Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eea876b2-c56f-3862-8642-3b21e6d3d2e1.roa
File: eea876b2-c56f-3862-8642-3b21e6d3d2e1.roa (raw, json)
Hash identifier: aY27i3X+kmrStVPI/v1tQQuvjjQCpfIl+44vjfcMPes=
Subject key identifier: 9F:FC:9C:90:A7:0D:C0:14:7C:D3:48:47:13:A2:FB:C1:19:00:FE:C8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B7373FDA8C91D6C9B0823700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eea876b2-c56f-3862-8642-3b21e6d3d2e1.roa
Signing time: Thu 30 Jan 2025 11:11:08 +0000
ROA not before: Thu 30 Jan 2025 11:11:08 +0000
ROA not after: Wed 30 Apr 2025 10:11:08 +0000
asID: 30036
IP address blocks: 173.30.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:3f:da:8c:91:d6:c9:b0:82:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:11:08 2025 GMT
Not After : Apr 30 10:11:08 2025 GMT
Subject: CN=8b2c8941-ec5f-4b29-8d7a-bc4e2f6a25d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:c6:e6:ef:93:a9:68:16:7e:ba:80:2e:87:
c3:7e:ee:cc:21:a8:c3:2c:6f:6b:8d:1c:b1:05:0c:
b0:26:89:4b:7a:cd:f2:b9:52:cb:b9:26:46:4f:e5:
09:b5:5f:a7:20:83:57:8e:f8:84:a8:cf:52:02:1b:
19:b1:1a:d6:75:9a:a6:00:f0:09:21:42:65:ac:33:
d4:aa:8f:b3:b8:e9:94:6c:c9:be:1c:0f:53:4f:90:
77:78:55:73:d6:87:f5:b5:e8:8f:8d:18:f9:fe:e2:
50:3c:d2:37:7a:27:9d:00:90:62:3a:44:38:4b:44:
ea:0d:a5:ae:c6:95:f3:08:7b:1b:90:68:cc:cc:a9:
a5:2f:de:a9:22:30:d7:1d:c4:09:ce:54:0e:0b:c3:
04:47:ae:88:9a:92:f5:ff:31:10:e4:df:f8:bc:dc:
38:79:70:c9:8e:80:c4:39:dd:f6:3b:8b:dd:68:35:
48:ec:e0:6a:2e:b1:6b:4f:fb:3c:3e:bb:d9:8c:6c:
29:0d:ee:73:e4:3c:03:db:ff:6f:50:f9:b3:8b:7f:
03:04:46:16:10:8c:94:55:d4:b8:3c:7b:b3:c4:b5:
fc:37:53:a6:29:ee:a3:a4:9d:07:62:3b:a3:04:c4:
bc:9f:da:cf:1e:dc:52:60:01:2f:f6:6a:24:f6:a7:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FC:9C:90:A7:0D:C0:14:7C:D3:48:47:13:A2:FB:C1:19:00:FE:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eea876b2-c56f-3862-8642-3b21e6d3d2e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.30.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:5b:dd:e3:ee:da:7c:b5:0a:2f:c4:4c:ac:96:71:45:34:fc:
dd:f7:ad:ec:76:97:88:2a:26:46:27:6c:b5:af:58:d0:dc:97:
40:e5:d9:b5:9a:a9:9d:4f:47:4e:a7:68:e3:2b:0e:2a:3f:3b:
44:aa:f3:6a:4b:73:81:c8:6a:fe:1f:21:87:d2:2a:b0:12:e7:
ed:a5:4a:b0:c7:1a:3f:c1:1c:90:3a:56:54:48:fe:93:2c:4d:
71:b7:42:d1:4c:7d:3e:dd:7c:46:a7:47:db:4b:fa:99:91:ef:
5e:0c:fb:45:64:5e:0f:7e:8e:7f:6b:bf:f6:61:83:f6:b7:11:
c8:84:8e:14:ea:c7:b4:b7:3f:b1:94:82:f4:85:ce:ce:0f:96:
97:ca:94:cd:50:c0:9f:ce:fd:94:40:cb:c4:85:a0:d6:0d:68:
45:04:80:7a:2e:d7:a7:30:6f:d0:e0:da:cb:f9:78:50:30:a1:
a1:02:fb:a1:e9:3d:50:e5:33:af:5a:04:fd:84:63:b1:11:50:
c2:a1:87:ec:62:2b:28:28:45:84:c0:1f:e1:db:4d:24:34:fe:
5b:fc:f2:ba:5e:42:a0:25:96:be:0b:e9:b4:fa:17:6d:3a:3c:
f5:4e:db:ec:06:92:9c:65:f4:49:72:c7:7f:58:37:e9:09:8c:
b4:62:f3:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Nz/ajJHWybCCNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDEzMDExMTEwOFoXDTI1MDQzMDEwMTEwOFowLzEtMCsGA1UEAxMk
OGIyYzg5NDEtZWM1Zi00YjI5LThkN2EtYmM0ZTJmNmEyNWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUzG5u+TqWgWfrqALofDfu7MIajDLG9rjRyx
BQywJolLes3yuVLLuSZGT+UJtV+nIINXjviEqM9SAhsZsRrWdZqmAPAJIUJlrDPU
qo+zuOmUbMm+HA9TT5B3eFVz1of1teiPjRj5/uJQPNI3eiedAJBiOkQ4S0TqDaWu
xpXzCHsbkGjMzKmlL96pIjDXHcQJzlQOC8MER66ImpL1/zEQ5N/4vNw4eXDJjoDE
Od32O4vdaDVI7OBqLrFrT/s8PrvZjGwpDe5z5DwD2/9vUPmzi38DBEYWEIyUVdS4
PHuzxLX8N1OmKe6jpJ0HYjujBMS8n9rPHtxSYAEv9mok9qcL7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/8nJCnDcAUfNNIRxOi+8EZAP7IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWVhODc2YjItYzU2Zi0z
ODYyLTg2NDItM2IyMWU2ZDNkMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR78MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9b3ePu2ny1Ci/ETKyWcUU0/N33rex2l4gqJkYnbLWvWNDcl0Dl2bWa
qZ1PR06naOMrDio/O0Sq82pLc4HIav4fIYfSKrAS5+2lSrDHGj/BHJA6VlRI/pMs
TXG3QtFMfT7dfEanR9tL+pmR714M+0VkXg9+jn9rv/Zhg/a3EciEjhTqx7S3P7GU
gvSFzs4PlpfKlM1QwJ/O/ZRAy8SFoNYNaEUEgHou16cwb9Dg2sv5eFAwoaEC+6Hp
PVDlM69aBP2EY7ERUMKhh+xiKygoRYTAH+HbTSQ0/lv88rpeQqAllr4L6bT6F206
PPVO2+wGkpxl9Elyx39YN+kJjLRi88I=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:19 2025 by rpki-client