Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c7be66a-bfb8-3e1d-b4fb-f03e9665a696.roa
File: 9c7be66a-bfb8-3e1d-b4fb-f03e9665a696.roa (raw, json)
Hash identifier: Jwk/xLIMkhcTAYLJHI76qy66Ur9x2bYtXVn3X5fK8kI=
Subject key identifier: 63:1A:03:FF:44:06:BC:9D:5B:8E:77:D5:43:6C:3C:80:C4:3F:57:D1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C577619497C95E7893ECAA40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c7be66a-bfb8-3e1d-b4fb-f03e9665a696.roa
Signing time: Tue 04 Feb 2025 13:41:40 +0000
ROA not before: Tue 04 Feb 2025 13:41:40 +0000
ROA not after: Mon 05 May 2025 12:41:40 +0000
asID: 30036
IP address blocks: 173.29.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:61:94:97:c9:5e:78:93:ec:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:41:40 2025 GMT
Not After : May 5 12:41:40 2025 GMT
Subject: CN=bbce7ad2-2e1b-4a40-818b-4386d60a537e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:43:01:c7:7f:55:8b:77:ec:67:e8:d8:6f:
02:a5:75:a6:33:c8:8c:78:7c:e7:7a:84:39:b9:da:
a7:35:65:7e:a8:3a:1a:e6:f7:9d:fc:4c:45:93:a9:
99:3f:7d:d1:49:8a:a2:2d:9a:7e:5c:2f:ed:ba:d9:
ad:89:2d:7b:76:c6:45:e1:6c:02:51:0f:38:e2:bb:
7c:06:38:5e:67:9b:ab:f2:70:17:7f:c3:78:64:1f:
af:2f:e3:e1:8d:e0:4d:45:eb:dc:97:a2:63:c4:52:
ae:c6:c1:79:19:6f:62:3b:97:9c:85:05:aa:bd:a8:
26:5e:46:18:35:7d:52:97:fc:02:2c:42:1e:ba:33:
3e:e2:d5:48:39:19:b2:92:a9:32:07:fe:6b:33:d0:
51:4f:f3:cc:2b:82:fa:3d:88:08:81:68:ef:3c:25:
5a:1a:dc:cf:f9:e3:fd:5f:dd:d2:ac:43:ff:e0:68:
7f:1d:0a:48:e9:68:6f:96:79:71:46:cd:0a:09:e3:
e7:68:69:56:c7:0b:c4:7d:f4:8c:6d:81:75:e5:b3:
e5:8c:e4:98:d8:f4:45:7f:78:e0:89:02:39:0d:47:
46:0f:56:f7:5d:b1:96:7d:41:da:31:40:88:e6:e3:
db:8d:8a:be:25:ae:94:d2:0c:48:89:e7:f4:94:94:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1A:03:FF:44:06:BC:9D:5B:8E:77:D5:43:6C:3C:80:C4:3F:57:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c7be66a-bfb8-3e1d-b4fb-f03e9665a696.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:75:9a:21:71:12:79:5d:d0:2b:b1:14:96:c9:f2:28:ab:32:
49:bb:1c:f6:f0:39:49:a5:eb:b5:f2:d2:66:71:99:7c:b8:04:
3e:b7:6c:20:4a:ea:f1:f5:3b:ff:c5:1c:b1:c9:68:d5:2f:a8:
42:40:f3:0c:fd:0a:9c:16:e7:bb:d3:e3:8d:2b:12:b9:52:ef:
6f:80:1d:eb:35:ad:be:78:b6:79:a6:40:f0:93:22:87:5e:62:
24:b0:59:e6:e8:47:10:c0:86:0b:92:55:71:c6:32:74:08:07:
aa:40:3a:03:43:2f:d8:15:54:3f:c6:ff:70:96:a7:b2:ba:94:
56:59:e1:25:75:49:49:9f:ff:d6:9f:3e:5c:ad:d4:af:4b:90:
2f:fb:1e:cd:31:bd:a8:47:a5:32:93:07:de:76:a9:04:2d:21:
e6:7a:ff:a9:d0:c0:44:71:17:f8:64:0a:98:e2:31:15:cb:9e:
e7:46:34:dc:ff:e9:27:55:f9:c8:a8:8a:e8:8b:3f:7e:6b:29:
92:12:c6:da:a4:9e:db:12:a2:64:7f:bd:4d:f3:33:60:05:08:
9d:93:b6:2e:36:31:d1:66:66:2e:b8:e6:ff:0c:10:c0:22:80:
8b:de:87:7b:fc:9b:ad:d9:3d:fe:17:eb:b9:91:2e:98:a6:44:
fd:ee:a5:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFd2GUl8leeJPsqkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNDE0MFoXDTI1MDUwNTEyNDE0MFowLzEtMCsGA1UEAxMk
YmJjZTdhZDItMmUxYi00YTQwLTgxOGItNDM4NmQ2MGE1MzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5BDAcd/VYt37Gfo2G8CpXWmM8iMeHzneoQ5
udqnNWV+qDoa5ved/ExFk6mZP33RSYqiLZp+XC/tutmtiS17dsZF4WwCUQ844rt8
BjheZ5ur8nAXf8N4ZB+vL+PhjeBNRevcl6JjxFKuxsF5GW9iO5echQWqvagmXkYY
NX1Sl/wCLEIeujM+4tVIORmykqkyB/5rM9BRT/PMK4L6PYgIgWjvPCVaGtzP+eP9
X93SrEP/4Gh/HQpI6WhvlnlxRs0KCePnaGlWxwvEffSMbYF15bPljOSY2PRFf3jg
iQI5DUdGD1b3XbGWfUHaMUCI5uPbjYq+Ja6U0gxIief0lJTUaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMaA/9EBrydW4531UNsPIDEP1fRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWM3YmU2NmEtYmZiOC0z
ZTFkLWI0ZmItZjAzZTk2NjVhNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHt1miFxEnld0CuxFJbJ8iirMkm7HPbwOUml67Xy0mZxmXy4BD63bCBK
6vH1O//FHLHJaNUvqEJA8wz9CpwW57vT440rErlS72+AHes1rb54tnmmQPCTIode
YiSwWeboRxDAhguSVXHGMnQIB6pAOgNDL9gVVD/G/3CWp7K6lFZZ4SV1SUmf/9af
Plyt1K9LkC/7Hs0xvahHpTKTB952qQQtIeZ6/6nQwERxF/hkCpjiMRXLnudGNNz/
6SdV+cioiuiLP35rKZISxtqkntsSomR/vU3zM2AFCJ2Tti42MdFmZi645v8MEMAi
gIveh3v8m63ZPf4X67mRLpimRP3upXk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:23 2025 by rpki-client