Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a53a45bb-60c4-3594-8b58-a8db8e014cf0.roa
File: a53a45bb-60c4-3594-8b58-a8db8e014cf0.roa (raw, json)
Hash identifier: 4ZOIoheTFPBhet/DHsKsYEOVrjyFFqGLcGX1dwH3wQA=
Subject key identifier: CB:D8:66:FE:FD:4B:7F:44:0E:89:41:04:95:4A:D3:67:64:C4:67:6B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C263DC53D1520E7A13F66D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a53a45bb-60c4-3594-8b58-a8db8e014cf0.roa
Signing time: Mon 03 Feb 2025 11:14:55 +0000
ROA not before: Mon 03 Feb 2025 11:14:55 +0000
ROA not after: Sun 04 May 2025 10:14:55 +0000
asID: 30036
IP address blocks: 173.28.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:63:dc:53:d1:52:0e:7a:13:f6:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:14:55 2025 GMT
Not After : May 4 10:14:55 2025 GMT
Subject: CN=cda9fad7-0d2e-42a5-b3dd-ef1bd0aa6a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:70:eb:6d:15:7f:f0:41:c7:1f:4e:90:2b:
3b:57:e5:ba:d6:1f:6e:e6:88:8c:f0:36:d5:af:fe:
a4:c2:d7:c1:2f:94:3c:c4:ef:25:c9:c1:b1:11:c9:
c2:0b:df:0a:17:ca:04:55:8a:ea:fd:3b:37:5e:1e:
67:39:98:e4:de:66:3b:80:a0:9a:3e:9a:6e:b3:b5:
84:e2:1a:1e:be:34:ee:69:60:b5:69:4d:90:b1:50:
52:7b:f1:c6:a8:06:eb:30:e0:9e:7d:a5:d1:c3:a7:
11:38:67:8d:29:ef:6a:e6:98:0e:67:16:77:98:5c:
e4:de:65:20:38:ef:73:1b:89:7b:b0:eb:dd:ce:83:
dd:2f:a5:ff:1d:79:05:ca:a5:ee:89:10:66:4e:e0:
94:78:38:ad:e7:43:5f:88:1f:db:61:eb:52:cf:67:
b1:e1:95:e4:3d:f7:f6:5f:85:90:c7:eb:29:9f:3c:
86:45:e0:82:a9:08:e9:f0:1b:06:0e:73:50:da:32:
df:01:95:fb:f3:71:21:b5:2e:ca:a2:f1:f6:33:00:
b2:84:cf:10:fb:9f:d9:fe:be:a7:5a:92:71:eb:00:
43:70:02:2e:be:eb:27:ca:95:cf:3c:f0:ae:79:9d:
e5:ba:b8:0d:08:b5:5d:5f:67:c5:19:b2:9e:b3:42:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D8:66:FE:FD:4B:7F:44:0E:89:41:04:95:4A:D3:67:64:C4:67:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a53a45bb-60c4-3594-8b58-a8db8e014cf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:e7:36:57:96:62:b5:02:af:a1:96:ca:10:ed:c3:4e:6d:fb:
01:0b:eb:8a:6e:3b:20:a8:9d:28:60:1f:f8:86:2f:95:2a:42:
d9:68:79:0b:2a:85:cf:2b:0a:8e:b6:66:93:07:06:f6:ec:bb:
7a:0b:95:05:3b:0f:d6:91:48:26:a4:60:e7:2a:b5:f4:c3:da:
6a:4d:73:1e:00:ca:fd:58:54:5c:6c:78:32:6b:c3:8a:d2:71:
b7:1e:79:b8:f7:07:7b:c1:b6:54:e7:7d:93:5b:51:6e:31:31:
83:59:e3:cd:2a:87:d9:c8:fa:b2:c5:ea:b9:76:ba:20:d5:cf:
05:c4:86:d2:f4:9f:c8:5a:99:a5:6c:76:33:e0:a9:0e:ba:cf:
65:a6:d2:6e:34:91:ca:c1:f4:87:63:93:94:97:1a:85:07:b0:
ed:f2:ea:d3:72:cd:8a:a9:68:a2:44:4b:57:be:85:e1:d7:54:
19:29:fa:e3:71:f1:ff:d7:bd:aa:db:43:b2:ff:d0:99:6c:a6:
ba:e9:de:a3:61:b7:de:95:10:86:89:ab:4c:a9:de:50:a7:f0:
50:ae:e6:63:8c:ab:aa:2c:9f:c3:7f:08:b9:6a:74:bf:43:9f:
53:c1:4c:60:36:67:4d:c8:18:9f:0d:21:56:11:9f:ff:78:31:
d2:de:73:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCY9xT0VIOehP2bYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTQ1NVoXDTI1MDUwNDEwMTQ1NVowLzEtMCsGA1UEAxMk
Y2RhOWZhZDctMGQyZS00MmE1LWIzZGQtZWYxYmQwYWE2YTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApipw620Vf/BBxx9OkCs7V+W61h9u5oiM8DbV
r/6kwtfBL5Q8xO8lycGxEcnCC98KF8oEVYrq/Ts3Xh5nOZjk3mY7gKCaPppus7WE
4hoevjTuaWC1aU2QsVBSe/HGqAbrMOCefaXRw6cROGeNKe9q5pgOZxZ3mFzk3mUg
OO9zG4l7sOvdzoPdL6X/HXkFyqXuiRBmTuCUeDit50NfiB/bYetSz2ex4ZXkPff2
X4WQx+spnzyGReCCqQjp8BsGDnNQ2jLfAZX783EhtS7KovH2MwCyhM8Q+5/Z/r6n
WpJx6wBDcAIuvusnypXPPPCueZ3lurgNCLVdX2fFGbKes0KnEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvYZv79S39EDolBBJVK02dkxGdrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTUzYTQ1YmItNjBjNC0z
NTk0LThiNTgtYThkYjhlMDE0Y2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRw3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnnNleWYrUCr6GWyhDtw05t+wEL64puOyConShgH/iGL5UqQtloeQsq
hc8rCo62ZpMHBvbsu3oLlQU7D9aRSCakYOcqtfTD2mpNcx4Ayv1YVFxseDJrw4rS
cbceebj3B3vBtlTnfZNbUW4xMYNZ480qh9nI+rLF6rl2uiDVzwXEhtL0n8hamaVs
djPgqQ66z2Wm0m40kcrB9Idjk5SXGoUHsO3y6tNyzYqpaKJES1e+heHXVBkp+uNx
8f/XvarbQ7L/0Jlsprrp3qNht96VEIaJq0yp3lCn8FCu5mOMq6osn8N/CLlqdL9D
n1PBTGA2Z03IGJ8NIVYRn/94MdLec+8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:58 2025 by rpki-client