Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa
File: 845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa (raw, json)
Hash identifier: SqzDFB1mRPI5w8Ksms9/ZzZDBBhZxyY9oadxNj51weM=
Subject key identifier: 03:68:4D:2B:8C:8D:AC:66:58:38:BA:17:D4:03:6B:D3:13:F0:C9:F7
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C53268B4DA34038421C76D40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa
Signing time: Tue 04 Feb 2025 11:22:42 +0000
ROA not before: Tue 04 Feb 2025 11:22:42 +0000
ROA not after: Mon 05 May 2025 10:22:42 +0000
asID: 30036
IP address blocks: 173.21.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:32:68:b4:da:34:03:84:21:c7:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:22:42 2025 GMT
Not After : May 5 10:22:42 2025 GMT
Subject: CN=855d6beb-7f97-4150-8a26-9f04f8756a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:94:b4:a8:fb:d3:cf:af:83:b9:6a:c7:67:
81:f9:50:2d:18:23:1f:c8:24:51:68:6f:ea:80:43:
48:eb:b5:c1:94:bf:de:8d:f2:ac:1c:42:ad:f3:02:
4a:09:42:19:be:25:49:56:4c:b0:04:d1:2c:ca:4a:
12:a5:19:6b:0d:0c:90:f5:45:d4:45:b2:a9:25:3e:
c7:07:46:bb:86:96:b0:c7:16:8f:dd:96:3d:7c:b1:
d2:bc:6f:cb:06:02:62:3b:19:aa:3d:87:6a:b0:18:
1f:ad:fa:93:ed:3d:d1:05:c9:49:cb:1c:d0:0c:ab:
a6:18:56:01:d0:26:fd:68:c2:11:11:d0:ca:85:45:
f3:64:dd:37:9f:e3:17:f8:4b:bf:b4:64:7a:58:29:
94:13:18:03:80:ca:cd:e2:11:bb:ae:00:2e:1b:f1:
d7:a9:7c:8b:e9:2a:a0:aa:e8:a7:13:07:e9:64:07:
72:15:e2:7b:fe:97:18:01:2d:f6:96:54:0a:b0:e1:
90:46:5b:00:99:6c:b2:f2:d9:8f:52:35:32:21:e5:
ef:cc:73:03:04:db:26:c0:74:3e:91:0a:5b:98:36:
3f:34:30:6f:40:eb:af:16:8c:c3:6d:6e:7d:71:75:
27:46:0f:53:ff:b5:d7:d1:05:71:91:8a:76:05:6a:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:68:4D:2B:8C:8D:AC:66:58:38:BA:17:D4:03:6B:D3:13:F0:C9:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2f:46:1f:72:3b:01:82:be:e5:b4:d0:3c:3e:9b:22:37:e4:
da:d2:cc:12:c3:23:04:f6:ac:ff:29:1c:85:f8:10:07:d5:09:
c7:ca:d8:fb:f1:b6:d9:ff:fb:10:09:e5:f0:c1:18:c4:46:08:
59:e6:c1:25:18:0a:d1:72:02:ea:5b:b1:45:45:51:dd:c1:77:
75:2d:80:c8:45:bd:75:18:24:9f:77:99:74:f1:1f:90:08:38:
61:ff:29:7e:ef:38:16:51:ba:ab:cb:b9:5a:27:d1:46:0e:5c:
bc:23:87:07:66:fa:9c:96:eb:d4:eb:12:62:d0:a6:9c:16:7a:
fb:db:fa:09:35:6f:e1:69:0b:3b:52:2b:0b:f1:b5:f9:c0:f8:
02:e1:50:c6:c6:f2:fd:95:94:00:a9:a6:74:fd:0a:62:4a:3e:
1d:45:4d:1b:03:dd:d8:f1:2e:0b:52:47:37:76:eb:09:9c:f9:
4d:7e:41:1e:64:96:62:f1:ed:0a:31:09:29:ff:59:e8:56:28:
ac:f8:26:76:27:88:f5:84:e4:7a:00:0f:c8:67:54:d1:ed:37:
35:e7:b4:7d:80:49:c0:28:73:07:9e:95:5c:91:db:fe:f6:5f:
82:6a:8f:b3:7c:e1:97:18:e5:17:ef:18:3a:47:b4:9c:57:39:
c4:1b:19:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFMmi02jQDhCHHbUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDExMjI0MloXDTI1MDUwNTEwMjI0MlowLzEtMCsGA1UEAxMk
ODU1ZDZiZWItN2Y5Ny00MTUwLThhMjYtOWYwNGY4NzU2YTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvmUtKj708+vg7lqx2eB+VAtGCMfyCRRaG/q
gENI67XBlL/ejfKsHEKt8wJKCUIZviVJVkywBNEsykoSpRlrDQyQ9UXURbKpJT7H
B0a7hpawxxaP3ZY9fLHSvG/LBgJiOxmqPYdqsBgfrfqT7T3RBclJyxzQDKumGFYB
0Cb9aMIREdDKhUXzZN03n+MX+Eu/tGR6WCmUExgDgMrN4hG7rgAuG/HXqXyL6Sqg
quinEwfpZAdyFeJ7/pcYAS32llQKsOGQRlsAmWyy8tmPUjUyIeXvzHMDBNsmwHQ+
kQpbmDY/NDBvQOuvFozDbW59cXUnRg9T/7XX0QVxkYp2BWoSbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFANoTSuMjaxmWDi6F9QDa9MT8Mn3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODQ1ODQwZjgtYTNlZC0z
ZDY3LWFjZTMtMTBiMTNlOWM0N2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRWIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEovRh9yOwGCvuW00Dw+myI35NrSzBLDIwT2rP8pHIX4EAfVCcfK2Pvx
ttn/+xAJ5fDBGMRGCFnmwSUYCtFyAupbsUVFUd3Bd3UtgMhFvXUYJJ93mXTxH5AI
OGH/KX7vOBZRuqvLuVon0UYOXLwjhwdm+pyW69TrEmLQppwWevvb+gk1b+FpCztS
KwvxtfnA+ALhUMbG8v2VlACppnT9CmJKPh1FTRsD3djxLgtSRzd26wmc+U1+QR5k
lmLx7QoxCSn/WehWKKz4JnYniPWE5HoAD8hnVNHtNzXntH2AScAocweelVyR2/72
X4Jqj7N84ZcY5RfvGDpHtJxXOcQbGd0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:34 2025 by rpki-client