Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f880dbf-1650-30da-8777-197c7f35c869.roa
File: 4f880dbf-1650-30da-8777-197c7f35c869.roa (raw, json)
Hash identifier: K3onewWNYyewNsv+7CUvW+RUFhHYPhZTzd6//aPL0VU=
Subject key identifier: 54:F6:B9:12:29:61:E8:E2:36:CE:54:70:34:6E:B7:08:C7:2E:B0:22
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5339E64669C786D6C7348F3
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f880dbf-1650-30da-8777-197c7f35c869.roa
Signing time: Tue 04 Feb 2025 11:25:08 +0000
ROA not before: Tue 04 Feb 2025 11:25:08 +0000
ROA not after: Mon 05 May 2025 10:25:08 +0000
asID: 30036
IP address blocks: 173.22.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:33:9e:64:66:9c:78:6d:6c:73:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:25:08 2025 GMT
Not After : May 5 10:25:08 2025 GMT
Subject: CN=29aa31b7-ede4-44ee-b7a0-da16f9bc1874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:e2:36:42:67:92:34:25:48:c8:35:51:25:
f5:c8:0a:91:9e:86:b3:b1:5e:1b:1b:ba:47:27:24:
40:3a:4c:b0:c6:33:4c:03:ce:f7:c6:c4:71:ce:46:
9f:44:ad:7b:1f:66:56:51:e9:62:f4:4c:2c:af:5b:
93:3b:e9:bb:1e:66:2b:2b:cb:ca:b7:0b:61:46:e0:
45:02:48:7c:29:65:e7:c6:ed:54:c2:0d:f4:49:db:
b0:23:bc:f7:8b:d5:11:d1:47:85:17:89:b9:e4:43:
bd:10:7d:de:8b:f0:88:89:c3:a9:9c:f2:c5:6a:f0:
14:a5:71:93:33:dc:1c:44:1b:ea:fb:d3:92:20:9d:
d8:d9:89:e3:25:fe:d6:ab:3d:b1:5c:d2:4d:3a:e6:
9a:0d:74:8a:57:66:3f:57:00:cb:91:79:46:44:ae:
20:d6:ca:29:57:ed:68:f1:dc:04:e9:a0:db:97:3d:
e7:ce:32:bc:5e:97:3d:51:ce:52:f4:c5:d2:d9:50:
74:7d:a0:63:cd:0e:f0:4a:b9:fd:bb:60:bc:af:22:
e6:10:f3:10:35:a7:94:42:25:74:f9:03:f8:eb:cc:
9b:26:ba:6b:1c:58:57:cd:d0:8f:0d:4e:1f:96:2b:
ba:ec:b6:84:6b:93:7f:bc:0f:60:02:90:4e:3e:09:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:B9:12:29:61:E8:E2:36:CE:54:70:34:6E:B7:08:C7:2E:B0:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f880dbf-1650-30da-8777-197c7f35c869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:7f:92:43:9f:5a:84:92:ef:b4:28:2b:d6:b9:ae:08:1b:74:
0d:c3:f5:18:81:dc:e1:83:4e:97:dc:83:18:cf:1c:52:6a:35:
c4:f1:5b:aa:7e:85:9f:65:a4:87:8d:a5:58:41:34:84:36:17:
4c:86:ac:82:15:17:21:54:31:25:dc:43:0c:8c:90:1b:18:20:
43:28:f8:48:08:83:ba:ef:56:a8:0a:6c:fa:3b:94:0d:37:77:
87:02:c1:f2:5e:0d:7e:ba:0a:54:6f:29:7c:45:a7:e7:dd:ce:
99:49:04:c8:93:e5:81:32:c6:2f:f1:bf:32:34:72:e0:79:54:
56:31:f2:91:f1:88:b4:53:7f:b9:d3:d3:16:b6:fb:53:b1:4e:
0f:05:96:59:29:79:c7:fb:61:55:75:fc:9b:00:15:e2:3a:2e:
2f:dc:60:62:b3:1d:90:a7:d3:ba:77:5f:80:ad:37:29:cb:46:
20:2d:b6:12:8a:18:db:0b:a1:c0:21:40:a5:54:fe:db:28:94:
54:3e:10:16:94:41:4d:45:78:54:e9:4d:3d:3f:a0:54:17:72:
cf:95:9d:cd:07:06:db:6e:bf:5e:52:ec:c4:b9:1e:8c:63:74:
65:d8:2d:91:f6:53:44:c7:2d:c8:6f:d0:08:24:e2:ab:a4:21:
1b:de:17:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFM55kZpx4bWxzSPMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDExMjUwOFoXDTI1MDUwNTEwMjUwOFowLzEtMCsGA1UEAxMk
MjlhYTMxYjctZWRlNC00NGVlLWI3YTAtZGExNmY5YmMxODc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuePiNkJnkjQlSMg1USX1yAqRnoazsV4bG7pH
JyRAOkywxjNMA873xsRxzkafRK17H2ZWUeli9Ewsr1uTO+m7HmYrK8vKtwthRuBF
Akh8KWXnxu1Uwg30SduwI7z3i9UR0UeFF4m55EO9EH3ei/CIicOpnPLFavAUpXGT
M9wcRBvq+9OSIJ3Y2YnjJf7Wqz2xXNJNOuaaDXSKV2Y/VwDLkXlGRK4g1sopV+1o
8dwE6aDblz3nzjK8Xpc9Uc5S9MXS2VB0faBjzQ7wSrn9u2C8ryLmEPMQNaeUQiV0
+QP468ybJrprHFhXzdCPDU4fliu67LaEa5N/vA9gApBOPgmnswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFT2uRIpYejiNs5UcDRutwjHLrAiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY4ODBkYmYtMTY1MC0z
MGRhLTg3NzctMTk3YzdmMzVjODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAh/kkOfWoSS77QoK9a5rggbdA3D9RiB3OGDTpfcgxjPHFJqNcTxW6p+
hZ9lpIeNpVhBNIQ2F0yGrIIVFyFUMSXcQwyMkBsYIEMo+EgIg7rvVqgKbPo7lA03
d4cCwfJeDX66ClRvKXxFp+fdzplJBMiT5YEyxi/xvzI0cuB5VFYx8pHxiLRTf7nT
0xa2+1OxTg8Fllkpecf7YVV1/JsAFeI6Li/cYGKzHZCn07p3X4CtNynLRiAtthKK
GNsLocAhQKVU/tsolFQ+EBaUQU1FeFTpTT0/oFQXcs+Vnc0HBttuv15S7MS5Hoxj
dGXYLZH2U0THLchv0Agk4qukIRveF3c=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:17:24 2025 by rpki-client