Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa
File: 5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa (raw, json)
Hash identifier: 10QA+P2cOr+tkIXTIW44dhclQNlCJLqCskaIMH+Ud4k=
Subject key identifier: 3D:CC:82:0F:B0:B9:B2:30:A4:B2:8A:BB:8E:37:39:47:0B:69:11:F5
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57ED168E5C0D9CEEC8A0D10
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa
Signing time: Tue 04 Feb 2025 13:56:39 +0000
ROA not before: Tue 04 Feb 2025 13:56:39 +0000
ROA not after: Mon 05 May 2025 12:56:39 +0000
asID: 30036
IP address blocks: 173.17.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7e:d1:68:e5:c0:d9:ce:ec:8a:0d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:56:39 2025 GMT
Not After : May 5 12:56:39 2025 GMT
Subject: CN=d9955614-74c0-499f-a941-55e22bb0382d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:77:7b:f6:e4:79:a3:df:b8:42:f2:cb:b7:
51:06:3c:17:e4:69:c2:36:49:76:bc:54:ad:3c:73:
23:a9:b3:e0:94:27:07:59:a8:d0:66:a8:34:e4:6b:
90:c3:5e:93:76:d0:3f:92:97:2f:f2:6f:ac:e7:c7:
32:ab:b2:ca:88:2c:44:f1:36:75:b7:6e:68:a5:8c:
73:23:7f:a5:e2:e9:f3:91:b3:55:3b:ca:89:a6:23:
ac:b5:90:b3:af:00:8e:0c:15:85:a1:32:91:06:22:
9f:73:28:4c:0f:3a:2e:21:54:f3:d0:42:63:52:0b:
4f:8c:d8:0e:ad:fd:db:b1:83:4c:58:bf:21:c3:35:
a3:1d:e6:d1:89:e3:09:06:04:e8:ca:ec:fe:b1:af:
20:b8:6f:12:dd:f9:b7:bc:52:5c:4b:0d:39:08:83:
ee:43:56:99:da:41:40:3c:b5:c0:c8:7a:32:78:56:
de:ca:eb:e1:2a:b5:0e:e2:65:8d:c4:aa:b9:ed:93:
5b:ea:b2:d2:36:83:10:cf:16:df:79:0c:40:f0:22:
74:83:f8:c0:46:17:7a:dc:f5:e1:84:8a:cd:14:ae:
2c:31:cb:6a:7f:9b:88:6a:09:05:fa:48:6e:26:28:
91:ca:a3:79:93:99:d9:e7:21:f2:9a:f4:7d:f8:36:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CC:82:0F:B0:B9:B2:30:A4:B2:8A:BB:8E:37:39:47:0B:69:11:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:f4:e5:2f:79:57:bc:21:d9:68:9f:40:a1:f9:6a:c3:ee:50:
8b:6a:6b:c6:bb:16:a2:ae:a4:72:f7:9b:43:c2:de:1a:44:ec:
36:0d:d7:bc:ad:24:ef:a5:67:49:a7:0a:ac:55:48:23:87:61:
1d:74:78:de:44:51:30:2e:03:47:b7:19:c3:66:d5:f1:dc:65:
d6:23:5e:88:17:50:73:94:5a:5c:b4:14:84:77:8a:44:b0:b2:
99:c8:d7:7b:a2:78:f7:32:07:0b:73:e4:97:d0:ea:ce:09:ef:
e5:0b:35:d1:75:3b:66:55:32:b2:13:b9:a1:e8:f7:26:e4:89:
4c:68:e5:97:6c:17:2a:9c:85:88:f1:91:84:75:3f:ef:5f:aa:
9c:63:ea:4d:ff:58:4c:33:f6:59:a4:7c:94:c0:b2:2e:56:d6:
0d:40:fa:61:02:b2:14:2c:bd:6a:73:a7:95:3e:88:79:a6:dd:
34:ec:d5:9f:56:43:d3:0d:3d:45:9b:61:3d:56:b0:a7:8c:bb:
77:36:e3:d3:61:e7:01:8a:40:1a:08:85:24:ed:b0:aa:23:4d:
db:f8:cc:53:e4:63:b5:0e:b8:f2:13:15:14:2b:70:f9:dc:60:
34:13:3f:ea:f8:a2:2a:3a:66:7e:9f:b8:2e:5d:bd:79:2a:40:
ac:30:2c:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFftFo5cDZzuyKDRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNTYzOVoXDTI1MDUwNTEyNTYzOVowLzEtMCsGA1UEAxMk
ZDk5NTU2MTQtNzRjMC00OTlmLWE5NDEtNTVlMjJiYjAzODJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxot3e/bkeaPfuELyy7dRBjwX5GnCNkl2vFSt
PHMjqbPglCcHWajQZqg05GuQw16TdtA/kpcv8m+s58cyq7LKiCxE8TZ1t25opYxz
I3+l4unzkbNVO8qJpiOstZCzrwCODBWFoTKRBiKfcyhMDzouIVTz0EJjUgtPjNgO
rf3bsYNMWL8hwzWjHebRieMJBgToyuz+sa8guG8S3fm3vFJcSw05CIPuQ1aZ2kFA
PLXAyHoyeFbeyuvhKrUO4mWNxKq57ZNb6rLSNoMQzxbfeQxA8CJ0g/jARhd63PXh
hIrNFK4sMctqf5uIagkF+khuJiiRyqN5k5nZ5yHymvR9+DYiCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3Mgg+wubIwpLKKu443OUcLaRH1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWU1MmU2MmUtOWQ0Zi0z
MzI3LTk4ZWYtNWE3MDFiODI4NWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRF4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHT05S95V7wh2WifQKH5asPuUItqa8a7FqKupHL3m0PC3hpE7DYN17yt
JO+lZ0mnCqxVSCOHYR10eN5EUTAuA0e3GcNm1fHcZdYjXogXUHOUWly0FIR3ikSw
spnI13uiePcyBwtz5JfQ6s4J7+ULNdF1O2ZVMrITuaHo9ybkiUxo5ZdsFyqchYjx
kYR1P+9fqpxj6k3/WEwz9lmkfJTAsi5W1g1A+mECshQsvWpzp5U+iHmm3TTs1Z9W
Q9MNPUWbYT1WsKeMu3c249Nh5wGKQBoIhSTtsKojTdv4zFPkY7UOuPITFRQrcPnc
YDQTP+r4oio6Zn6fuC5dvXkqQKwwLIA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:28 2025 by rpki-client