Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa
File: db192c87-71b8-3a46-a574-845bd837a8f4.roa (raw, json)
Hash identifier: 1VovEmQgXRRSc4lB/uPBQPBlzp1DtkJH1P2RVdN6XHg=
Subject key identifier: 8C:FF:B4:26:2A:AA:AE:4B:46:33:24:EC:81:AC:1E:EE:8B:E4:B3:E4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C53421C1A79F908C83337100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa
Signing time: Tue 04 Feb 2025 11:26:10 +0000
ROA not before: Tue 04 Feb 2025 11:26:10 +0000
ROA not after: Mon 05 May 2025 10:26:10 +0000
asID: 30036
IP address blocks: 173.31.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:34:21:c1:a7:9f:90:8c:83:33:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:26:10 2025 GMT
Not After : May 5 10:26:10 2025 GMT
Subject: CN=4ad2fba4-188c-46b8-8710-c7ed7377a973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:f2:10:06:e4:a7:61:ba:88:33:11:17:5c:
8a:54:1e:77:76:0e:96:c7:3e:34:96:ee:fd:80:bd:
d3:ab:3f:fd:21:9a:0e:9f:d9:4a:37:21:6e:6d:8a:
27:79:e8:11:21:ea:97:15:b7:91:b9:e9:5d:52:36:
18:d0:5f:b1:4e:89:35:b0:5f:38:89:c4:a0:a4:78:
a5:42:a0:eb:d4:47:01:42:61:ba:44:4d:0a:a4:6c:
3d:03:e0:eb:95:43:d6:a1:8e:aa:31:2a:73:cb:7b:
8b:70:be:44:3f:fc:6d:e6:5c:85:b8:47:2b:6e:c1:
aa:b4:d1:51:35:6d:ba:bc:ae:d9:34:30:91:78:b1:
fb:1f:eb:30:41:2d:70:05:9e:55:45:ef:2e:d5:79:
e9:a7:68:44:45:3e:50:ff:d8:2e:9f:14:41:a9:ff:
06:46:1b:6f:b5:70:f9:cb:30:83:a7:3a:64:3c:88:
b1:c2:44:7a:c9:59:04:e0:86:9f:89:bb:c2:e5:26:
d5:54:8b:77:00:bf:bf:6e:80:48:4d:de:f7:08:bc:
bd:94:53:84:ab:49:44:d9:46:65:74:ea:b5:b4:2e:
2a:b5:b6:b4:dd:d7:ac:45:35:e4:86:74:c3:e3:34:
f4:26:4d:2f:be:f9:3d:fb:8e:4d:3f:cd:a9:7f:be:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FF:B4:26:2A:AA:AE:4B:46:33:24:EC:81:AC:1E:EE:8B:E4:B3:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:9f:bd:69:20:c6:64:07:96:1c:6f:ba:19:45:19:f1:9d:99:
90:36:f6:c4:20:8e:70:3a:85:70:ad:94:f9:60:48:6e:77:63:
08:cb:84:63:22:4f:0f:20:64:9b:7e:d9:70:3e:83:ec:a8:2d:
0b:1a:a0:44:20:83:7d:dd:43:73:96:73:31:0a:72:26:44:c0:
6b:7e:05:b8:a6:38:69:c9:a7:ac:a5:2f:57:b1:71:47:64:3b:
b2:ba:3a:19:a6:b0:98:f7:c2:67:ba:ee:7d:bc:77:ce:18:3e:
4d:c3:4e:aa:e5:5c:f5:09:48:38:bc:2a:37:97:a8:51:08:4f:
b3:03:0a:41:e4:f4:f1:73:a5:69:bb:e3:5a:52:f4:51:71:91:
cd:01:8b:ce:dd:1a:25:5a:5c:06:c8:16:e4:09:f3:09:38:42:
92:69:bf:e9:5a:35:6e:bb:17:f0:18:b1:36:28:58:52:32:08:
cb:1c:e5:ea:a3:28:22:e2:f4:bd:22:7e:7f:74:3b:36:b0:da:
0e:04:c5:42:fd:3c:27:e6:02:25:cc:75:fb:7d:3f:b6:a4:ef:
83:5c:e3:d1:a0:17:2d:77:05:da:8e:c9:a3:6e:2b:c4:20:27:
82:d9:82:88:9f:ad:b6:a4:e8:36:5e:c1:92:f0:9f:8f:8a:cc:
8f:d4:70:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFNCHBp5+QjIMzcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDExMjYxMFoXDTI1MDUwNTEwMjYxMFowLzEtMCsGA1UEAxMk
NGFkMmZiYTQtMTg4Yy00NmI4LTg3MTAtYzdlZDczNzdhOTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y/yEAbkp2G6iDMRF1yKVB53dg6Wxz40lu79
gL3Tqz/9IZoOn9lKNyFubYoneegRIeqXFbeRueldUjYY0F+xTok1sF84icSgpHil
QqDr1EcBQmG6RE0KpGw9A+DrlUPWoY6qMSpzy3uLcL5EP/xt5lyFuEcrbsGqtNFR
NW26vK7ZNDCReLH7H+swQS1wBZ5VRe8u1Xnpp2hERT5Q/9gunxRBqf8GRhtvtXD5
yzCDpzpkPIixwkR6yVkE4IafibvC5SbVVIt3AL+/boBITd73CLy9lFOEq0lE2UZl
dOq1tC4qtba03desRTXkhnTD4zT0Jk0vvvk9+45NP82pf76kMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIz/tCYqqq5LRjMk7IGsHu6L5LPkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGIxOTJjODctNzFiOC0z
YTQ2LWE1NzQtODQ1YmQ4MzdhOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGfvWkgxmQHlhxvuhlFGfGdmZA29sQgjnA6hXCtlPlgSG53YwjLhGMi
Tw8gZJt+2XA+g+yoLQsaoEQgg33dQ3OWczEKciZEwGt+BbimOGnJp6ylL1excUdk
O7K6OhmmsJj3wme67n28d84YPk3DTqrlXPUJSDi8KjeXqFEIT7MDCkHk9PFzpWm7
41pS9FFxkc0Bi87dGiVaXAbIFuQJ8wk4QpJpv+laNW67F/AYsTYoWFIyCMsc5eqj
KCLi9L0ifn90Ozaw2g4ExUL9PCfmAiXMdft9P7ak74Nc49GgFy13BdqOyaNuK8Qg
J4LZgoifrbak6DZewZLwn4+KzI/UcH0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:25 2025 by rpki-client