Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d44f2ce-1866-3716-8267-16aa02f5a02c.roa
File: 8d44f2ce-1866-3716-8267-16aa02f5a02c.roa (raw, json)
Hash identifier: 7rYbIxEpJ2oba45N/ulCyxggt7sEVgeBiidc68F47s8=
Subject key identifier: 4D:A5:6C:C4:A6:24:00:65:BC:1B:66:F8:73:5B:77:F6:0D:3F:0D:6D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57E0730FB0ED685C1FC8C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d44f2ce-1866-3716-8267-16aa02f5a02c.roa
Signing time: Tue 04 Feb 2025 13:55:04 +0000
ROA not before: Tue 04 Feb 2025 13:55:04 +0000
ROA not after: Mon 05 May 2025 12:55:04 +0000
asID: 30036
IP address blocks: 173.24.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7e:07:30:fb:0e:d6:85:c1:fc:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:55:04 2025 GMT
Not After : May 5 12:55:04 2025 GMT
Subject: CN=ddb72d46-03b6-47f4-ac2a-3d3b5fa0431c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:38:2e:62:6e:36:bb:c0:f7:04:30:aa:e9:69:
27:20:11:34:3f:83:ce:97:04:29:69:03:0c:67:ba:
a8:d7:7c:55:b1:fb:85:67:e7:9d:79:c8:a1:bb:22:
41:2d:69:60:e4:51:be:55:32:28:d6:64:9d:c8:57:
92:5d:26:1f:e8:a4:68:75:92:a7:0d:c0:39:40:c8:
dc:e6:55:5b:d1:bb:9b:e3:0d:66:9a:1f:6f:94:8a:
71:d0:51:a8:b3:25:ef:1e:65:4d:0d:54:6e:c7:6d:
2f:bf:15:d9:4a:f2:f8:28:96:65:2b:d9:22:ff:31:
38:61:bb:50:73:73:fe:e8:dc:2b:2f:13:f7:06:28:
19:16:52:f4:f1:4e:a7:58:6d:65:11:e0:78:62:b1:
0c:55:39:0f:b7:d6:84:0f:e6:84:52:91:5d:4e:b0:
e1:8d:32:d8:b7:34:66:94:49:a0:63:41:c6:27:de:
62:3c:aa:a7:c9:95:47:e3:70:38:7a:3f:d1:f6:f8:
f1:ed:7c:a2:29:d7:ee:2e:60:2b:00:c4:19:a9:df:
49:b4:3e:2c:65:fb:45:df:b8:c5:37:41:74:d9:6e:
ea:79:c7:5c:27:27:b1:d5:d4:11:1e:ba:de:62:ae:
69:49:fb:61:fc:40:c7:e6:5d:a7:c3:22:10:e4:f9:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:6C:C4:A6:24:00:65:BC:1B:66:F8:73:5B:77:F6:0D:3F:0D:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d44f2ce-1866-3716-8267-16aa02f5a02c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:80:a1:3f:01:f4:6a:b7:8f:0c:c7:4e:67:a4:b6:23:73:05:
3f:a6:37:17:78:99:23:72:32:4a:68:d8:bb:8f:f4:88:4c:18:
de:7f:78:38:0e:70:d8:0b:83:16:a9:32:17:8b:55:8c:09:44:
c3:97:77:2b:b3:dd:44:b2:8e:39:7d:4c:00:a7:cd:bd:a7:3f:
58:ab:fe:d6:fa:21:a8:0c:6d:1b:ef:a7:91:d6:ed:c1:7a:8e:
67:15:b1:9c:f9:5a:71:43:26:88:70:8d:f9:89:a2:46:92:2b:
50:c7:68:4f:c7:85:b2:92:88:eb:f2:18:f8:4a:7d:e7:38:94:
87:f2:cd:dc:07:81:03:04:77:be:58:c6:bd:f7:f3:95:29:13:
0f:b9:45:c7:dc:27:d9:bf:c2:46:8a:54:6c:23:7c:fd:90:07:
b4:b6:01:28:2a:6b:b6:0e:41:83:6d:95:76:0a:f7:51:f5:72:
8a:4a:1f:4d:f1:a1:48:d2:43:3a:80:5e:79:1e:96:e8:92:86:
c2:a2:9b:9a:3f:a0:6c:d3:ce:64:e6:bc:16:69:f8:ac:1d:b6:
e1:e1:f8:43:bc:2a:09:06:22:8c:f5:f8:42:bb:9e:79:86:e4:
48:59:19:ff:80:a2:8f:a2:5a:2c:20:49:2c:e1:2e:b1:eb:5c:
eb:b8:cc:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfgcw+w7WhcH8jAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNTUwNFoXDTI1MDUwNTEyNTUwNFowLzEtMCsGA1UEAxMk
ZGRiNzJkNDYtMDNiNi00N2Y0LWFjMmEtM2QzYjVmYTA0MzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDguYm42u8D3BDCq6WknIBE0P4POlwQpaQMM
Z7qo13xVsfuFZ+edecihuyJBLWlg5FG+VTIo1mSdyFeSXSYf6KRodZKnDcA5QMjc
5lVb0bub4w1mmh9vlIpx0FGosyXvHmVNDVRux20vvxXZSvL4KJZlK9ki/zE4YbtQ
c3P+6NwrLxP3BigZFlL08U6nWG1lEeB4YrEMVTkPt9aED+aEUpFdTrDhjTLYtzRm
lEmgY0HGJ95iPKqnyZVH43A4ej/R9vjx7XyiKdfuLmArAMQZqd9JtD4sZftF37jF
N0F02W7qecdcJyex1dQRHrreYq5pSfth/EDH5l2nwyIQ5PkDowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2lbMSmJABlvBtm+HNbd/YNPw1tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGQ0NGYyY2UtMTg2Ni0z
NzE2LTgyNjctMTZhYTAyZjVhMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRiMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+AoT8B9Gq3jwzHTmektiNzBT+mNxd4mSNyMkpo2LuP9IhMGN5/eDgO
cNgLgxapMheLVYwJRMOXdyuz3USyjjl9TACnzb2nP1ir/tb6IagMbRvvp5HW7cF6
jmcVsZz5WnFDJohwjfmJokaSK1DHaE/HhbKSiOvyGPhKfec4lIfyzdwHgQMEd75Y
xr3385UpEw+5RcfcJ9m/wkaKVGwjfP2QB7S2ASgqa7YOQYNtlXYK91H1copKH03x
oUjSQzqAXnkeluiShsKim5o/oGzTzmTmvBZp+KwdtuHh+EO8KgkGIoz1+EK7nnmG
5EhZGf+Aoo+iWiwgSSzhLrHrXOu4zFg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:26 2025 by rpki-client