Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3cb1d3e-10f1-3d49-a237-5100981dbd8a.roa
File: d3cb1d3e-10f1-3d49-a237-5100981dbd8a.roa (raw, json)
Hash identifier: K/ZRwj9K8feBTvsVGgmBdqezm1FAJGyXouI4/58J5sM=
Subject key identifier: D2:67:41:B6:E4:57:99:25:DA:24:5F:FB:58:34:0E:BA:20:55:88:E8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C557E6E5FC325D09B9B67CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3cb1d3e-10f1-3d49-a237-5100981dbd8a.roa
Signing time: Tue 04 Feb 2025 12:38:15 +0000
ROA not before: Tue 04 Feb 2025 12:38:15 +0000
ROA not after: Mon 05 May 2025 11:38:15 +0000
asID: 30036
IP address blocks: 173.19.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:57:e6:e5:fc:32:5d:09:b9:b6:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:38:15 2025 GMT
Not After : May 5 11:38:15 2025 GMT
Subject: CN=8e074faf-31e3-4557-b8e2-a8b7545df061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:e9:55:5c:f1:e3:e3:8f:a9:24:07:10:35:
39:3c:c2:8a:99:17:06:6e:78:a8:5a:9d:c3:0c:7b:
60:e6:a7:27:aa:c6:96:dd:25:51:7c:40:02:17:81:
4d:dc:71:60:68:b1:97:8c:82:ab:36:7f:cc:f1:1e:
e1:27:9b:f9:71:aa:3d:b9:f4:96:5f:b3:4f:30:d8:
93:c1:35:44:f4:72:1b:8f:2c:91:c9:e1:c5:89:c5:
4f:c4:86:7f:e3:7e:ff:97:13:00:15:eb:04:77:4c:
62:b5:52:4f:c5:71:94:c2:41:a5:3d:aa:65:a9:b1:
54:b6:83:6d:d8:74:0a:cb:65:71:da:0d:dd:9a:b6:
0b:34:bd:ef:50:ff:20:ff:cf:2e:d2:b5:c6:9d:7f:
c1:63:55:4d:ff:e9:a0:63:80:d1:c7:c8:16:cc:38:
01:e4:ba:84:93:2d:b7:71:24:ba:0b:b2:20:e7:57:
ad:72:b8:58:47:f5:df:2c:af:21:ee:8d:3c:83:1b:
50:90:65:f9:05:c1:b9:ac:3e:d9:f3:2e:86:0b:1e:
6f:f0:36:eb:a1:da:cf:a4:04:93:b7:78:a4:33:1c:
7b:d1:6e:f1:10:c7:ee:a4:a3:61:19:c2:bd:75:21:
a1:d2:28:77:74:5d:a9:9e:d4:d0:ba:a9:c3:99:cb:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:41:B6:E4:57:99:25:DA:24:5F:FB:58:34:0E:BA:20:55:88:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3cb1d3e-10f1-3d49-a237-5100981dbd8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:19:2c:37:d8:09:79:a6:13:7e:2d:d3:9c:2d:a1:c2:3e:eb:
2d:63:9a:11:f9:e3:dd:6d:07:58:22:41:2f:11:26:b7:be:3e:
72:4e:62:ea:44:15:e3:e7:0d:d9:51:4d:24:31:19:7b:16:37:
7b:3e:e3:b8:71:4d:b4:86:7c:e4:71:20:a6:37:93:2e:f7:1f:
aa:1a:98:93:ca:6a:51:d2:c4:f1:0d:e4:2f:ad:1e:7c:26:22:
23:1e:fb:af:64:19:ca:38:7d:54:ae:2d:77:71:64:95:c8:68:
c4:a1:1e:2d:f7:6c:72:07:43:be:74:39:90:d4:fc:fd:7d:e4:
67:8c:22:1b:b7:7a:30:89:36:c0:6e:10:7b:61:2b:a5:67:ea:
fe:37:73:24:6f:ef:64:86:4c:d1:89:be:21:19:26:54:51:5e:
7e:63:3b:59:98:b1:28:6c:bf:a7:0b:80:36:a9:14:ac:c0:43:
3a:83:4a:dc:c4:15:46:74:af:6d:36:64:84:c3:31:c8:5c:df:
a7:a7:b7:34:49:de:3a:ed:ba:d1:6f:d2:b6:f7:f9:fd:d4:f6:
7e:1a:4b:8a:66:7f:80:9e:30:17:56:e9:5c:d5:89:21:fc:8f:
e9:93:b8:7b:6d:bf:7f:cb:d8:40:fe:97:5f:08:4f:26:70:f6:
e1:62:b6:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFV+bl/DJdCbm2fMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEyMzgxNVoXDTI1MDUwNTExMzgxNVowLzEtMCsGA1UEAxMk
OGUwNzRmYWYtMzFlMy00NTU3LWI4ZTItYThiNzU0NWRmMDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof7pVVzx4+OPqSQHEDU5PMKKmRcGbnioWp3D
DHtg5qcnqsaW3SVRfEACF4FN3HFgaLGXjIKrNn/M8R7hJ5v5cao9ufSWX7NPMNiT
wTVE9HIbjyyRyeHFicVPxIZ/437/lxMAFesEd0xitVJPxXGUwkGlPaplqbFUtoNt
2HQKy2Vx2g3dmrYLNL3vUP8g/88u0rXGnX/BY1VN/+mgY4DRx8gWzDgB5LqEky23
cSS6C7Ig51etcrhYR/XfLK8h7o08gxtQkGX5BcG5rD7Z8y6GCx5v8DbrodrPpAST
t3ikMxx70W7xEMfupKNhGcK9dSGh0ih3dF2pntTQuqnDmcv4MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJnQbbkV5kl2iRf+1g0DrogVYjoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDNjYjFkM2UtMTBmMS0z
ZDQ5LWEyMzctNTEwMDk4MWRiZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRNiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkZLDfYCXmmE34t05wtocI+6y1jmhH5491tB1giQS8RJre+PnJOYupE
FePnDdlRTSQxGXsWN3s+47hxTbSGfORxIKY3ky73H6oamJPKalHSxPEN5C+tHnwm
IiMe+69kGco4fVSuLXdxZJXIaMShHi33bHIHQ750OZDU/P195GeMIhu3ejCJNsBu
EHthK6Vn6v43cyRv72SGTNGJviEZJlRRXn5jO1mYsShsv6cLgDapFKzAQzqDStzE
FUZ0r202ZITDMchc36entzRJ3jrtutFv0rb3+f3U9n4aS4pmf4CeMBdW6VzViSH8
j+mTuHttv3/L2ED+l18ITyZw9uFitg0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:53 2025 by rpki-client