Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99bebc2c-db45-3f43-a3b3-00e796fb4859.roa
File: 99bebc2c-db45-3f43-a3b3-00e796fb4859.roa (raw, json)
Hash identifier: j0rvopV2gMBw+nJLwSyknDt4Y4BYyX+62PQpKfZScjA=
Subject key identifier: F5:D9:3E:DB:D6:4F:F8:6A:B0:68:FE:3E:5A:B5:37:75:5D:36:83:28
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F792A928C18AE5E0D316C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99bebc2c-db45-3f43-a3b3-00e796fb4859.roa
Signing time: Wed 05 Feb 2025 11:11:35 +0000
ROA not before: Wed 05 Feb 2025 11:11:35 +0000
ROA not after: Tue 06 May 2025 10:11:35 +0000
asID: 30036
IP address blocks: 173.28.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:92:a9:28:c1:8a:e5:e0:d3:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:11:35 2025 GMT
Not After : May 6 10:11:35 2025 GMT
Subject: CN=865050c9-6e05-4a02-a3d5-bed08e4d8d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:16:3a:99:9f:b6:e3:1f:4d:6a:70:c0:4d:
88:36:9b:f0:85:3b:34:ae:d5:48:ec:66:89:84:bc:
c8:dc:57:0a:f8:53:d0:52:69:08:1e:88:f7:86:01:
89:52:ce:4d:68:9a:8c:d6:98:eb:d7:51:02:fe:7e:
81:71:a7:1b:6f:e8:91:24:31:44:79:ca:24:70:e5:
85:e5:9b:37:d4:e9:31:2b:f6:02:59:81:7b:9a:2d:
5d:c1:07:d6:73:7c:13:12:dc:5d:86:d4:ce:d6:da:
6d:92:fd:eb:44:95:9e:31:c7:c0:f0:db:70:a6:f8:
51:c8:ef:f8:bc:d8:ab:60:02:0d:3a:3a:53:03:22:
c0:0d:7b:fc:70:14:1e:56:cc:5e:09:92:72:7b:26:
30:f2:d5:ec:3d:49:6c:ba:91:11:01:11:3e:3c:84:
19:ee:1b:9f:76:37:8b:3e:23:dc:dc:f1:36:14:e5:
4c:50:7b:7b:24:42:8e:e0:da:d0:7c:2f:1f:78:19:
b6:ea:9c:8a:ab:5f:46:df:97:13:5a:f0:b4:43:d5:
38:9e:60:05:42:33:ad:67:f2:83:a9:3a:b3:93:84:
0a:fa:f2:a8:f1:4f:fe:9d:ca:9b:98:65:46:46:5f:
20:3c:9b:34:12:a2:7c:d1:bf:fd:c8:a2:91:10:ea:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D9:3E:DB:D6:4F:F8:6A:B0:68:FE:3E:5A:B5:37:75:5D:36:83:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99bebc2c-db45-3f43-a3b3-00e796fb4859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:47:51:71:0e:a0:d1:e3:2d:c0:2f:82:bf:fa:6e:e0:ab:b7:
b2:dc:2e:45:4f:c3:f4:66:4c:2d:23:fa:53:59:5e:1a:8b:d4:
2b:bd:dc:f3:0d:bd:27:16:d0:91:50:27:03:fd:c9:cf:08:8a:
17:75:2f:ea:12:f7:81:b5:fd:92:65:65:3a:b8:7d:8e:5e:51:
0f:f5:47:43:5a:b0:57:2d:0b:a6:b1:e7:77:a7:5a:f1:88:e6:
be:0f:4f:98:8f:7b:fb:bd:c1:49:7e:0e:ef:83:81:6d:6b:f1:
bf:60:df:fa:4d:72:04:91:f8:f8:be:19:1e:7e:0c:72:d5:6c:
da:c4:46:0d:c1:e0:90:6f:ba:93:ab:ba:b2:fd:51:10:6b:18:
04:68:0c:57:9c:c7:30:57:15:22:8a:1a:7c:b2:cd:51:f9:a0:
a2:f3:1c:be:15:78:45:13:a5:08:07:e6:b8:42:7b:8a:ea:2b:
77:f2:88:c6:b2:5f:49:05:9b:82:6d:5f:2d:98:02:37:12:dd:
dd:82:69:6d:df:23:a7:e8:81:85:03:6b:c4:2c:7c:65:35:62:
f1:e8:1d:ce:12:82:64:6a:f4:7a:5c:38:f3:73:db:b6:60:bb:
b9:0e:21:9a:44:09:e6:e3:b4:a9:5c:39:8b:a4:d5:4e:16:75:
04:e9:39:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH95KpKMGK5eDTFsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNTExMTEzNVoXDTI1MDUwNjEwMTEzNVowLzEtMCsGA1UEAxMk
ODY1MDUwYzktNmUwNS00YTAyLWEzZDUtYmVkMDhlNGQ4ZDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD0WOpmftuMfTWpwwE2INpvwhTs0rtVI7GaJ
hLzI3FcK+FPQUmkIHoj3hgGJUs5NaJqM1pjr11EC/n6Bcacbb+iRJDFEecokcOWF
5Zs31OkxK/YCWYF7mi1dwQfWc3wTEtxdhtTO1tptkv3rRJWeMcfA8NtwpvhRyO/4
vNirYAINOjpTAyLADXv8cBQeVsxeCZJyeyYw8tXsPUlsupERARE+PIQZ7hufdjeL
PiPc3PE2FOVMUHt7JEKO4NrQfC8feBm26pyKq19G35cTWvC0Q9U4nmAFQjOtZ/KD
qTqzk4QK+vKo8U/+ncqbmGVGRl8gPJs0EqJ80b/9yKKREOpWiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPXZPtvWT/hqsGj+Plq1N3VdNoMoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTliZWJjMmMtZGI0NS0z
ZjQzLWEzYjMtMDBlNzk2ZmI0ODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRw0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5HUXEOoNHjLcAvgr/6buCrt7LcLkVPw/RmTC0j+lNZXhqL1Cu93PMN
vScW0JFQJwP9yc8Iihd1L+oS94G1/ZJlZTq4fY5eUQ/1R0NasFctC6ax53enWvGI
5r4PT5iPe/u9wUl+Du+DgW1r8b9g3/pNcgSR+Pi+GR5+DHLVbNrERg3B4JBvupOr
urL9URBrGARoDFecxzBXFSKKGnyyzVH5oKLzHL4VeEUTpQgH5rhCe4rqK3fyiMay
X0kFm4JtXy2YAjcS3d2CaW3fI6fogYUDa8QsfGU1YvHoHc4SgmRq9HpcOPNz27Zg
u7kOIZpECebjtKlcOYuk1U4WdQTpOYQ=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:44 2025 by rpki-client