Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cac07a3-6995-30ed-b8d7-26a4f88de0a6.roa
File: 8cac07a3-6995-30ed-b8d7-26a4f88de0a6.roa (raw, json)
Hash identifier: fwU3FW8r1x57iXJ+JEuWlqJfS9CRdpI2d7kUv/E4baQ=
Subject key identifier: 0A:3A:2D:69:0E:9B:83:83:58:20:A1:3C:86:9F:36:82:66:63:DD:BC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C55F72D4010B049357849400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cac07a3-6995-30ed-b8d7-26a4f88de0a6.roa
Signing time: Tue 04 Feb 2025 12:53:27 +0000
ROA not before: Tue 04 Feb 2025 12:53:27 +0000
ROA not after: Mon 05 May 2025 11:53:27 +0000
asID: 30036
IP address blocks: 173.19.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:5f:72:d4:01:0b:04:93:57:84:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:53:27 2025 GMT
Not After : May 5 11:53:27 2025 GMT
Subject: CN=8df895a5-ceaa-40fb-8fea-9aff319725c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:2d:fc:36:10:44:4a:e3:ce:59:de:ae:29:
af:f5:18:53:09:a7:62:47:f8:19:48:9f:27:2e:e4:
d5:af:61:c1:be:93:36:c4:f9:44:87:0f:e3:01:dd:
6c:bf:06:8e:cd:cc:4b:87:bd:73:2c:9e:aa:a2:9d:
e9:af:8b:8e:2b:61:b9:73:01:cd:7c:09:af:e9:e0:
a6:06:10:63:9b:43:bf:e1:d4:fb:0a:d9:db:e9:03:
5c:de:ca:7a:32:67:f9:ba:d2:a4:b5:8e:57:08:b2:
ec:ff:b5:81:83:c8:79:0b:1a:a5:f4:7d:48:22:95:
d3:d2:fd:e2:d6:4a:e6:cc:2d:91:6a:a5:04:df:9c:
c3:8b:2e:3a:84:46:9d:d0:89:59:26:aa:80:cc:00:
92:e9:52:a0:ce:1c:32:e9:04:39:87:e7:68:37:f1:
46:f9:20:ba:28:a4:4f:25:b4:17:a9:99:82:ea:60:
1a:b8:ed:3d:80:a4:ec:28:d5:b5:fb:24:3a:f1:80:
ff:50:9a:85:2b:20:f7:28:90:cb:a4:e1:c8:33:85:
a5:ce:85:6e:20:cc:88:96:a2:09:ff:e4:5f:9b:37:
a4:f2:db:23:8e:94:cd:de:bb:63:90:d8:4c:7d:3c:
62:5e:71:7c:9e:4e:9a:44:b5:29:71:a6:f2:62:4b:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3A:2D:69:0E:9B:83:83:58:20:A1:3C:86:9F:36:82:66:63:DD:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cac07a3-6995-30ed-b8d7-26a4f88de0a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:fc:b7:ac:70:f7:85:42:cc:76:4c:3d:ae:4e:c7:06:eb:e2:
bd:6e:99:06:73:48:e2:ce:21:03:d5:36:93:6d:32:9b:4c:0f:
dc:38:a0:69:9b:48:a7:b1:12:5e:54:b1:be:ab:61:4f:b2:46:
09:1e:f3:0a:30:54:ed:3f:35:c3:e2:97:a6:3d:d6:2f:49:91:
7a:9a:d8:87:8f:4c:be:b9:b2:69:39:c4:e9:d7:4a:4c:89:2d:
ce:87:9e:d2:aa:fc:3b:72:15:0c:39:16:22:2c:13:1f:a1:7d:
94:00:3a:e7:d1:62:99:e5:26:71:55:59:ee:fc:a6:09:6f:0a:
c0:40:49:d2:0e:e5:aa:b5:52:62:8a:91:60:1b:81:53:2d:a8:
48:70:dd:f4:a8:91:83:d8:66:a4:79:73:2c:cd:5c:63:5c:fb:
bd:4e:da:87:8a:fa:f2:e1:79:13:d6:b8:79:90:fc:22:bd:ad:
1e:86:50:17:6f:96:29:75:b0:1f:2c:75:e1:1b:13:22:a8:f1:
87:75:75:50:4c:20:49:6b:b2:e8:64:dc:e5:13:11:ff:1e:c8:
49:7c:a4:17:76:95:a8:f0:54:3d:7b:06:93:c8:36:a8:32:ca:
13:29:f1:4c:08:c8:e2:6f:ef:65:f4:28:fc:77:75:c0:17:d2:
1f:4b:3a:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFX3LUAQsEk1eElAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEyNTMyN1oXDTI1MDUwNTExNTMyN1owLzEtMCsGA1UEAxMk
OGRmODk1YTUtY2VhYS00MGZiLThmZWEtOWFmZjMxOTcyNWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLwt/DYQRErjzlnerimv9RhTCadiR/gZSJ8n
LuTVr2HBvpM2xPlEhw/jAd1svwaOzcxLh71zLJ6qop3pr4uOK2G5cwHNfAmv6eCm
BhBjm0O/4dT7Ctnb6QNc3sp6Mmf5utKktY5XCLLs/7WBg8h5Cxql9H1IIpXT0v3i
1krmzC2RaqUE35zDiy46hEad0IlZJqqAzACS6VKgzhwy6QQ5h+doN/FG+SC6KKRP
JbQXqZmC6mAauO09gKTsKNW1+yQ68YD/UJqFKyD3KJDLpOHIM4WlzoVuIMyIlqIJ
/+Rfmzek8tsjjpTN3rtjkNhMfTxiXnF8nk6aRLUpcabyYktcGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAo6LWkOm4ODWCChPIafNoJmY928MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGNhYzA3YTMtNjk5NS0z
MGVkLWI4ZDctMjZhNGY4OGRlMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEr8t6xw94VCzHZMPa5Oxwbr4r1umQZzSOLOIQPVNpNtMptMD9w4oGmb
SKexEl5Usb6rYU+yRgke8wowVO0/NcPil6Y91i9JkXqa2IePTL65smk5xOnXSkyJ
Lc6HntKq/DtyFQw5FiIsEx+hfZQAOufRYpnlJnFVWe78pglvCsBASdIO5aq1UmKK
kWAbgVMtqEhw3fSokYPYZqR5cyzNXGNc+71O2oeK+vLheRPWuHmQ/CK9rR6GUBdv
lil1sB8sdeEbEyKo8Yd1dVBMIElrsuhk3OUTEf8eyEl8pBd2lajwVD17BpPINqgy
yhMp8UwIyOJv72X0KPx3dcAX0h9LOlg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:21 2025 by rpki-client