Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c1823e1-d3c5-3c7a-8a02-746fbc697a18.roa
File: 9c1823e1-d3c5-3c7a-8a02-746fbc697a18.roa (raw, json)
Hash identifier: /kIgSlHFWWH7oKdJWTOB5/Zy6lsLlCi/NHmWXyjQ83Q=
Subject key identifier: C6:A8:B6:D3:EE:55:5E:69:A4:7D:47:2D:B7:E7:7A:00:20:D1:CB:08
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849410671F38FDAB627DA7D9C40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c1823e1-d3c5-3c7a-8a02-746fbc697a18.roa
Signing time: Thu 20 Mar 2025 19:54:21 +0000
ROA not before: Thu 20 Mar 2025 19:54:21 +0000
ROA not after: Wed 18 Jun 2025 19:54:21 +0000
asID: 30036
IP address blocks: 173.19.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:06:71:f3:8f:da:b6:27:da:7d:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 20 19:54:21 2025 GMT
Not After : Jun 18 19:54:21 2025 GMT
Subject: CN=7f1d6854-e5cc-433a-a0fe-2a3e51a6729e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:a6:f7:01:d8:35:c4:b1:ba:f8:3f:42:ad:
3f:b1:8a:c3:1e:16:8a:b9:05:39:2f:b9:8e:19:08:
6d:6f:8a:61:1c:21:6f:55:5e:2f:6b:4c:c1:bf:af:
c2:c7:55:7e:34:bb:53:41:60:77:d0:91:88:08:1b:
f8:89:0b:d4:ac:d9:f2:00:0e:bf:18:6a:d3:0d:2a:
00:9a:db:72:c8:c1:80:8c:e4:0f:62:65:e0:6c:f2:
9c:7a:e0:69:41:63:a0:48:2d:20:aa:b7:68:4a:e2:
76:bc:50:bf:9f:72:0b:29:bf:ed:9d:70:8a:d2:3a:
36:04:e1:f1:bc:cb:66:a4:dc:a4:76:a0:10:d3:ba:
b3:5d:a1:8d:5b:a2:cc:87:26:89:24:40:17:f9:f3:
a3:29:dd:bb:97:ad:d6:dc:29:45:70:3d:3b:f0:00:
41:f7:92:a1:a7:64:b3:11:88:5d:59:84:0b:a1:0b:
93:f0:f6:0e:11:c6:cc:53:45:b3:ab:2b:1f:95:ed:
69:f7:ea:c2:97:77:2e:66:4d:dc:87:7f:8d:65:1b:
d0:70:a4:ef:af:c7:c3:21:31:f6:24:df:2b:cc:05:
db:67:8e:61:17:db:c1:b5:ee:fe:46:f4:d1:74:4b:
d9:e7:d0:48:cc:1e:d9:03:20:6e:29:f9:fd:75:f5:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A8:B6:D3:EE:55:5E:69:A4:7D:47:2D:B7:E7:7A:00:20:D1:CB:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c1823e1-d3c5-3c7a-8a02-746fbc697a18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:04:e8:4b:8e:10:c9:97:37:07:ab:53:6a:28:5a:7f:29:21:
14:12:d7:eb:bb:95:18:07:e5:03:c6:5b:80:73:35:58:39:75:
fc:28:c7:a4:50:8a:2a:2a:ed:f3:58:b6:36:59:d5:cf:d1:68:
ad:f2:33:1c:85:a6:c3:08:13:81:91:bc:47:b5:ea:ba:48:bb:
f0:29:f0:1e:6f:ee:9c:6b:b1:7a:85:59:a3:7e:8d:53:41:9a:
4c:2a:12:ed:34:25:38:7f:8b:51:4d:53:e6:89:ea:b6:72:63:
e7:4a:ee:cd:34:25:ca:d4:6f:cc:9c:8b:31:ca:53:0a:33:8e:
27:3b:a0:df:3c:95:a9:ab:6a:80:6d:aa:db:36:79:0d:27:3a:
08:1c:fa:ea:cc:ce:46:2b:a6:18:01:39:19:ba:d5:32:aa:c9:
dc:c4:03:21:f5:20:c6:08:99:c3:ab:b3:47:fb:a4:5a:77:23:
89:f6:31:1c:26:f8:09:15:f9:ac:51:4c:1c:1a:24:07:54:cf:
69:11:ea:ab:bf:75:7c:6e:9f:79:d8:3e:fd:d8:a7:63:d3:b3:
39:54:8a:a9:b7:ca:ef:b0:80:59:b5:6f:a2:44:c3:e8:d8:87:
b1:33:a6:12:bd:6f:87:3e:99:75:5a:6e:44:1a:dc:1e:b8:f6:
3f:b1:29:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBBnHzj9q2J9p9nEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDMyMDE5NTQyMVoXDTI1MDYxODE5NTQyMVowLzEtMCsGA1UEAxMk
N2YxZDY4NTQtZTVjYy00MzNhLWEwZmUtMmEzZTUxYTY3MjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYCm9wHYNcSxuvg/Qq0/sYrDHhaKuQU5L7mO
GQhtb4phHCFvVV4va0zBv6/Cx1V+NLtTQWB30JGICBv4iQvUrNnyAA6/GGrTDSoA
mttyyMGAjOQPYmXgbPKceuBpQWOgSC0gqrdoSuJ2vFC/n3ILKb/tnXCK0jo2BOHx
vMtmpNykdqAQ07qzXaGNW6LMhyaJJEAX+fOjKd27l63W3ClFcD078ABB95Khp2Sz
EYhdWYQLoQuT8PYOEcbMU0Wzqysfle1p9+rCl3cuZk3ch3+NZRvQcKTvr8fDITH2
JN8rzAXbZ45hF9vBte7+RvTRdEvZ59BIzB7ZAyBuKfn9dfUojQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMaottPuVV5ppH1HLbfnegAg0csIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWMxODIzZTEtZDNjNS0z
YzdhLThhMDItNzQ2ZmJjNjk3YTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRNoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8E6EuOEMmXNwerU2ooWn8pIRQS1+u7lRgH5QPGW4BzNVg5dfwox6RQ
iioq7fNYtjZZ1c/RaK3yMxyFpsMIE4GRvEe16rpIu/Ap8B5v7pxrsXqFWaN+jVNB
mkwqEu00JTh/i1FNU+aJ6rZyY+dK7s00JcrUb8ycizHKUwozjic7oN88lamraoBt
qts2eQ0nOggc+urMzkYrphgBORm61TKqydzEAyH1IMYImcOrs0f7pFp3I4n2MRwm
+AkV+axRTBwaJAdUz2kR6qu/dXxun3nYPv3Yp2PTszlUiqm3yu+wgFm1b6JEw+jY
h7EzphK9b4c+mXVabkQa3B649j+xKeY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:16 2025 by rpki-client