Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa
File: 4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa (raw, json)
Hash identifier: UhLVDbUYjrB1R0PvAmmQXwwnfYe4rovPkD4cChBH9Rg=
Subject key identifier: 30:15:CB:27:27:01:CE:ED:C3:1B:B2:92:41:7C:E7:1B:C5:45:CF:13
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F5C65262D87F3E1D972C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa
Signing time: Wed 05 Feb 2025 11:07:57 +0000
ROA not before: Wed 05 Feb 2025 11:07:57 +0000
ROA not after: Tue 06 May 2025 10:07:57 +0000
asID: 30036
IP address blocks: 173.20.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f5:c6:52:62:d8:7f:3e:1d:97:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:07:57 2025 GMT
Not After : May 6 10:07:57 2025 GMT
Subject: CN=626c5604-0edb-40e1-ae7a-f99e8e0670c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:68:d0:ea:92:20:aa:bc:be:bd:80:37:24:c3:
da:b3:c1:d9:dc:66:32:75:5a:08:fb:92:04:e6:ec:
29:ab:b5:9c:13:3a:44:b8:10:e5:48:ae:94:e5:c0:
f6:0d:f3:d1:93:ea:26:7f:78:aa:bb:d0:54:12:e8:
a6:f9:a2:e5:6d:b1:9e:6a:ed:1d:53:58:e7:dc:cd:
44:56:bd:88:b5:8b:6f:6e:22:88:f2:3c:d3:98:3e:
56:4d:71:b4:04:08:8f:4e:10:29:fe:0c:c2:83:5c:
8d:95:67:57:86:01:ac:66:f1:97:de:81:eb:57:b3:
d0:0a:14:65:e7:47:38:8e:aa:4d:e0:90:0c:63:1d:
03:7a:32:6b:66:7a:e9:a9:a8:dc:0c:68:9f:5e:8d:
9e:20:4a:87:17:e2:2b:6b:7c:b9:f7:7e:68:f3:55:
ca:de:cc:92:32:d9:c0:d3:76:d7:ba:e7:2b:ee:b4:
22:95:36:49:ba:2b:54:1a:97:e0:fd:e8:d7:37:5f:
da:51:38:bb:d2:d2:12:2d:58:dc:b0:e9:1c:6e:e2:
2f:10:c6:e0:68:37:36:2f:0a:eb:64:e5:77:db:25:
b3:3e:99:a2:6b:4a:09:83:fc:f6:b2:94:20:f0:36:
17:4d:4b:fd:5e:00:bb:e7:1a:49:8b:3f:1c:b0:18:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:CB:27:27:01:CE:ED:C3:1B:B2:92:41:7C:E7:1B:C5:45:CF:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:07:24:71:e2:26:90:00:ac:91:b0:c5:d5:48:45:46:c0:86:
67:6b:b6:f7:9a:a2:ab:39:63:27:ef:a3:88:d8:af:bb:8e:20:
cb:bd:60:aa:0f:93:d0:09:d9:d3:30:70:18:02:e9:c1:b8:d1:
c2:62:32:61:6d:96:94:19:e6:ed:d3:13:f4:5c:fb:e3:d3:b8:
bb:49:37:9e:73:ef:5c:fd:d4:c6:d0:cc:f5:3c:62:ee:5e:65:
1d:0e:da:91:e1:0c:a8:be:8b:f7:60:aa:7c:9a:71:09:77:48:
3c:e3:8d:68:37:0c:dc:bb:60:19:83:4e:f0:91:c4:40:b6:61:
60:81:3e:10:14:96:1d:b6:a4:fb:d4:d3:01:e3:78:00:71:77:
e7:b3:77:66:c5:60:9a:94:16:61:4c:ba:7f:0f:d5:f1:85:ab:
a1:47:ee:37:5c:f5:96:09:ff:3f:9d:93:47:bc:c4:1c:fe:0c:
2d:ed:1c:fb:7b:e4:94:eb:13:0d:6f:0b:5d:2f:53:a5:81:76:
6e:79:1e:89:68:00:38:d9:51:97:9a:43:73:d9:11:2b:5a:54:
67:f2:78:5b:ac:08:13:d2:7a:f0:c4:f6:61:1a:f8:2b:bd:7e:
7f:39:e4:3f:b7:41:2b:71:8f:6b:da:7c:dd:bd:c4:41:52:ea:
da:53:5f:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9cZSYth/Ph2XLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNTExMDc1N1oXDTI1MDUwNjEwMDc1N1owLzEtMCsGA1UEAxMk
NjI2YzU2MDQtMGVkYi00MGUxLWFlN2EtZjk5ZThlMDY3MGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmjQ6pIgqry+vYA3JMPas8HZ3GYydVoI+5IE
5uwpq7WcEzpEuBDlSK6U5cD2DfPRk+omf3iqu9BUEuim+aLlbbGeau0dU1jn3M1E
Vr2ItYtvbiKI8jzTmD5WTXG0BAiPThAp/gzCg1yNlWdXhgGsZvGX3oHrV7PQChRl
50c4jqpN4JAMYx0DejJrZnrpqajcDGifXo2eIEqHF+Ira3y5935o81XK3sySMtnA
03bXuucr7rQilTZJuitUGpfg/ejXN1/aUTi70tISLVjcsOkcbuIvEMbgaDc2Lwrr
ZOV32yWzPpmia0oJg/z2spQg8DYXTUv9XgC75xpJiz8csBgeOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAVyycnAc7twxuykkF85xvFRc8TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY1MmI1YjQtMWI3Ni0z
M2E5LTg0MzMtZWU0YzZlNjk2YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkHJHHiJpAArJGwxdVIRUbAhmdrtveaoqs5Yyfvo4jYr7uOIMu9YKoP
k9AJ2dMwcBgC6cG40cJiMmFtlpQZ5u3TE/Rc++PTuLtJN55z71z91MbQzPU8Yu5e
ZR0O2pHhDKi+i/dgqnyacQl3SDzjjWg3DNy7YBmDTvCRxEC2YWCBPhAUlh22pPvU
0wHjeABxd+ezd2bFYJqUFmFMun8P1fGFq6FH7jdc9ZYJ/z+dk0e8xBz+DC3tHPt7
5JTrEw1vC10vU6WBdm55HoloADjZUZeaQ3PZEStaVGfyeFusCBPSevDE9mEa+Cu9
fn855D+3QStxj2vafN29xEFS6tpTX2g=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:51 2025 by rpki-client