Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/412fd2f4-b385-33ce-b491-ba86f905066a.roa
File: 412fd2f4-b385-33ce-b491-ba86f905066a.roa (raw, json)
Hash identifier: s/zECaG/WAwqbryCO4IVi4KqylWEZK8PERElIkZdyEY=
Subject key identifier: 29:05:F1:66:EB:1D:5C:6B:06:EE:23:61:2C:AB:C6:7C:A0:FC:E7:94
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F5A9F232942A99BA24D340
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/412fd2f4-b385-33ce-b491-ba86f905066a.roa
Signing time: Wed 05 Feb 2025 11:07:44 +0000
ROA not before: Wed 05 Feb 2025 11:07:44 +0000
ROA not after: Tue 06 May 2025 10:07:44 +0000
asID: 30036
IP address blocks: 173.21.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f5:a9:f2:32:94:2a:99:ba:24:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:07:44 2025 GMT
Not After : May 6 10:07:44 2025 GMT
Subject: CN=470e98af-191b-4da1-a60e-b0326abbb29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:4e:9f:be:64:a5:31:2a:d9:63:5f:50:cb:
03:79:9a:3f:a9:b1:19:45:38:9e:3d:17:bb:96:7b:
be:05:f3:a9:cb:27:9b:ee:50:10:e7:42:49:5d:ec:
d8:fc:65:a7:fa:e4:54:2a:97:ac:da:79:31:75:4c:
ac:7c:ef:cc:a7:f5:9c:7a:f5:cd:40:04:90:b3:9f:
07:bb:59:2e:df:0a:a9:a8:fc:e9:e2:42:2f:6b:e8:
a2:2e:1d:b0:ec:5d:8b:37:89:28:f5:4d:0c:ab:d1:
c7:87:09:9d:91:3d:d3:23:b3:47:3a:ff:6c:e3:9a:
f6:57:de:c5:98:67:72:78:32:42:f0:ef:91:ec:cd:
4d:5f:c9:b2:92:2b:66:01:e6:c9:bd:f8:a7:88:8c:
18:c9:a2:77:70:32:fd:ad:95:49:e0:90:4c:48:a6:
35:01:fa:19:68:b2:23:77:92:23:19:30:11:8f:74:
70:9d:fd:6d:03:8a:8e:ce:49:2b:0e:91:47:33:8e:
d8:98:bc:48:62:24:7f:88:36:b1:64:90:99:f7:dc:
6e:db:81:4b:08:9b:da:48:3b:55:39:32:88:8e:ed:
e0:ac:4e:f9:6e:0f:71:c1:ec:23:f4:70:00:41:93:
51:41:e3:70:ad:7e:e8:36:a7:91:1f:22:2e:87:f2:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:05:F1:66:EB:1D:5C:6B:06:EE:23:61:2C:AB:C6:7C:A0:FC:E7:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/412fd2f4-b385-33ce-b491-ba86f905066a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:56:c3:ff:42:8d:f3:41:1c:c9:ac:79:6d:7e:3d:a2:fb:a2:
14:7c:b9:07:b1:8d:e7:d2:94:03:bb:0f:12:8c:85:51:46:6f:
ae:ca:6e:8a:59:ce:51:69:fc:28:db:f1:9e:d3:07:a1:40:10:
d5:ce:59:d0:9a:22:48:8a:5c:05:4d:d5:68:df:cd:1a:11:2c:
ec:b5:c9:3e:3b:6c:37:95:7c:00:bb:04:64:06:25:d7:a2:9d:
96:10:28:a0:97:e3:53:3d:78:a0:1e:51:ca:23:8d:e3:77:73:
fe:8f:d9:28:83:44:8f:f9:97:a9:5c:78:d4:a2:33:d0:f4:73:
ae:dc:0e:3b:6d:bf:61:ef:3e:84:00:9e:af:f9:fd:2e:a4:7a:
a7:32:73:83:ac:1a:b8:a8:60:f5:60:fb:3c:58:ed:70:b6:0b:
ae:2e:41:d7:25:d1:31:81:ec:17:b3:a1:07:a8:da:6d:14:b4:
9a:fd:cf:d3:99:66:5f:0c:1c:bc:ee:39:e6:f7:39:73:21:9b:
68:ef:2d:c6:a9:c9:6f:d6:dc:96:c0:2f:37:7b:a8:65:1b:53:
41:cd:09:bb:68:b9:c4:9a:91:e8:b9:b4:10:60:27:66:a5:c1:
99:ba:de:26:c9:2c:5c:79:2b:f3:06:79:88:67:d9:65:c9:a4:
75:b4:a3:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9anyMpQqmbok00AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNTExMDc0NFoXDTI1MDUwNjEwMDc0NFowLzEtMCsGA1UEAxMk
NDcwZTk4YWYtMTkxYi00ZGExLWE2MGUtYjAzMjZhYmJiMjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIxOn75kpTEq2WNfUMsDeZo/qbEZRTiePRe7
lnu+BfOpyyeb7lAQ50JJXezY/GWn+uRUKpes2nkxdUysfO/Mp/WcevXNQASQs58H
u1ku3wqpqPzp4kIva+iiLh2w7F2LN4ko9U0Mq9HHhwmdkT3TI7NHOv9s45r2V97F
mGdyeDJC8O+R7M1NX8mykitmAebJvfiniIwYyaJ3cDL9rZVJ4JBMSKY1AfoZaLIj
d5IjGTARj3Rwnf1tA4qOzkkrDpFHM47YmLxIYiR/iDaxZJCZ99xu24FLCJvaSDtV
OTKIju3grE75bg9xwewj9HAAQZNRQeNwrX7oNqeRHyIuh/K6SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCkF8WbrHVxrBu4jYSyrxnyg/OeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDEyZmQyZjQtYjM4NS0z
M2NlLWI0OTEtYmE4NmY5MDUwNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhWw/9CjfNBHMmseW1+PaL7ohR8uQexjefSlAO7DxKMhVFGb67KbopZ
zlFp/Cjb8Z7TB6FAENXOWdCaIkiKXAVN1WjfzRoRLOy1yT47bDeVfAC7BGQGJdei
nZYQKKCX41M9eKAeUcojjeN3c/6P2SiDRI/5l6lceNSiM9D0c67cDjttv2HvPoQA
nq/5/S6keqcyc4OsGrioYPVg+zxY7XC2C64uQdcl0TGB7BezoQeo2m0UtJr9z9OZ
Zl8MHLzuOeb3OXMhm2jvLcapyW/W3JbALzd7qGUbU0HNCbtoucSakei5tBBgJ2al
wZm63ibJLFx5K/MGeYhn2WXJpHW0o4o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:07 2025 by rpki-client