Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa
File: d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa (raw, json)
Hash identifier: NZMQIBt0MQad/gmP02GUN1+FGDs1Qw47JvOAHlp7jBY=
Subject key identifier: 49:46:F3:87:36:6F:49:E1:1E:E2:6E:70:52:0B:27:40:FD:D4:14:93
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C585AB707BB52EC8E70DC580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa
Signing time: Tue 04 Feb 2025 14:10:28 +0000
ROA not before: Tue 04 Feb 2025 14:10:28 +0000
ROA not after: Mon 05 May 2025 13:10:28 +0000
asID: 30036
IP address blocks: 173.17.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:85:ab:70:7b:b5:2e:c8:e7:0d:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 14:10:28 2025 GMT
Not After : May 5 13:10:28 2025 GMT
Subject: CN=094258d9-b2df-4650-8f3a-11999c08a042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:55:4e:a6:f1:12:e0:dc:a1:8f:f3:73:52:
4f:f9:03:02:c3:11:4e:f6:17:24:90:90:91:b8:eb:
ff:05:b4:0f:60:4d:3e:86:af:9e:7e:1d:96:d6:e5:
83:7e:4f:45:7c:2f:be:2f:45:02:3d:12:c9:d6:05:
8e:c5:85:c6:17:a1:19:93:a4:b0:a5:45:0b:9f:68:
1c:32:d2:cc:bb:2d:25:34:83:de:ec:42:79:ee:fe:
a8:2e:8c:cf:e5:10:ae:9c:be:ee:af:89:97:18:35:
37:70:32:33:a0:43:de:04:a7:93:4c:c8:d8:81:79:
e4:aa:b1:06:bf:7d:da:57:ce:ef:d6:45:ee:17:d8:
9f:00:c0:90:12:e9:23:94:36:f7:06:dd:35:f8:8c:
fa:c9:17:be:f8:17:51:43:ad:fb:f2:5a:62:26:9c:
34:40:b5:82:df:b8:33:37:d4:a9:be:01:06:8e:b7:
df:d4:88:a5:40:b9:b0:85:43:23:7b:3a:f5:68:65:
df:b7:59:bf:86:7f:ed:50:a7:73:b4:f9:72:1a:60:
36:d6:08:f5:83:f8:1c:b9:35:fb:34:df:69:55:5c:
35:fd:d6:7e:c0:bc:b3:ae:41:5a:e8:0d:05:be:1a:
28:df:fc:16:fd:a9:72:24:97:da:1f:8e:e4:49:95:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:F3:87:36:6F:49:E1:1E:E2:6E:70:52:0B:27:40:FD:D4:14:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:33:1e:ad:f2:7f:c9:67:cc:4c:13:df:8c:67:99:61:78:ed:
e5:6d:6b:c6:17:ee:7d:f5:e4:21:b8:12:fe:42:dd:0f:2a:df:
26:37:80:2b:70:4a:0e:85:27:f9:6b:3a:c5:90:ec:7d:d2:88:
2a:be:f2:a1:4e:ab:be:9f:55:2e:8d:b1:91:a9:97:ce:f5:b2:
6b:e0:ef:c3:ce:6c:97:04:71:90:07:bc:e7:24:83:2c:27:88:
22:86:b1:cf:bc:15:88:ff:ca:31:ee:40:34:53:af:89:69:d3:
35:a1:56:ff:60:62:06:9a:ad:7c:65:76:ad:cc:21:1c:ef:0b:
34:fb:95:dc:cf:6b:80:68:cc:90:0e:a5:b7:b5:52:70:09:f0:
8e:bc:46:17:fa:e0:86:26:fb:20:d5:5b:a9:14:0e:ea:31:6a:
20:56:58:2b:69:48:c4:bd:f4:e6:bf:80:06:de:f9:e2:f6:3f:
a1:71:d3:03:ec:ac:2d:54:53:db:92:0b:55:02:af:9a:19:80:
08:90:ec:01:a6:41:59:41:82:6f:0d:5c:a3:8f:cd:c7:40:88:
05:b4:25:ca:a9:6c:0c:4f:72:54:bf:b2:bf:de:1b:07:c2:a7:
38:82:72:92:ad:5f:f0:ce:f0:36:d0:55:8a:83:7c:49:28:b2:
05:a5:7c:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFhatwe7UuyOcNxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDE0MTAyOFoXDTI1MDUwNTEzMTAyOFowLzEtMCsGA1UEAxMk
MDk0MjU4ZDktYjJkZi00NjUwLThmM2EtMTE5OTljMDhhMDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnRVTqbxEuDcoY/zc1JP+QMCwxFO9hckkJCR
uOv/BbQPYE0+hq+efh2W1uWDfk9FfC++L0UCPRLJ1gWOxYXGF6EZk6SwpUULn2gc
MtLMuy0lNIPe7EJ57v6oLozP5RCunL7ur4mXGDU3cDIzoEPeBKeTTMjYgXnkqrEG
v33aV87v1kXuF9ifAMCQEukjlDb3Bt01+Iz6yRe++BdRQ6378lpiJpw0QLWC37gz
N9SpvgEGjrff1IilQLmwhUMjezr1aGXft1m/hn/tUKdztPlyGmA21gj1g/gcuTX7
NN9pVVw1/dZ+wLyzrkFa6A0Fvhoo3/wW/alyJJfaH47kSZX9twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFElG84c2b0nhHuJucFILJ0D91BSTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDgxODkyYzQtOGQ0YS0z
YjgxLThhOGMtZTgyNjk0NWMwN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRErMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADozHq3yf8lnzEwT34xnmWF47eVta8YX7n315CG4Ev5C3Q8q3yY3gCtw
Sg6FJ/lrOsWQ7H3SiCq+8qFOq76fVS6NsZGpl871smvg78PObJcEcZAHvOckgywn
iCKGsc+8FYj/yjHuQDRTr4lp0zWhVv9gYgaarXxldq3MIRzvCzT7ldzPa4BozJAO
pbe1UnAJ8I68Rhf64IYm+yDVW6kUDuoxaiBWWCtpSMS99Oa/gAbe+eL2P6Fx0wPs
rC1UU9uSC1UCr5oZgAiQ7AGmQVlBgm8NXKOPzcdAiAW0JcqpbAxPclS/sr/eGwfC
pziCcpKtX/DO8DbQVYqDfEkosgWlfLU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:03 2025 by rpki-client