Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa
File: 959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa (raw, json)
Hash identifier: tBxm9CXUjV1/E3Z2GYwum4GeKMcqW/zdb+OMM9QBOXE=
Subject key identifier: 19:00:54:97:EE:07:DD:05:00:A9:8D:1B:BC:23:62:2C:5E:C8:38:81
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C26400515A7076D124760840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa
Signing time: Mon 03 Feb 2025 11:15:12 +0000
ROA not before: Mon 03 Feb 2025 11:15:12 +0000
ROA not after: Sun 04 May 2025 10:15:12 +0000
asID: 30036
IP address blocks: 173.29.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:00:51:5a:70:76:d1:24:76:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:15:12 2025 GMT
Not After : May 4 10:15:12 2025 GMT
Subject: CN=091a72fe-36f5-4a18-b1c3-a2209b8812fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:83:39:3b:2d:a2:b7:ad:91:bf:ab:1a:5e:
35:74:ac:c3:aa:a2:98:e3:4c:83:ac:5a:82:0a:0a:
4c:4d:c1:f3:bf:ff:a1:40:79:cd:26:56:54:48:7e:
15:76:11:8b:42:6e:fc:30:66:6b:6f:dc:82:66:26:
63:db:56:25:d3:ba:cc:f0:5c:3a:91:7a:1d:65:50:
54:9d:5f:12:59:67:a7:9a:57:21:84:23:6e:e2:e2:
61:f9:93:d4:d2:0c:2b:97:61:16:54:8d:38:40:3b:
4d:4e:33:75:22:cb:a5:e7:d8:34:9f:16:0c:06:89:
94:6a:ae:c6:ac:a3:f9:27:86:46:61:b2:ee:17:2d:
21:96:b2:e7:15:8a:20:d4:5d:d8:21:3c:88:17:4a:
d4:bf:58:23:c7:43:85:95:0d:f4:80:7d:01:05:de:
8d:7b:44:96:8e:fa:05:f0:86:9b:07:7d:0c:9f:0c:
7c:8a:89:6a:b2:05:01:5b:7b:54:93:5e:2c:11:d5:
df:2a:61:d0:60:08:75:70:0c:5d:51:40:9a:f1:af:
92:31:4a:41:bb:de:88:f5:94:eb:c5:66:ee:a6:1e:
ad:0b:90:38:c1:11:16:6d:63:23:d1:f9:be:32:41:
c1:d3:5b:ee:92:63:3e:0f:42:c5:bd:21:6b:f4:8d:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:54:97:EE:07:DD:05:00:A9:8D:1B:BC:23:62:2C:5E:C8:38:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:81:65:49:72:0b:60:ad:b2:e2:6d:62:55:73:57:0f:02:3e:
9a:60:40:ec:2e:5c:a1:8a:ea:e2:56:5f:f4:92:b2:db:89:cc:
79:8b:0c:24:c3:4f:15:a9:ed:58:7e:de:d9:f0:f8:db:46:f9:
33:6e:af:8d:ae:76:e0:81:16:40:1b:52:d2:ba:d5:2f:93:db:
4c:7b:86:49:63:c9:48:8f:4c:74:25:3d:0a:84:bc:97:94:85:
9e:b4:6a:85:e3:ed:c6:1a:cd:79:44:6e:98:db:b3:7a:f6:ae:
94:c4:6e:b4:fb:9b:e0:be:83:be:77:42:74:c6:0d:54:43:ca:
a7:51:42:df:84:04:d0:40:a0:23:b2:6c:48:ca:e7:5b:bb:02:
8d:c5:13:61:bf:1c:60:a6:85:f6:b3:87:93:2e:26:3a:08:3e:
b0:8d:64:7e:f8:58:4b:cf:da:5a:30:f1:b6:81:f7:77:6b:ec:
0d:c9:c4:3b:f6:c8:f4:b5:da:72:52:47:b6:44:3f:f5:4e:bd:
83:98:04:da:a9:f6:7c:6d:bd:4b:c9:23:6a:10:53:4d:66:82:
a0:5b:d1:43:72:87:9e:f1:3b:75:e0:84:72:6e:4a:bb:9f:79:
33:e6:96:8c:31:39:85:37:7d:dd:6a:69:36:ee:aa:48:cd:d9:
3c:22:1c:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCZABRWnB20SR2CEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTUxMloXDTI1MDUwNDEwMTUxMlowLzEtMCsGA1UEAxMk
MDkxYTcyZmUtMzZmNS00YTE4LWIxYzMtYTIyMDliODgxMmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXmDOTstoretkb+rGl41dKzDqqKY40yDrFqC
CgpMTcHzv/+hQHnNJlZUSH4VdhGLQm78MGZrb9yCZiZj21Yl07rM8Fw6kXodZVBU
nV8SWWenmlchhCNu4uJh+ZPU0gwrl2EWVI04QDtNTjN1Isul59g0nxYMBomUaq7G
rKP5J4ZGYbLuFy0hlrLnFYog1F3YITyIF0rUv1gjx0OFlQ30gH0BBd6Ne0SWjvoF
8IabB30Mnwx8iolqsgUBW3tUk14sEdXfKmHQYAh1cAxdUUCa8a+SMUpBu96I9ZTr
xWbuph6tC5A4wREWbWMj0fm+MkHB01vukmM+D0LFvSFr9I3S+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBkAVJfuB90FAKmNG7wjYixeyDiBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTU5YThjYzEtNGIzOC0z
MWEyLTg5YTQtZmU2YTQ4NDU0MmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuBZUlyC2CtsuJtYlVzVw8CPppgQOwuXKGK6uJWX/SSstuJzHmLDCTD
TxWp7Vh+3tnw+NtG+TNur42uduCBFkAbUtK61S+T20x7hkljyUiPTHQlPQqEvJeU
hZ60aoXj7cYazXlEbpjbs3r2rpTEbrT7m+C+g753QnTGDVRDyqdRQt+EBNBAoCOy
bEjK51u7Ao3FE2G/HGCmhfazh5MuJjoIPrCNZH74WEvP2low8baB93dr7A3JxDv2
yPS12nJSR7ZEP/VOvYOYBNqp9nxtvUvJI2oQU01mgqBb0UNyh57xO3XghHJuSruf
eTPmlowxOYU3fd1qaTbuqkjN2TwiHPU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:32 2025 by rpki-client