Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f886a291-9a36-3e88-9206-9d8eda09913b.roa
File: f886a291-9a36-3e88-9206-9d8eda09913b.roa (raw, json)
Hash identifier: nAe1R32nZUUFvzJhD5HpAGO5RhWU23J9f002++jwWfo=
Subject key identifier: AD:56:4C:AB:CA:70:31:8C:55:F6:32:87:E7:46:ED:EE:97:41:45:52
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C576E3E31A6237CBDBAEF580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f886a291-9a36-3e88-9206-9d8eda09913b.roa
Signing time: Tue 04 Feb 2025 13:40:41 +0000
ROA not before: Tue 04 Feb 2025 13:40:41 +0000
ROA not after: Mon 05 May 2025 12:40:41 +0000
asID: 30036
IP address blocks: 173.21.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:76:e3:e3:1a:62:37:cb:db:ae:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:40:41 2025 GMT
Not After : May 5 12:40:41 2025 GMT
Subject: CN=3634d1ab-a123-4677-bfa3-bd0ae42fdb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:2b:74:15:f1:78:0c:21:b7:b5:c9:f1:11:
45:19:17:69:d9:be:df:9a:9e:97:01:4c:9e:cb:1f:
aa:9c:bd:70:ba:be:43:f9:e1:e3:47:42:29:84:60:
d9:cf:9f:1a:d2:9a:54:d3:54:dd:75:f1:29:1b:34:
2b:dc:59:b3:02:67:4e:1c:e0:e5:d0:24:39:7f:45:
5a:da:e8:2a:22:66:d2:dd:f1:9f:47:ab:29:86:37:
4d:a8:15:7a:cc:bb:c8:2f:6a:95:b9:ec:6c:bc:d7:
7f:00:15:0a:c2:1c:bd:01:6c:ab:f1:b6:44:b6:17:
dc:bc:5f:52:10:80:65:bc:ba:87:09:a6:3d:6a:a2:
af:cc:6e:47:09:39:69:d5:25:c0:28:2d:1c:92:0c:
4d:c6:b1:bf:a6:fa:a5:f2:92:1d:1d:64:7e:12:53:
56:9a:1a:b9:12:d7:4f:c8:27:51:90:98:9c:68:ff:
b2:91:5d:06:98:37:11:8f:6c:40:5a:2f:85:08:95:
fd:48:4f:7c:10:1c:37:85:7b:db:6f:dd:90:8f:c4:
0a:ff:63:47:b6:10:6f:f8:2b:30:41:18:a6:8f:50:
5b:91:39:a0:01:a1:e5:16:90:3e:f9:18:b1:34:20:
8d:8e:26:7c:f3:7e:57:20:a7:a2:0c:ce:bf:36:bd:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:56:4C:AB:CA:70:31:8C:55:F6:32:87:E7:46:ED:EE:97:41:45:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f886a291-9a36-3e88-9206-9d8eda09913b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:4a:f2:7d:95:b2:8e:ba:b7:30:87:dc:78:b2:c3:1e:24:ba:
46:0c:5e:92:5d:1a:41:e1:c5:e1:df:c7:c0:af:5f:40:88:e8:
8b:54:66:0f:ea:dc:90:46:2d:65:7c:e9:8f:a3:5c:7b:06:cd:
ad:f2:0c:5c:ad:19:39:e8:85:15:68:eb:41:42:4f:db:f5:5a:
c9:4e:f2:f6:63:d6:c0:6a:6d:2d:2c:29:40:de:6f:0c:d7:80:
3e:c6:4e:37:fe:15:72:71:c4:e5:fb:74:0b:4f:0d:75:0a:30:
07:e4:ba:3d:13:68:f4:d1:7b:88:52:5a:5d:db:38:05:2f:5f:
29:c2:b4:50:9e:6f:b4:7c:a1:8a:b3:bc:f8:86:7a:86:24:5e:
e6:25:b5:b1:16:45:81:ad:b1:96:f9:87:73:cd:88:c1:3c:6b:
6c:02:5b:5e:11:f7:d0:9d:4e:a1:09:43:06:a0:1b:ec:06:64:
87:dd:22:32:33:9a:e3:5d:64:ba:ae:f2:82:b0:cd:2c:ff:6c:
6f:25:e4:59:41:d6:5e:26:49:ea:ea:42:ad:ae:1c:30:59:6c:
ea:12:d4:aa:9e:29:c1:ec:1e:f6:18:15:5e:3b:fd:7b:d3:0a:
2f:bd:d3:83:69:ba:6f:41:df:4d:64:17:5d:4e:5b:9b:bd:a6:
a4:9b:ed:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFduPjGmI3y9uu9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNDA0MVoXDTI1MDUwNTEyNDA0MVowLzEtMCsGA1UEAxMk
MzYzNGQxYWItYTEyMy00Njc3LWJmYTMtYmQwYWU0MmZkYjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D0rdBXxeAwht7XJ8RFFGRdp2b7fmp6XAUye
yx+qnL1wur5D+eHjR0IphGDZz58a0ppU01TddfEpGzQr3FmzAmdOHODl0CQ5f0Va
2ugqImbS3fGfR6sphjdNqBV6zLvIL2qVuexsvNd/ABUKwhy9AWyr8bZEthfcvF9S
EIBlvLqHCaY9aqKvzG5HCTlp1SXAKC0ckgxNxrG/pvql8pIdHWR+ElNWmhq5EtdP
yCdRkJicaP+ykV0GmDcRj2xAWi+FCJX9SE98EBw3hXvbb92Qj8QK/2NHthBv+Csw
QRimj1BbkTmgAaHlFpA++RixNCCNjiZ8835XIKeiDM6/Nr0FyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK1WTKvKcDGMVfYyh+dG7e6XQUVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjg4NmEyOTEtOWEzNi0z
ZTg4LTkyMDYtOWQ4ZWRhMDk5MTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENK8n2Vso66tzCH3Hiywx4kukYMXpJdGkHhxeHfx8CvX0CI6ItUZg/q
3JBGLWV86Y+jXHsGza3yDFytGTnohRVo60FCT9v1WslO8vZj1sBqbS0sKUDebwzX
gD7GTjf+FXJxxOX7dAtPDXUKMAfkuj0TaPTRe4hSWl3bOAUvXynCtFCeb7R8oYqz
vPiGeoYkXuYltbEWRYGtsZb5h3PNiME8a2wCW14R99CdTqEJQwagG+wGZIfdIjIz
muNdZLqu8oKwzSz/bG8l5FlB1l4mSerqQq2uHDBZbOoS1KqeKcHsHvYYFV47/XvT
Ci+904Npum9B301kF11OW5u9pqSb7bg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:41 2025 by rpki-client