Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9077aaf3-41de-39a0-a3b9-d65d07550107.roa
File: 9077aaf3-41de-39a0-a3b9-d65d07550107.roa (raw, json)
Hash identifier: /d8hEf6uqE4+buFbD5IGi+t6/p7GHyf5ocnDIxoMxpg=
Subject key identifier: 79:1A:F2:DD:98:91:5B:81:AB:61:AA:42:6C:C2:43:16:50:85:47:93
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C557E216DD85947F3F11DB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9077aaf3-41de-39a0-a3b9-d65d07550107.roa
Signing time: Tue 04 Feb 2025 12:38:12 +0000
ROA not before: Tue 04 Feb 2025 12:38:12 +0000
ROA not after: Mon 05 May 2025 11:38:12 +0000
asID: 30036
IP address blocks: 173.17.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:57:e2:16:dd:85:94:7f:3f:11:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:38:12 2025 GMT
Not After : May 5 11:38:12 2025 GMT
Subject: CN=78f574c3-074d-4255-a487-f9ef7b61f560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:8f:c2:bf:b2:0b:2b:10:4e:58:a1:7e:1f:
bb:a0:6a:c8:e7:aa:bd:be:51:73:67:df:df:19:ca:
0a:90:9f:08:91:be:c3:39:e7:88:ff:14:20:72:33:
73:a0:ae:87:0c:75:9b:31:9c:07:3c:65:a7:30:17:
3b:b0:9e:7c:28:1c:03:3f:5b:62:48:2c:dc:83:ed:
ef:cf:eb:f3:69:1a:3b:67:11:7a:8c:1e:4a:0b:f1:
a1:a7:65:34:b3:bc:44:e5:eb:26:95:62:0f:48:65:
98:24:0b:99:fc:eb:2c:2a:77:ea:3e:df:38:0e:5c:
44:ba:b9:34:29:c6:de:cd:8e:9e:29:54:13:26:6b:
6b:1f:c9:76:4b:90:f4:91:04:19:c7:b4:ed:61:71:
db:0d:e0:d5:46:97:5f:b8:7c:bb:ab:71:0f:a3:8f:
46:8c:fb:23:b4:99:f6:f1:31:ac:56:f1:d0:6a:24:
0d:fa:95:27:df:52:16:c4:90:fb:24:46:ab:24:de:
a8:ff:67:7f:73:6f:b1:aa:0b:8c:7e:38:47:f6:50:
d9:48:96:b4:3a:7e:30:58:22:f8:df:fc:c8:58:17:
12:81:73:a0:c2:70:03:31:2e:41:cb:55:9c:85:34:
aa:66:33:68:b7:11:a8:44:37:8e:42:7f:c7:67:7c:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1A:F2:DD:98:91:5B:81:AB:61:AA:42:6C:C2:43:16:50:85:47:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9077aaf3-41de-39a0-a3b9-d65d07550107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:42:2a:55:69:e4:6c:63:d0:f2:84:ea:39:8c:33:53:aa:99:
f7:28:ef:06:2e:c5:53:65:68:b5:32:2f:c6:dd:49:00:79:ae:
70:b2:71:4a:cd:68:9a:7f:e7:89:17:c2:ef:50:aa:74:87:21:
93:8b:92:95:e3:a3:c1:c0:0a:96:9a:c3:b4:22:ba:a4:db:dd:
ec:79:8f:44:22:a1:55:48:92:91:d5:75:a8:f2:bc:64:43:7f:
8e:79:3c:fb:eb:b9:82:5a:0f:20:86:54:e2:18:e8:1a:14:b6:
63:19:aa:bf:6f:ef:03:38:be:4e:e4:53:af:2a:e1:b2:fb:38:
86:dc:13:d6:ce:1b:bd:38:dd:28:76:5f:a8:0d:67:7c:33:c9:
cf:6e:50:3c:23:76:a9:a5:5f:b6:12:59:4a:f8:4b:dd:e4:f3:
88:52:18:20:e4:0c:d3:b2:a4:4d:d6:23:9a:ed:bb:2d:4b:ac:
fd:6f:0c:0c:c2:b5:15:03:11:c1:db:11:fb:06:cc:6a:67:48:
1b:5a:7b:df:3d:04:08:96:9c:b1:4f:a0:fc:ad:bb:5c:3d:0d:
da:66:f2:56:13:0e:e4:ce:30:f0:c1:16:59:53:a3:bc:3c:e0:
1f:6e:15:55:3a:36:5c:2b:08:7c:7f:cc:77:2a:4d:02:f8:31:
1b:31:e6:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFV+IW3YWUfz8R2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEyMzgxMloXDTI1MDUwNTExMzgxMlowLzEtMCsGA1UEAxMk
NzhmNTc0YzMtMDc0ZC00MjU1LWE0ODctZjllZjdiNjFmNTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLaPwr+yCysQTlihfh+7oGrI56q9vlFzZ9/f
GcoKkJ8Ikb7DOeeI/xQgcjNzoK6HDHWbMZwHPGWnMBc7sJ58KBwDP1tiSCzcg+3v
z+vzaRo7ZxF6jB5KC/Ghp2U0s7xE5esmlWIPSGWYJAuZ/OssKnfqPt84DlxEurk0
KcbezY6eKVQTJmtrH8l2S5D0kQQZx7TtYXHbDeDVRpdfuHy7q3EPo49GjPsjtJn2
8TGsVvHQaiQN+pUn31IWxJD7JEarJN6o/2d/c2+xqguMfjhH9lDZSJa0On4wWCL4
3/zIWBcSgXOgwnADMS5By1WchTSqZjNotxGoRDeOQn/HZ3znHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHka8t2YkVuBq2GqQmzCQxZQhUeTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTA3N2FhZjMtNDFkZS0z
OWEwLWEzYjktZDY1ZDA3NTUwMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBCKlVp5Gxj0PKE6jmMM1Oqmfco7wYuxVNlaLUyL8bdSQB5rnCycUrN
aJp/54kXwu9QqnSHIZOLkpXjo8HACpaaw7QiuqTb3ex5j0QioVVIkpHVdajyvGRD
f455PPvruYJaDyCGVOIY6BoUtmMZqr9v7wM4vk7kU68q4bL7OIbcE9bOG7043Sh2
X6gNZ3wzyc9uUDwjdqmlX7YSWUr4S93k84hSGCDkDNOypE3WI5rtuy1LrP1vDAzC
tRUDEcHbEfsGzGpnSBtae989BAiWnLFPoPytu1w9Ddpm8lYTDuTOMPDBFllTo7w8
4B9uFVU6NlwrCHx/zHcqTQL4MRsx5kw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:59:21 2025 by rpki-client