Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa
File: d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa (raw, json)
Hash identifier: /0ufnaZSYo6CwZdv+h7EYomE20g7GZdahR9IUpN/Po4=
Subject key identifier: 07:8C:8F:BA:80:E7:1E:AE:13:4F:3A:5D:B8:97:68:41:6D:54:7C:9C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B735AC41DDB261BFC1473AA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa
Signing time: Thu 30 Jan 2025 11:07:58 +0000
ROA not before: Thu 30 Jan 2025 11:07:58 +0000
ROA not after: Wed 30 Apr 2025 10:07:58 +0000
asID: 30036
IP address blocks: 173.22.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:35:ac:41:dd:b2:61:bf:c1:47:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:07:58 2025 GMT
Not After : Apr 30 10:07:58 2025 GMT
Subject: CN=29e195ae-8b76-40d9-9f74-4d60a50fdab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:a7:5b:e2:d3:e2:b4:8b:87:6a:ed:44:7d:
90:0e:a3:45:2a:00:f5:61:98:6d:a3:7f:48:51:f8:
04:1d:70:33:29:26:a4:d5:5e:fc:90:e2:0d:b6:f9:
0b:d6:a2:53:92:67:e9:ef:65:91:9a:08:f4:4d:47:
fa:b1:b3:b7:4a:99:23:12:69:83:7f:64:76:9e:e9:
2e:55:88:20:6a:c6:5d:d3:2a:cf:fa:68:a9:dd:ba:
8e:ab:d4:c9:19:4d:ef:db:d7:5c:de:d5:63:0c:7b:
d1:fb:d3:39:2f:b2:59:a8:55:5c:19:81:ab:64:42:
62:36:02:59:99:45:ff:40:ad:9b:17:4a:f1:72:1f:
73:a6:01:80:08:00:44:ba:db:ec:61:c5:7e:86:bf:
5e:88:21:06:ba:9d:09:9c:1e:7f:e3:cb:ef:1f:32:
d0:c6:ef:c5:63:9c:b0:06:5a:4b:55:98:54:0b:35:
59:00:75:fb:c6:b0:41:83:5a:d6:be:64:f0:7b:9a:
3f:2d:11:60:29:a5:1d:8e:cb:a3:f8:bb:99:7f:5f:
0b:13:21:04:27:9d:6a:ca:d8:60:a5:a8:8a:bd:d7:
99:42:c9:33:ec:96:92:02:c2:f6:1f:0a:6d:eb:83:
d5:95:5c:a4:de:6d:c8:a7:1d:95:8c:90:15:c1:f0:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8C:8F:BA:80:E7:1E:AE:13:4F:3A:5D:B8:97:68:41:6D:54:7C:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38090fd-1dda-3c2e-a4cc-4a4d282bc529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:1b:80:35:5c:99:cc:04:cb:89:d9:9d:11:b7:32:f3:af:1d:
9d:31:cd:d7:05:0a:e9:2e:07:b0:b9:d1:d8:d9:6f:a7:ee:12:
7b:23:3c:bc:dc:c6:0b:53:fd:80:86:dc:c0:96:42:3a:ba:85:
68:2d:5e:52:3f:9c:51:18:bb:35:97:d8:ca:3f:fb:77:64:34:
5c:9f:75:99:04:33:9a:a9:96:72:de:5a:cf:78:76:45:6f:8e:
90:c3:f8:6a:bf:78:fc:57:ee:5d:a9:d1:cc:b0:11:b7:d8:bb:
8b:3d:12:fb:a6:d7:eb:73:d6:2f:b6:e4:67:f8:d4:ff:34:28:
b6:6e:79:69:57:2a:b2:d3:5b:a5:64:bc:c3:fc:e6:4f:f1:5f:
bc:f5:d4:61:ae:df:13:d0:1c:62:a5:ae:61:c5:01:a5:94:d7:
a6:25:8c:06:60:af:af:9e:cd:d2:19:b6:11:d5:7a:32:16:e6:
1e:a0:91:90:5a:a0:9a:b9:95:61:fc:6c:50:a6:65:08:1c:ab:
6f:c6:cd:17:ec:55:b3:7e:26:f5:6f:fe:33:91:02:41:2a:3a:
9c:b0:67:f9:f7:56:2c:ab:fe:15:43:bb:4e:82:45:7d:52:a1:
42:8f:36:dd:a7:d6:30:9e:23:ec:8d:4a:be:8b:2b:b1:11:8b:
cc:ff:01:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NaxB3bJhv8FHOqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDEzMDExMDc1OFoXDTI1MDQzMDEwMDc1OFowLzEtMCsGA1UEAxMk
MjllMTk1YWUtOGI3Ni00MGQ5LTlmNzQtNGQ2MGE1MGZkYWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwqnW+LT4rSLh2rtRH2QDqNFKgD1YZhto39I
UfgEHXAzKSak1V78kOINtvkL1qJTkmfp72WRmgj0TUf6sbO3SpkjEmmDf2R2nuku
VYggasZd0yrP+mip3bqOq9TJGU3v29dc3tVjDHvR+9M5L7JZqFVcGYGrZEJiNgJZ
mUX/QK2bF0rxch9zpgGACABEutvsYcV+hr9eiCEGup0JnB5/48vvHzLQxu/FY5yw
BlpLVZhUCzVZAHX7xrBBg1rWvmTwe5o/LRFgKaUdjsuj+LuZf18LEyEEJ51qythg
paiKvdeZQskz7JaSAsL2Hwpt64PVlVyk3m3Ipx2VjJAVwfBg8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAeMj7qA5x6uE086XbiXaEFtVHycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDM4MDkwZmQtMWRkYS0z
YzJlLWE0Y2MtNGE0ZDI4MmJjNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsbgDVcmcwEy4nZnRG3MvOvHZ0xzdcFCukuB7C50djZb6fuEnsjPLzc
xgtT/YCG3MCWQjq6hWgtXlI/nFEYuzWX2Mo/+3dkNFyfdZkEM5qplnLeWs94dkVv
jpDD+Gq/ePxX7l2p0cywEbfYu4s9Evum1+tz1i+25Gf41P80KLZueWlXKrLTW6Vk
vMP85k/xX7z11GGu3xPQHGKlrmHFAaWU16YljAZgr6+ezdIZthHVejIW5h6gkZBa
oJq5lWH8bFCmZQgcq2/GzRfsVbN+JvVv/jORAkEqOpywZ/n3Viyr/hVDu06CRX1S
oUKPNt2n1jCeI+yNSr6LK7ERi8z/AWo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:11 2025 by rpki-client