Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4566ad4-5c91-3c84-a510-ee91ee05fb37.roa
File: d4566ad4-5c91-3c84-a510-ee91ee05fb37.roa (raw, json)
Hash identifier: /ucUU1HmfpchmghqadHizArUey+Vm4g87pOgUvoiGwE=
Subject key identifier: 6E:0E:1A:65:9F:E5:63:54:BD:AF:E8:44:F3:F6:CD:C3:74:19:FC:78
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57D42C4C77B1157226F5300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4566ad4-5c91-3c84-a510-ee91ee05fb37.roa
Signing time: Tue 04 Feb 2025 13:53:31 +0000
ROA not before: Tue 04 Feb 2025 13:53:31 +0000
ROA not after: Mon 05 May 2025 12:53:31 +0000
asID: 30036
IP address blocks: 173.17.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7d:42:c4:c7:7b:11:57:22:6f:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:53:31 2025 GMT
Not After : May 5 12:53:31 2025 GMT
Subject: CN=7f574385-b7df-47f7-b1e0-0aa3b353b54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:4d:74:0b:5b:5e:97:1a:cf:8e:2c:48:bb:
2a:e0:49:61:19:db:11:a8:80:75:ae:4c:93:17:2e:
82:31:19:8d:a0:27:dd:a5:61:af:ae:46:e6:f7:35:
6a:e8:b5:da:22:92:2e:cf:f2:61:7e:74:bf:aa:73:
b8:bb:99:32:55:b0:1e:38:24:39:d7:10:c1:9d:4b:
8f:42:03:a5:ee:e9:40:f3:8a:be:37:e9:7a:a5:d6:
0e:ba:7d:17:3e:84:57:d2:44:d6:d3:cf:e9:64:35:
54:92:9b:48:86:e3:45:51:88:88:3f:65:93:43:08:
fb:e3:7f:1d:cc:bc:f8:70:86:5d:40:34:20:02:18:
1f:fb:46:00:21:3c:d4:71:79:4c:4c:a9:85:9e:4c:
35:46:c4:b2:13:73:8e:7c:82:cf:98:d4:c9:87:a8:
31:a6:3c:75:df:3d:eb:f4:e6:cc:22:0c:b8:30:91:
91:6c:a9:26:84:ad:60:3f:ce:8f:a7:b4:f9:1d:a4:
0b:79:0f:89:c8:52:5e:a1:c4:53:42:a5:b6:0f:fc:
c6:e3:a3:cf:41:f8:46:57:6e:2f:0c:2b:61:13:d4:
d1:7e:83:0d:e1:af:4e:22:93:ef:a7:f5:3a:7e:ab:
64:31:15:3f:d9:c7:0a:81:3f:03:09:7c:f0:76:7c:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:1A:65:9F:E5:63:54:BD:AF:E8:44:F3:F6:CD:C3:74:19:FC:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4566ad4-5c91-3c84-a510-ee91ee05fb37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:a3:3b:4f:89:e1:db:98:46:5f:37:ab:ee:11:86:26:e7:63:
b4:d2:72:b3:01:6a:18:9d:5a:e1:b5:06:be:c3:69:b9:83:5d:
8d:d9:dc:47:29:67:ec:5a:74:0f:e3:99:eb:c6:de:dd:ee:60:
4b:be:a6:5f:0d:5e:e2:6d:83:e3:c1:f3:73:09:95:d7:66:62:
6b:42:ab:5b:d3:6b:dd:52:1f:4b:23:58:7b:f4:59:56:1e:c5:
ff:48:ae:c5:6d:bd:0e:bf:43:3f:f7:b4:f1:06:11:ed:02:6a:
e0:7f:d0:17:66:10:f7:cc:83:d7:0b:81:53:85:74:d4:12:c3:
8f:8b:ea:c7:ba:fb:d7:3e:7b:31:52:05:4a:79:94:31:3b:0f:
8a:53:56:e2:b7:b7:93:c6:c2:5a:fd:ec:f5:b0:aa:ce:89:92:
bb:24:3d:ab:69:7a:9a:22:90:f3:be:94:c1:63:57:86:1e:80:
f2:7e:41:97:9b:bd:ba:3e:ca:d7:58:55:37:1e:6b:ee:84:24:
ba:d7:a2:f1:11:a5:4f:2d:d6:3c:1c:89:cd:68:87:63:ba:ae:
04:de:56:a0:4a:67:79:22:51:8c:20:c6:6e:2f:1e:41:4d:e8:
1d:b7:b0:28:fe:46:be:66:b9:7e:81:f7:d5:e9:c4:f6:32:d4:
d3:08:6b:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfULEx3sRVyJvUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNTMzMVoXDTI1MDUwNTEyNTMzMVowLzEtMCsGA1UEAxMk
N2Y1NzQzODUtYjdkZi00N2Y3LWIxZTAtMGFhM2IzNTNiNTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYxNdAtbXpcaz44sSLsq4ElhGdsRqIB1rkyT
Fy6CMRmNoCfdpWGvrkbm9zVq6LXaIpIuz/JhfnS/qnO4u5kyVbAeOCQ51xDBnUuP
QgOl7ulA84q+N+l6pdYOun0XPoRX0kTW08/pZDVUkptIhuNFUYiIP2WTQwj7438d
zLz4cIZdQDQgAhgf+0YAITzUcXlMTKmFnkw1RsSyE3OOfILPmNTJh6gxpjx13z3r
9ObMIgy4MJGRbKkmhK1gP86Pp7T5HaQLeQ+JyFJeocRTQqW2D/zG46PPQfhGV24v
DCthE9TRfoMN4a9OIpPvp/U6fqtkMRU/2ccKgT8DCXzwdnxfGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4OGmWf5WNUva/oRPP2zcN0Gfx4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQ1NjZhZDQtNWM5MS0z
Yzg0LWE1MTAtZWU5MWVlMDVmYjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRE0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGajO0+J4duYRl83q+4RhibnY7TScrMBahidWuG1Br7DabmDXY3Z3Ecp
Z+xadA/jmevG3t3uYEu+pl8NXuJtg+PB83MJlddmYmtCq1vTa91SH0sjWHv0WVYe
xf9IrsVtvQ6/Qz/3tPEGEe0CauB/0BdmEPfMg9cLgVOFdNQSw4+L6se6+9c+ezFS
BUp5lDE7D4pTVuK3t5PGwlr97PWwqs6JkrskPatpepoikPO+lMFjV4YegPJ+QZeb
vbo+ytdYVTcea+6EJLrXovERpU8t1jwcic1oh2O6rgTeVqBKZ3kiUYwgxm4vHkFN
6B23sCj+Rr5muX6B99XpxPYy1NMIa+M=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:30 2025 by rpki-client