Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17703f2a-70f9-3aac-aeb0-d55583998cfb.roa
File: 17703f2a-70f9-3aac-aeb0-d55583998cfb.roa (raw, json)
Hash identifier: hrvwpuZ1M4wwPYP40aTP6W1EfI7KyoVfUHYvxNgWsHk=
Subject key identifier: 48:DE:65:E7:86:71:4B:74:58:62:DD:E9:8E:84:9C:A6:0E:42:D0:59
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246FC3776A65C69CA153000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17703f2a-70f9-3aac-aeb0-d55583998cfb.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 100.38.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:fc:37:76:a6:5c:69:ca:15:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=3d623cb2-a3c2-4ed4-a871-fc4d03b6d9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:32:d6:cf:ea:59:69:87:73:36:3e:9d:f8:
40:ba:31:46:88:26:47:93:63:c1:7c:a2:45:4c:ea:
d3:da:c6:e9:bb:67:e7:d3:8f:91:54:13:cb:cd:14:
af:d0:0d:0a:13:33:06:07:02:4b:32:0e:c0:64:be:
f6:c9:14:7d:52:14:ad:e3:61:26:c4:fe:ab:55:08:
8f:52:a1:63:50:f1:9d:12:f1:3c:0a:02:dc:0f:b9:
75:47:42:9d:e2:73:ee:8c:4b:cc:c0:fb:dc:0f:60:
2d:91:c1:9e:aa:d8:18:37:cc:7f:6a:11:b4:98:6a:
1f:ee:e9:d1:91:ad:96:79:9f:8a:bd:a4:76:34:a9:
8c:c7:b4:2f:e8:ed:b2:53:98:68:26:e2:a3:d5:14:
ef:79:d9:ed:e7:b5:51:45:9c:bd:a6:53:0c:4e:24:
94:c8:a2:e4:11:a2:94:e5:02:cc:95:07:7a:85:53:
42:7c:32:97:e9:f6:eb:9c:cc:2d:53:8e:a2:92:b4:
9a:5b:c7:90:d8:cc:fe:82:e1:9e:69:f8:91:b3:51:
68:0d:40:25:ee:1e:93:5f:d4:84:70:44:bc:2a:95:
59:f3:cd:49:16:dd:2c:32:4d:52:aa:04:67:8c:99:
7d:2b:2b:ae:98:ca:8f:6e:07:37:ef:58:9a:0e:97:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DE:65:E7:86:71:4B:74:58:62:DD:E9:8E:84:9C:A6:0E:42:D0:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17703f2a-70f9-3aac-aeb0-d55583998cfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
100.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:9b:0e:20:c9:5b:db:32:16:31:53:ab:f5:dd:86:af:14:78:
38:2a:15:e9:9b:47:69:23:3a:39:52:cb:c4:f0:93:44:97:c0:
86:a3:8f:10:85:8c:b5:8c:86:e9:f4:4f:7e:f0:c8:88:79:37:
4f:89:27:13:1e:b6:6a:04:82:0a:e5:a2:4e:7a:02:f9:a0:94:
52:5a:6f:a4:44:39:e2:0f:c0:9a:74:36:e7:36:a4:79:b3:56:
88:d5:1a:cb:4b:96:ed:f1:e0:6d:d2:a9:01:c0:bc:5c:23:c7:
2e:e9:e4:fe:02:46:d2:8c:87:70:dc:09:42:29:82:f5:d8:d4:
96:26:d4:48:4f:d7:e5:74:ee:dd:60:52:97:bd:7e:1b:5e:21:
85:7b:07:60:f1:b0:7b:70:b2:70:2d:d9:f9:a1:54:85:43:6d:
cb:b4:a6:08:88:4c:2f:9e:d7:29:4b:46:5d:50:06:ef:96:55:
4f:f7:67:3f:8d:83:3c:bd:aa:28:9e:98:67:65:6c:be:bb:e3:
f7:2f:d6:a1:df:69:4e:66:e0:21:ba:fb:6f:6f:9c:f8:69:44:
cd:17:3e:3c:bd:15:4d:4e:ee:5e:9c:80:17:44:9f:44:42:db:
09:f1:1e:eb:bf:06:26:eb:83:1c:24:15:1d:ad:89:da:84:c3:
49:49:43:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkSRvw3dqZcacoVMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
M2Q2MjNjYjItYTNjMi00ZWQ0LWE4NzEtZmM0ZDAzYjZkOWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Qy1s/qWWmHczY+nfhAujFGiCZHk2PBfKJF
TOrT2sbpu2fn04+RVBPLzRSv0A0KEzMGBwJLMg7AZL72yRR9UhSt42EmxP6rVQiP
UqFjUPGdEvE8CgLcD7l1R0Kd4nPujEvMwPvcD2AtkcGeqtgYN8x/ahG0mGof7unR
ka2WeZ+KvaR2NKmMx7Qv6O2yU5hoJuKj1RTvednt57VRRZy9plMMTiSUyKLkEaKU
5QLMlQd6hVNCfDKX6fbrnMwtU46ikrSaW8eQ2Mz+guGeafiRs1FoDUAl7h6TX9SE
cES8KpVZ881JFt0sMk1SqgRnjJl9KyuumMqPbgc371iaDpcyawIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEjeZeeGcUt0WGLd6Y6EnKYOQtBZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTc3MDNmMmEtNzBmOS0z
YWFjLWFlYjAtZDU1NTgzOTk4Y2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZCYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMZsOIMlb2zIWMVOr9d2GrxR4OCoV6ZtHaSM6OVLLxPCTRJfAhqOPEIWM
tYyG6fRPfvDIiHk3T4knEx62agSCCuWiTnoC+aCUUlpvpEQ54g/AmnQ25zakebNW
iNUay0uW7fHgbdKpAcC8XCPHLunk/gJG0oyHcNwJQimC9djUlibUSE/X5XTu3WBS
l71+G14hhXsHYPGwe3CycC3Z+aFUhUNty7SmCIhML57XKUtGXVAG75ZVT/dnP42D
PL2qKJ6YZ2Vsvrvj9y/Wod9pTmbgIbr7b2+c+GlEzRc+PL0VTU7uXpyAF0SfRELb
CfEe678GJuuDHCQVHa2J2oTDSUlDCw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:39:57 2025 by rpki-client