Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa
File: a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa (raw, json)
Hash identifier: p16jjIZaBgRU9VMGbN637JURXM9EvDbLmv7Wd6OP7eg=
Subject key identifier: CE:4D:B8:1F:D2:71:7D:F6:16:B8:13:04:FA:B1:71:04:48:81:F3:B4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B736C09B2B22EC65FCB8EA80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa
Signing time: Thu 30 Jan 2025 11:10:08 +0000
ROA not before: Thu 30 Jan 2025 11:10:08 +0000
ROA not after: Wed 30 Apr 2025 10:10:08 +0000
asID: 30036
IP address blocks: 173.17.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:36:c0:9b:2b:22:ec:65:fc:b8:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:10:08 2025 GMT
Not After : Apr 30 10:10:08 2025 GMT
Subject: CN=85ae6829-6c0f-48e1-9b91-d770474866d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:3f:42:7d:0f:69:c2:d4:96:86:76:86:01:
37:5c:aa:e8:ff:f6:ac:b4:b9:0d:18:f3:56:08:47:
91:22:0c:3a:d2:1d:85:9b:f1:f3:13:f8:76:3b:ca:
34:68:8f:26:e1:4f:a6:33:5d:ce:5d:0f:3e:40:c0:
2e:5a:73:6e:3d:f6:57:fb:08:f0:a2:3f:b5:5d:b4:
4a:0e:e9:b4:34:2e:55:31:4b:9f:c8:e6:44:7c:98:
32:f6:0a:64:04:e6:de:85:32:14:b6:79:0c:e8:51:
6e:45:26:16:99:28:7c:12:1b:4d:e2:44:8f:95:a8:
0b:0a:43:ca:7d:29:48:ed:5a:ad:b5:f1:a1:50:78:
b9:ee:87:cb:be:aa:4b:ef:5f:f5:92:20:d1:44:e8:
51:63:60:b3:59:58:40:1e:31:e4:0e:d7:8b:fa:15:
9d:d5:63:4f:4e:4c:ae:1c:e8:30:f8:2c:14:00:0c:
b7:c0:54:9d:f1:cc:2b:e1:c5:22:2b:13:40:ec:8e:
8a:16:fd:77:00:4a:87:e2:ea:6b:37:c5:19:76:e8:
9d:3c:a6:2c:17:16:ce:fa:c7:1e:47:ce:c2:8e:68:
db:18:31:b3:3b:4a:eb:28:99:03:8b:58:6c:52:36:
eb:f0:45:38:26:d1:fd:4b:10:8d:bf:c3:dd:95:c5:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4D:B8:1F:D2:71:7D:F6:16:B8:13:04:FA:B1:71:04:48:81:F3:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:0e:15:86:10:3d:11:38:e8:6e:74:25:3e:a4:2a:1b:c7:b9:
3d:10:b1:1b:32:1d:de:25:2e:59:6c:b8:c4:18:09:43:7c:b3:
26:15:d1:cd:8e:17:f6:49:02:c0:3e:ca:2e:14:55:4a:bb:c6:
92:1d:90:7e:1c:fb:d3:d8:e3:b6:a8:b1:25:1c:1e:79:cd:2c:
f7:87:7f:d0:54:9c:9e:d8:86:0b:18:06:c3:0e:40:84:67:18:
b2:9c:20:c5:47:69:58:ac:d6:0b:49:8d:01:26:e6:a9:af:56:
2e:58:aa:7e:f1:ab:0e:1f:9c:e1:d6:54:42:6e:a6:b2:07:57:
73:81:48:4a:25:0e:71:c9:c5:ab:85:65:cc:62:72:09:c5:2e:
69:a6:89:6e:e6:0d:b7:24:74:4c:7a:a6:b7:07:77:24:28:d0:
b5:7f:be:17:84:e3:18:e4:67:3d:e3:c0:ec:df:c7:f6:48:3d:
86:17:fc:f0:2a:0d:36:b8:23:09:f1:ca:c6:ec:89:5a:bd:f9:
f9:e0:52:77:87:7d:2d:ed:6f:b7:db:4f:6e:47:5a:88:2e:ec:
b5:a9:5b:a2:8b:25:75:91:83:ec:1d:47:e8:8d:55:41:b4:71:
6e:cf:98:2f:fd:18:9f:df:21:6f:c1:a5:6a:7f:c7:6b:c2:02:
db:1d:43:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NsCbKyLsZfy46oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDEzMDExMTAwOFoXDTI1MDQzMDEwMTAwOFowLzEtMCsGA1UEAxMk
ODVhZTY4MjktNmMwZi00OGUxLTliOTEtZDc3MDQ3NDg2NmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEM/Qn0PacLUloZ2hgE3XKro//astLkNGPNW
CEeRIgw60h2Fm/HzE/h2O8o0aI8m4U+mM13OXQ8+QMAuWnNuPfZX+wjwoj+1XbRK
Dum0NC5VMUufyOZEfJgy9gpkBObehTIUtnkM6FFuRSYWmSh8EhtN4kSPlagLCkPK
fSlI7VqttfGhUHi57ofLvqpL71/1kiDRROhRY2CzWVhAHjHkDteL+hWd1WNPTkyu
HOgw+CwUAAy3wFSd8cwr4cUiKxNA7I6KFv13AEqH4uprN8UZduidPKYsFxbO+sce
R87CjmjbGDGzO0rrKJkDi1hsUjbr8EU4JtH9SxCNv8PdlcVW/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5NuB/ScX32FrgTBPqxcQRIgfO0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTdmYTdkZjMtNThhNi0z
OGMzLThmNWEtMTc4ZDk5ZmE0YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAoOFYYQPRE46G50JT6kKhvHuT0QsRsyHd4lLllsuMQYCUN8syYV0c2O
F/ZJAsA+yi4UVUq7xpIdkH4c+9PY47aosSUcHnnNLPeHf9BUnJ7YhgsYBsMOQIRn
GLKcIMVHaVis1gtJjQEm5qmvVi5Yqn7xqw4fnOHWVEJuprIHV3OBSEolDnHJxauF
ZcxicgnFLmmmiW7mDbckdEx6prcHdyQo0LV/vheE4xjkZz3jwOzfx/ZIPYYX/PAq
DTa4IwnxysbsiVq9+fngUneHfS3tb7fbT25HWogu7LWpW6KLJXWRg+wdR+iNVUG0
cW7PmC/9GJ/fIW/BpWp/x2vCAtsdQ/Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:08 2025 by rpki-client