Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa
File: 9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa (raw, json)
Hash identifier: 0yrBk8vJ26JjjrCUhQ3IQdNbQtkZZ/qMpavvoI9I3yU=
Subject key identifier: 42:66:B7:28:C3:30:EC:84:4B:2D:06:C3:FE:F4:91:3E:32:04:18:6C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B7365423A2AB2D268689A2F0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa
Signing time: Thu 30 Jan 2025 11:09:17 +0000
ROA not before: Thu 30 Jan 2025 11:09:17 +0000
ROA not after: Wed 30 Apr 2025 10:09:17 +0000
asID: 30036
IP address blocks: 173.21.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:36:54:23:a2:ab:2d:26:86:89:a2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:09:17 2025 GMT
Not After : Apr 30 10:09:17 2025 GMT
Subject: CN=1e78407d-3177-4b40-8904-389bfe6caff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:b4:12:80:7f:7b:67:3f:cb:d4:ad:01:f3:
63:dc:f4:18:ce:ec:d7:fb:8b:5e:56:ce:ed:a9:32:
bd:23:6d:16:e3:94:5b:59:72:f5:e3:73:11:48:df:
73:42:09:a3:72:a5:7d:06:4f:86:08:91:e6:24:1d:
5e:46:cd:86:23:c0:c1:2f:2a:93:68:cd:c1:fa:8c:
5b:31:cb:81:a6:5e:5f:f3:74:f7:4e:93:85:14:79:
8a:2a:1a:3f:b0:e7:be:c5:42:c6:27:8f:f5:1f:82:
0a:29:22:84:82:12:bc:d1:08:eb:c5:65:92:d4:2c:
65:2d:49:aa:25:bc:6b:b6:ba:bd:ee:c4:73:51:72:
bf:26:71:e9:36:c3:3b:64:31:89:cd:bd:7b:4c:26:
b9:a3:a7:86:ac:c5:b8:14:e1:da:58:78:fd:49:7a:
da:2d:e3:8e:35:04:0d:ca:ed:1f:7f:6e:83:d2:ea:
cc:83:07:b0:ba:ca:f3:39:6f:29:9d:58:c9:77:20:
27:fe:ea:d2:c0:32:d2:79:03:40:3f:cf:30:34:e6:
89:eb:27:91:67:c2:24:24:de:99:2c:79:93:31:51:
80:52:a8:59:ea:7d:67:a3:0e:5a:b1:67:dc:7d:02:
48:8d:22:1b:98:c0:7d:93:dd:e1:55:8b:14:99:0b:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:66:B7:28:C3:30:EC:84:4B:2D:06:C3:FE:F4:91:3E:32:04:18:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:99:3c:a0:a9:ac:8f:74:4c:4f:a1:cc:e5:11:d5:60:fd:e6:
c5:da:48:fe:bd:ae:58:73:1e:7b:54:61:52:38:d8:b0:a7:fd:
0c:4b:08:df:62:0c:e3:79:b9:54:02:f2:d1:cd:dd:5e:d0:df:
8f:41:c3:ff:d0:7d:58:5a:00:82:f8:e6:ff:a4:54:11:35:bd:
32:79:f9:d9:72:7f:94:52:30:8c:46:45:0f:90:7d:07:ad:e3:
f9:27:a7:bf:e3:ab:dc:0b:8f:ac:97:cc:8b:39:2b:9d:da:fc:
a8:cc:2e:16:a5:91:7c:05:a6:e4:6b:5e:e6:82:a0:77:c1:5a:
6f:27:9b:3c:f9:bd:7b:36:ee:84:84:df:f6:82:b2:9b:fc:be:
b2:8c:b3:e7:18:7a:3b:a0:3e:19:c0:4c:1d:b2:c8:1f:b9:4a:
d3:21:87:76:c3:80:8e:06:3e:5d:47:23:df:22:a1:02:48:c9:
cc:05:0d:9d:33:cc:10:e4:6a:82:78:ea:c8:40:83:2d:bf:13:
59:3a:2e:46:c7:a6:4b:df:33:07:27:c5:33:64:83:12:44:8d:
68:fa:0b:59:e9:57:ba:d6:c2:b7:1c:da:9f:03:cd:ab:a1:52:
30:e4:99:77:8a:cb:6b:8c:19:50:12:25:a4:4f:6b:51:99:c9:
c2:5b:90:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NlQjoqstJoaJovAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDEzMDExMDkxN1oXDTI1MDQzMDEwMDkxN1owLzEtMCsGA1UEAxMk
MWU3ODQwN2QtMzE3Ny00YjQwLTg5MDQtMzg5YmZlNmNhZmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxa0EoB/e2c/y9StAfNj3PQYzuzX+4teVs7t
qTK9I20W45RbWXL143MRSN9zQgmjcqV9Bk+GCJHmJB1eRs2GI8DBLyqTaM3B+oxb
McuBpl5f83T3TpOFFHmKKho/sOe+xULGJ4/1H4IKKSKEghK80QjrxWWS1CxlLUmq
Jbxrtrq97sRzUXK/JnHpNsM7ZDGJzb17TCa5o6eGrMW4FOHaWHj9SXraLeOONQQN
yu0ff26D0urMgwewusrzOW8pnVjJdyAn/urSwDLSeQNAP88wNOaJ6yeRZ8IkJN6Z
LHmTMVGAUqhZ6n1now5asWfcfQJIjSIbmMB9k93hVYsUmQtk/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJmtyjDMOyESy0Gw/70kT4yBBhsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWJkNjdiMzYtOGI4YS0z
NzMyLWJkOWYtMmVmZThlMmFiNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKZPKCprI90TE+hzOUR1WD95sXaSP69rlhzHntUYVI42LCn/QxLCN9i
DON5uVQC8tHN3V7Q349Bw//QfVhaAIL45v+kVBE1vTJ5+dlyf5RSMIxGRQ+QfQet
4/knp7/jq9wLj6yXzIs5K53a/KjMLhalkXwFpuRrXuaCoHfBWm8nmzz5vXs27oSE
3/aCspv8vrKMs+cYejugPhnATB2yyB+5StMhh3bDgI4GPl1HI98ioQJIycwFDZ0z
zBDkaoJ46shAgy2/E1k6LkbHpkvfMwcnxTNkgxJEjWj6C1npV7rWwrcc2p8Dzauh
UjDkmXeKy2uMGVASJaRPa1GZycJbkAc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:45 2025 by rpki-client