Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa
File: c0286517-a220-316a-b592-8b2237a7fea3.roa (raw, json)
Hash identifier: LCQ0CO9jrAr0i5ZIPkASgOSiz+EkYnUBWtkDFdXPiDw=
Subject key identifier: C1:70:C6:3D:7B:AB:FE:44:0A:36:73:B1:E4:6F:1D:FB:A2:5B:26:C4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F63BC3D55439AB93875280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa
Signing time: Wed 05 Feb 2025 11:08:53 +0000
ROA not before: Wed 05 Feb 2025 11:08:53 +0000
ROA not after: Tue 06 May 2025 10:08:53 +0000
asID: 30036
IP address blocks: 173.17.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f6:3b:c3:d5:54:39:ab:93:87:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:08:53 2025 GMT
Not After : May 6 10:08:53 2025 GMT
Subject: CN=4d9c972b-13e7-4a31-ab42-ed98861f9734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:54:cd:21:11:4b:00:79:90:20:41:e4:4e:
59:11:17:8c:fd:d6:5a:36:55:d3:23:d4:6b:fb:16:
26:74:7e:51:70:11:f1:62:d2:64:3d:54:a5:3c:fd:
9e:7f:d8:04:66:8a:5e:0d:88:59:50:6a:88:3f:94:
07:86:12:47:98:18:c4:77:2a:a9:5a:b1:b7:ce:32:
20:52:ad:94:8e:72:62:62:a5:3a:97:54:8a:79:01:
07:4d:4f:d9:d2:60:7d:f6:9d:33:59:7c:35:7c:09:
81:31:ac:ec:0e:55:d0:a2:71:40:35:52:f2:4f:fd:
9a:4d:57:93:47:63:3c:a0:74:b7:3e:c9:c1:b4:a9:
cf:fc:11:62:fe:47:d7:ab:68:16:47:be:94:15:15:
ac:5f:58:f4:3e:82:0e:ff:44:d1:5f:25:3f:d2:29:
a0:ac:72:40:80:60:a9:40:3e:11:e4:b6:2f:ca:83:
06:00:86:44:06:2d:25:dd:e7:47:0e:32:da:97:a9:
69:ff:b5:1d:74:8c:ab:4f:25:c2:20:31:fb:2b:ff:
c9:56:97:94:d1:83:37:05:33:a7:db:a1:33:02:6b:
60:12:fa:df:e4:9c:bb:81:e2:63:b6:03:a1:8b:f6:
7d:91:4f:d5:f2:8c:e0:ec:2e:7b:19:a9:b8:9e:5f:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:70:C6:3D:7B:AB:FE:44:0A:36:73:B1:E4:6F:1D:FB:A2:5B:26:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:64:76:ec:7f:b2:f8:e5:5c:8f:c6:5e:01:9d:bb:59:46:3c:
63:30:6a:67:40:89:a6:3a:55:77:52:8b:dc:19:eb:6c:d0:cc:
f6:46:9f:ec:39:a8:45:f8:7e:19:8d:73:28:fd:41:8d:84:90:
6b:21:21:4b:6b:cd:33:68:2b:b8:05:63:c9:67:bd:88:79:60:
31:53:ac:4b:b0:c7:66:2a:5c:a5:fe:0b:de:94:96:af:c9:2e:
46:df:23:84:81:90:af:0e:18:82:4a:a4:c2:c5:a6:22:c0:3a:
10:f5:fe:44:7c:4e:1b:81:4f:5b:01:08:bb:66:d7:c8:dd:a0:
9d:36:c7:b5:a1:5d:6c:95:56:9f:70:1a:ce:8d:44:fb:84:27:
8d:5a:95:aa:c5:0c:fe:7f:93:f3:9f:3c:c7:df:d3:a4:08:44:
2a:bf:4a:a3:cb:1c:a6:28:50:23:f3:ea:64:df:12:00:ec:29:
0b:ca:e0:82:89:86:d4:9e:93:82:19:75:ae:c7:c5:6b:d4:f2:
0e:47:74:c4:38:61:be:9f:2f:52:cf:23:6f:73:d2:61:e8:66:
8c:2d:0f:2d:86:6e:6e:7e:bb:6c:fe:01:a9:d6:5b:38:00:19:
73:a3:bb:41:52:32:d3:4b:ae:ca:c5:a0:00:c7:ea:17:e2:bd:
04:c4:85:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9jvD1VQ5q5OHUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNTExMDg1M1oXDTI1MDUwNjEwMDg1M1owLzEtMCsGA1UEAxMk
NGQ5Yzk3MmItMTNlNy00YTMxLWFiNDItZWQ5ODg2MWY5NzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApplUzSERSwB5kCBB5E5ZEReM/dZaNlXTI9Rr
+xYmdH5RcBHxYtJkPVSlPP2ef9gEZopeDYhZUGqIP5QHhhJHmBjEdyqpWrG3zjIg
Uq2UjnJiYqU6l1SKeQEHTU/Z0mB99p0zWXw1fAmBMazsDlXQonFANVLyT/2aTVeT
R2M8oHS3PsnBtKnP/BFi/kfXq2gWR76UFRWsX1j0PoIO/0TRXyU/0imgrHJAgGCp
QD4R5LYvyoMGAIZEBi0l3edHDjLal6lp/7UddIyrTyXCIDH7K//JVpeU0YM3BTOn
26EzAmtgEvrf5Jy7geJjtgOhi/Z9kU/V8ozg7C57Gam4nl9ezwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFwxj17q/5ECjZzseRvHfuiWybEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzAyODY1MTctYTIyMC0z
MTZhLWI1OTItOGIyMjM3YTdmZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1kdux/svjlXI/GXgGdu1lGPGMwamdAiaY6VXdSi9wZ62zQzPZGn+w5
qEX4fhmNcyj9QY2EkGshIUtrzTNoK7gFY8lnvYh5YDFTrEuwx2YqXKX+C96Ulq/J
LkbfI4SBkK8OGIJKpMLFpiLAOhD1/kR8ThuBT1sBCLtm18jdoJ02x7WhXWyVVp9w
Gs6NRPuEJ41alarFDP5/k/OfPMff06QIRCq/SqPLHKYoUCPz6mTfEgDsKQvK4IKJ
htSek4IZda7HxWvU8g5HdMQ4Yb6fL1LPI29z0mHoZowtDy2Gbm5+u2z+AanWWzgA
GXOju0FSMtNLrsrFoADH6hfivQTEhdU=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:20 2025 by rpki-client on console.sobornost.net