Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3af911b7-46e9-3ffc-8288-0959ea475521.roa
File: 3af911b7-46e9-3ffc-8288-0959ea475521.roa (raw, json)
Hash identifier: UxgRtc5iER8XxMYvvz6b72APQJ5lJbZdflTI2/KT5fc=
Subject key identifier: DD:FF:53:F6:5A:A7:6C:D1:97:91:85:29:8E:AE:33:64:56:6E:F2:48
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C261B3DBCD91A1FB89C97C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3af911b7-46e9-3ffc-8288-0959ea475521.roa
Signing time: Mon 03 Feb 2025 11:10:34 +0000
ROA not before: Mon 03 Feb 2025 11:10:34 +0000
ROA not after: Sun 04 May 2025 10:10:34 +0000
asID: 30036
IP address blocks: 173.19.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:61:b3:db:cd:91:a1:fb:89:c9:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:10:34 2025 GMT
Not After : May 4 10:10:34 2025 GMT
Subject: CN=66afe81b-f6af-41b7-a9ba-719aaf4d985f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:c9:93:3d:df:0d:00:3d:f4:c3:84:72:c5:
bf:dc:a3:2c:11:df:7c:5e:4b:85:e9:bd:45:eb:23:
8a:db:a1:67:45:0e:4a:53:79:65:62:2e:e2:9e:b1:
2e:df:cd:cc:7c:38:de:fd:ce:df:66:34:cd:97:3b:
b7:bd:66:a9:72:31:ae:25:d6:07:19:8f:e5:06:31:
34:21:4b:aa:94:a5:6c:e2:fe:77:aa:9b:9b:5d:05:
75:75:83:8a:24:cf:b8:ff:a2:71:c4:67:4e:14:3f:
dd:5c:de:a1:30:b2:63:cf:07:99:55:0a:11:c9:f1:
60:7f:d6:bf:b2:2b:9b:8b:58:61:5d:f7:a6:c0:12:
83:9d:a0:48:1f:98:83:33:6f:82:5f:ee:33:1e:7f:
91:9c:ad:93:42:7f:2f:c6:91:28:25:8a:c3:26:36:
30:61:ed:21:34:44:eb:7d:61:e3:33:22:74:7a:50:
e5:b4:82:9a:b5:b5:76:4a:27:69:51:fc:53:23:00:
93:f2:99:8c:a5:27:d5:f1:c7:c9:3c:af:4c:a1:91:
88:56:04:10:f5:8a:ee:78:f3:cf:1d:a8:ef:f3:3e:
d6:d9:e0:4a:49:b2:40:42:03:8f:5a:bf:57:dd:68:
ab:28:74:40:d8:8c:1e:1c:b9:7d:a8:87:73:38:f8:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:53:F6:5A:A7:6C:D1:97:91:85:29:8E:AE:33:64:56:6E:F2:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3af911b7-46e9-3ffc-8288-0959ea475521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:e9:2f:d3:34:8f:0b:ca:7c:88:32:78:ee:f4:37:1d:a2:0d:
3b:b2:cf:a0:0f:d6:70:04:b5:c9:e6:7b:c6:00:40:4c:a8:53:
00:3b:82:8b:64:b7:23:9f:a4:b7:3a:29:c0:41:93:c3:c4:43:
e0:d4:be:a8:d3:40:6c:db:b3:e6:3c:86:4a:d8:5c:1b:77:6e:
5a:2a:28:1d:59:88:78:9a:c0:60:08:e5:54:c4:6c:50:f4:05:
16:db:cf:cc:7f:67:dd:d8:04:79:d5:cf:f8:1b:98:de:ea:f6:
11:77:46:5b:5d:f6:24:37:e2:6e:f1:75:38:1c:d4:6c:f3:e8:
14:2f:f0:1b:27:1a:04:e2:a3:a0:0e:61:92:56:40:44:f5:a9:
fd:82:35:ec:5b:cd:69:bf:35:ad:3e:2f:c4:11:5b:ea:9f:0d:
d5:b0:89:39:d4:3d:36:d9:e2:b4:b2:9c:f6:5c:c3:75:43:d3:
1c:8a:80:db:8b:34:72:52:88:a2:87:6f:3b:4c:e4:16:d3:0c:
0c:32:f5:45:b4:a2:64:a4:48:2c:16:a3:51:2a:47:59:8b:cf:
6f:97:bc:65:17:1b:83:92:20:df:9c:07:14:77:b3:f1:7f:d5:
fc:21:d5:f4:02:fb:97:8d:76:67:d0:3a:88:58:b8:73:f5:84:
e4:b4:b3:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYbPbzZGh+4nJfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTAzNFoXDTI1MDUwNDEwMTAzNFowLzEtMCsGA1UEAxMk
NjZhZmU4MWItZjZhZi00MWI3LWE5YmEtNzE5YWFmNGQ5ODVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/fJkz3fDQA99MOEcsW/3KMsEd98XkuF6b1F
6yOK26FnRQ5KU3llYi7inrEu383MfDje/c7fZjTNlzu3vWapcjGuJdYHGY/lBjE0
IUuqlKVs4v53qpubXQV1dYOKJM+4/6JxxGdOFD/dXN6hMLJjzweZVQoRyfFgf9a/
siubi1hhXfemwBKDnaBIH5iDM2+CX+4zHn+RnK2TQn8vxpEoJYrDJjYwYe0hNETr
fWHjMyJ0elDltIKatbV2SidpUfxTIwCT8pmMpSfV8cfJPK9MoZGIVgQQ9YruePPP
Hajv8z7W2eBKSbJAQgOPWr9X3WirKHRA2IweHLl9qIdzOPj5MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3/U/Zap2zRl5GFKY6uM2RWbvJIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2FmOTExYjctNDZlOS0z
ZmZjLTgyODgtMDk1OWVhNDc1NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrROiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3pL9M0jwvKfIgyeO70Nx2iDTuyz6AP1nAEtcnme8YAQEyoUwA7gotk
tyOfpLc6KcBBk8PEQ+DUvqjTQGzbs+Y8hkrYXBt3bloqKB1ZiHiawGAI5VTEbFD0
BRbbz8x/Z93YBHnVz/gbmN7q9hF3Rltd9iQ34m7xdTgc1Gzz6BQv8BsnGgTio6AO
YZJWQET1qf2CNexbzWm/Na0+L8QRW+qfDdWwiTnUPTbZ4rSynPZcw3VD0xyKgNuL
NHJSiKKHbztM5BbTDAwy9UW0omSkSCwWo1EqR1mLz2+XvGUXG4OSIN+cBxR3s/F/
1fwh1fQC+5eNdmfQOohYuHP1hOS0s1g=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:44 2025 by rpki-client