45c5899a1436.roa
File: 39d86fec-ee41-3d19-9a1c-45c5899a1436.roa (raw, json)
Hash identifier: gkZ5tmfnCTnCD9tLb43H8jq72BoodSQLxfYjYmy/mns=
Subject key identifier: 7B:93:42:01:56:B0:33:13:F6:E7:F8:E0:EA:CA:2F:19:4E:79:22:A4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C264547051202683175FA880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39d86fec-ee41-3d19-9a1c-45c5899a1436.roa
Signing time: Mon 03 Feb 2025 11:15:52 +0000
ROA not before: Mon 03 Feb 2025 11:15:52 +0000
ROA not after: Sun 04 May 2025 10:15:52 +0000
asID: 30036
IP address blocks: 173.31.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:54:70:51:20:26:83:17:5f:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:15:52 2025 GMT
Not After : May 4 10:15:52 2025 GMT
Subject: CN=b73fd8bd-5cd4-46bc-97ad-a791c15a6b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cb:75:a6:d1:21:4f:46:4b:b6:7e:f6:5f:ac:
07:6e:83:e6:cf:ca:a1:ed:f9:e0:d7:35:f5:c9:67:
9a:da:26:db:95:bb:0e:a6:3f:1d:df:37:b7:ff:de:
32:19:fa:b6:3f:dc:18:ca:ad:f5:08:e6:c0:d7:1a:
99:77:c5:1f:68:c4:f1:ea:b5:bc:99:81:7c:92:e8:
67:df:39:90:30:78:35:10:e2:90:50:d8:0d:7e:51:
72:8a:b5:83:75:3e:d1:cf:d4:59:39:c7:53:08:57:
29:00:ed:05:3b:20:19:31:4f:16:f3:22:c7:25:77:
a2:a9:29:e5:a8:6d:b9:45:49:4c:a2:61:1a:82:a5:
fe:ec:b4:fa:12:f4:9d:f1:ba:fa:5f:1f:41:19:bc:
27:c8:60:75:bf:64:22:97:56:76:62:9a:8a:4f:87:
4e:3f:4b:76:2d:b8:e9:6c:69:39:3a:20:b9:28:3f:
43:1e:db:46:b6:bc:1d:ef:9d:e3:09:63:13:c3:78:
7f:7e:93:6f:26:db:90:df:60:05:99:dd:79:70:42:
8a:ac:04:d4:3a:c9:e2:14:cb:23:0e:e5:b4:cb:08:
9b:fe:bc:60:58:fb:df:ae:2c:de:5b:3a:26:93:8e:
b1:b5:5e:08:04:ce:a5:f3:66:b6:8e:45:35:45:0a:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:93:42:01:56:B0:33:13:F6:E7:F8:E0:EA:CA:2F:19:4E:79:22:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39d86fec-ee41-3d19-9a1c-45c5899a1436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:a5:73:74:69:e4:60:b0:1d:88:33:21:3d:77:25:8d:b9:62:
89:a5:52:13:14:96:05:d7:fe:c8:26:6c:51:8c:37:b0:db:a2:
d4:b6:07:b3:32:10:2c:d1:a0:0b:9b:87:ee:36:42:ba:19:5b:
e5:78:f1:1d:c7:4c:cb:0d:47:5e:eb:a0:f1:79:9e:b3:c7:60:
48:b0:4c:88:a0:0b:00:65:22:6a:39:3f:35:ee:ad:86:14:f2:
bf:96:38:8e:56:b9:bc:6d:d7:18:87:d7:bf:64:63:5b:f7:36:
d3:6d:eb:7f:1a:0c:53:a8:8f:2b:e2:20:2f:55:93:b9:d1:64:
44:0c:44:1c:79:b0:08:3d:8d:d4:29:53:f9:f5:98:35:45:4d:
e3:1b:02:f9:41:02:4a:8e:dc:51:d6:34:b7:b5:ad:c6:56:6d:
bb:35:a4:ae:a9:cd:c4:42:7d:8f:36:fb:1f:fe:a0:a5:a9:8d:
81:f1:94:ca:99:1d:72:5e:8b:de:29:08:0d:69:80:2f:77:20:
2c:34:55:95:f0:e6:cb:a6:d2:18:6b:ac:ef:33:69:f1:8e:b7:
24:a7:0d:03:1e:e0:72:48:bf:59:7c:84:a1:c3:58:1a:c0:6b:
07:ef:ae:7f:f8:b5:82:ee:2c:c7:a8:78:31:c3:eb:9b:e6:ab:
37:f4:b0:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCZFRwUSAmgxdfqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTU1MloXDTI1MDUwNDEwMTU1MlowLzEtMCsGA1UEAxMk
YjczZmQ4YmQtNWNkNC00NmJjLTk3YWQtYTc5MWMxNWE2YjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8t1ptEhT0ZLtn72X6wHboPmz8qh7fng1zX1
yWea2ibblbsOpj8d3ze3/94yGfq2P9wYyq31CObA1xqZd8UfaMTx6rW8mYF8kuhn
3zmQMHg1EOKQUNgNflFyirWDdT7Rz9RZOcdTCFcpAO0FOyAZMU8W8yLHJXeiqSnl
qG25RUlMomEagqX+7LT6EvSd8br6Xx9BGbwnyGB1v2Qil1Z2YpqKT4dOP0t2Lbjp
bGk5OiC5KD9DHttGtrwd753jCWMTw3h/fpNvJtuQ32AFmd15cEKKrATUOsniFMsj
DuW0ywib/rxgWPvfrizeWzomk46xtV4IBM6l82a2jkU1RQrNKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuTQgFWsDMT9uf44OrKLxlOeSKkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzlkODZmZWMtZWU0MS0z
ZDE5LTlhMWMtNDVjNTg5OWExNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmlc3Rp5GCwHYgzIT13JY25YomlUhMUlgXX/sgmbFGMN7DbotS2B7My
ECzRoAubh+42QroZW+V48R3HTMsNR17roPF5nrPHYEiwTIigCwBlImo5PzXurYYU
8r+WOI5Wubxt1xiH179kY1v3NtNt638aDFOojyviIC9Vk7nRZEQMRBx5sAg9jdQp
U/n1mDVFTeMbAvlBAkqO3FHWNLe1rcZWbbs1pK6pzcRCfY82+x/+oKWpjYHxlMqZ
HXJei94pCA1pgC93ICw0VZXw5sum0hhrrO8zafGOtySnDQMe4HJIv1l8hKHDWBrA
awfvrn/4tYLuLMeoeDHD65vmqzf0sE0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:28 2025 by rpki-client