Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd73dbe4-33c1-36bf-8e62-a6ee1b715b6b.roa
File: dd73dbe4-33c1-36bf-8e62-a6ee1b715b6b.roa (raw, json)
Hash identifier: CQzvrzUh1Ci38iaudB1AvNud5uexnjUnEooB+U+vhNA=
Subject key identifier: C4:94:02:20:2C:72:25:E0:DD:F7:B8:59:14:A2:24:2B:E9:A2:3E:56
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C558D474001651ED31C6D580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd73dbe4-33c1-36bf-8e62-a6ee1b715b6b.roa
Signing time: Tue 04 Feb 2025 12:40:07 +0000
ROA not before: Tue 04 Feb 2025 12:40:07 +0000
ROA not after: Mon 05 May 2025 11:40:07 +0000
asID: 30036
IP address blocks: 173.31.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:d4:74:00:16:51:ed:31:c6:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:40:07 2025 GMT
Not After : May 5 11:40:07 2025 GMT
Subject: CN=a06b9756-d56b-4375-afd4-6caf634ca58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b6:1c:1c:e4:e1:bd:18:c5:d7:2e:7c:f9:d5:
c5:42:7a:25:cc:8b:da:46:49:aa:d7:5e:1b:d5:33:
35:8d:99:83:ea:d8:7f:34:04:23:6f:df:e2:e3:d1:
0a:9e:ce:ef:6f:bf:b9:45:c8:b9:3a:5a:8b:dc:65:
b2:76:3c:ce:fe:7f:96:fd:ac:55:c0:c4:ac:da:0f:
27:e2:8f:b1:92:e0:cf:c5:3c:17:4a:0d:bc:3f:5d:
c8:8e:fa:9b:f2:3b:13:38:0f:3c:a8:7f:98:86:02:
8c:f0:67:22:ea:85:c7:fa:d5:88:93:f4:1c:f0:bc:
f2:f1:2a:7a:30:64:cc:5f:27:77:f1:46:3f:99:1b:
9a:f1:25:b4:f5:a4:27:4f:bc:e6:3a:60:38:de:2d:
1e:e2:fb:2d:a6:ba:06:c7:ce:c1:3a:fc:57:32:59:
22:b6:13:e3:68:26:cb:69:25:07:4c:00:8e:d6:48:
95:50:c6:68:0e:d0:97:e5:8c:7a:d9:26:a4:db:d1:
d7:10:f3:d2:02:a2:2e:e5:e7:dd:5b:1b:70:43:68:
79:9d:33:52:bb:0e:f6:55:f0:9d:e3:bc:9a:92:1a:
56:ef:85:d5:8e:63:6a:dc:a7:d6:e4:44:2e:dc:20:
6d:6b:84:15:c9:d3:c9:d9:72:35:03:8a:e4:18:85:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:94:02:20:2C:72:25:E0:DD:F7:B8:59:14:A2:24:2B:E9:A2:3E:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd73dbe4-33c1-36bf-8e62-a6ee1b715b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:0b:65:37:3a:83:8c:a8:22:c1:ca:1d:94:58:fb:63:6d:00:
5f:98:20:fa:40:d6:f1:61:3c:71:70:cc:61:c6:f0:c8:d4:04:
b7:b8:7f:a0:ce:cd:32:7e:3d:46:3f:85:e2:78:2d:d9:08:9c:
78:c0:f9:30:59:e3:dc:1a:6a:4a:6b:2f:97:e1:97:03:d6:cb:
ab:03:40:42:39:f1:4d:11:25:10:8b:b0:f7:b5:b6:10:3c:f9:
7d:12:75:3b:15:20:d0:96:c9:87:e3:65:0f:51:3c:8c:8a:3b:
73:ef:32:b4:37:f4:d1:19:25:77:fc:b0:90:d6:b2:85:a9:54:
77:14:4b:33:11:a2:55:55:61:e4:37:cf:d5:6c:af:6c:0a:fd:
d3:dc:80:9b:8e:59:b8:32:c5:00:bc:4c:21:26:41:86:0e:9c:
43:3c:1c:0a:ec:89:88:18:27:6b:9c:36:86:cf:ac:62:58:13:
a3:57:2a:cd:7f:f1:69:fd:38:a2:c5:1e:f6:e8:55:78:a8:cb:
f6:a2:9a:8a:f5:dc:43:89:de:fd:52:3e:91:35:53:2b:18:46:
e6:1a:2f:44:f9:6a:d4:a7:4b:aa:7d:f0:23:8d:52:27:ee:8f:
43:40:69:91:93:1e:86:1c:a9:f0:b4:6d:ff:a1:49:c6:c0:be:
74:d1:2c:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWNR0ABZR7THG1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEyNDAwN1oXDTI1MDUwNTExNDAwN1owLzEtMCsGA1UEAxMk
YTA2Yjk3NTYtZDU2Yi00Mzc1LWFmZDQtNmNhZjYzNGNhNThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77YcHOThvRjF1y58+dXFQnolzIvaRkmq114b
1TM1jZmD6th/NAQjb9/i49EKns7vb7+5Rci5OlqL3GWydjzO/n+W/axVwMSs2g8n
4o+xkuDPxTwXSg28P13Ijvqb8jsTOA88qH+YhgKM8Gci6oXH+tWIk/Qc8Lzy8Sp6
MGTMXyd38UY/mRua8SW09aQnT7zmOmA43i0e4vstproGx87BOvxXMlkithPjaCbL
aSUHTACO1kiVUMZoDtCX5Yx62Sak29HXEPPSAqIu5efdWxtwQ2h5nTNSuw72VfCd
47yakhpW74XVjmNq3KfW5EQu3CBta4QVydPJ2XI1A4rkGIUbqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSUAiAsciXg3fe4WRSiJCvpoj5WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGQ3M2RiZTQtMzNjMS0z
NmJmLThlNjItYTZlZTFiNzE1YjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR89MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYLZTc6g4yoIsHKHZRY+2NtAF+YIPpA1vFhPHFwzGHG8MjUBLe4f6DO
zTJ+PUY/heJ4LdkInHjA+TBZ49waakprL5fhlwPWy6sDQEI58U0RJRCLsPe1thA8
+X0SdTsVINCWyYfjZQ9RPIyKO3PvMrQ39NEZJXf8sJDWsoWpVHcUSzMRolVVYeQ3
z9Vsr2wK/dPcgJuOWbgyxQC8TCEmQYYOnEM8HArsiYgYJ2ucNobPrGJYE6NXKs1/
8Wn9OKLFHvboVXioy/aimor13EOJ3v1SPpE1UysYRuYaL0T5atSnS6p98CONUifu
j0NAaZGTHoYcqfC0bf+hScbAvnTRLB4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:52 2025 by rpki-client