Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c7380ba-5513-3ea9-ab49-5b6875a6f144.roa
File: 0c7380ba-5513-3ea9-ab49-5b6875a6f144.roa (raw, json)
Hash identifier: Sy9t4t4y9o1j6wmUvbN1b0iehLqiEmPjtseYGqkJ9uk=
Subject key identifier: 82:B0:93:F2:D6:24:55:A4:AC:83:19:D8:BA:6F:5A:7A:31:34:01:84
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848854B3E7B8BD38FFFBA105E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c7380ba-5513-3ea9-ab49-5b6875a6f144.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 396549
IP address blocks: 192.42.175.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:3e:7b:8b:d3:8f:ff:ba:10:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=4f2b3cd9-e343-4df7-a87f-28fe7e1ee866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:9b:c5:3a:7e:c7:93:b7:bf:03:bd:0f:a6:
c9:59:3e:93:29:d2:bc:15:4a:88:0d:8b:b3:95:cc:
01:a6:9e:c4:08:b2:12:56:8f:41:e6:fb:98:af:ec:
60:5d:9b:00:67:da:d9:ba:11:c7:56:69:9e:cf:21:
82:4f:04:9a:4a:63:45:1f:09:f2:75:89:db:4b:fe:
e3:6c:aa:68:ee:24:45:5f:e4:7c:63:fa:11:17:c5:
93:60:25:7e:54:fd:6f:c3:19:cc:ca:f6:3d:b8:84:
ec:14:a4:3f:c6:e5:a1:db:e5:18:6b:9b:3c:41:fd:
62:4b:60:0b:54:02:bc:d0:fa:64:5a:c7:2c:a9:ab:
6a:14:22:9b:a0:76:5a:e7:0c:76:5a:e8:15:96:08:
4c:62:02:10:c0:dd:c7:92:82:8b:80:62:7d:83:d6:
c9:fa:b1:24:aa:f3:22:5e:6b:4e:06:96:31:0f:3b:
15:1d:0f:4b:42:45:15:e7:25:45:75:d8:aa:ae:9d:
3a:fb:b2:39:2b:c8:3d:b3:54:34:e0:05:fc:0e:d6:
f7:ab:da:3b:9e:a2:a1:2a:b7:78:6d:17:d4:ae:f5:
d5:3e:ae:de:cf:15:b9:fc:1d:18:92:3b:21:bd:e5:
54:eb:51:3f:63:84:49:28:11:e3:76:d0:f3:24:d5:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B0:93:F2:D6:24:55:A4:AC:83:19:D8:BA:6F:5A:7A:31:34:01:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c7380ba-5513-3ea9-ab49-5b6875a6f144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:2e:5f:86:47:fb:ee:25:2f:1a:79:f6:18:ae:4b:8f:81:10:
d1:c4:7a:1b:38:91:95:c0:7b:94:04:51:a4:98:a9:53:43:5a:
c2:2d:2c:df:a7:a5:43:71:f1:30:ca:6e:f4:8b:2c:94:d3:51:
55:59:17:5a:f9:73:96:32:59:9a:6f:30:21:36:b2:9a:16:d9:
b9:65:30:da:d6:e3:18:2a:a2:e4:91:fd:63:7a:18:ba:df:06:
6a:6f:6b:f4:08:fd:37:0c:44:c7:80:f7:f0:11:68:39:e8:68:
ac:98:aa:4d:16:e0:c5:ae:8d:7a:51:b2:28:95:06:0f:58:71:
d0:2d:c3:74:1a:7a:70:c9:90:5f:a9:5c:87:d6:12:69:fd:a9:
4d:d4:7a:d7:80:de:f6:6d:12:1d:6b:c5:31:f8:f0:46:79:41:
ec:d1:c4:f8:bc:23:f5:55:28:b5:8c:b7:42:31:84:9d:d6:0f:
2c:25:3e:31:e6:95:5e:7a:cc:78:70:97:5d:be:0a:59:bb:e9:
07:e4:a2:c6:98:a4:b8:cf:fe:c6:c8:de:66:69:1c:3e:38:7b:
ea:fd:78:7f:58:59:f3:75:54:57:7f:a9:50:35:06:45:9a:08:
79:45:11:e3:f8:a9:7c:53:9c:a3:e1:c3:05:55:72:cd:29:01:
67:1b:17:17
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiFSz57i9OP/7oQXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
NGYyYjNjZDktZTM0My00ZGY3LWE4N2YtMjhmZTdlMWVlODY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF6bxTp+x5O3vwO9D6bJWT6TKdK8FUqIDYuz
lcwBpp7ECLISVo9B5vuYr+xgXZsAZ9rZuhHHVmmezyGCTwSaSmNFHwnydYnbS/7j
bKpo7iRFX+R8Y/oRF8WTYCV+VP1vwxnMyvY9uITsFKQ/xuWh2+UYa5s8Qf1iS2AL
VAK80PpkWscsqatqFCKboHZa5wx2WugVlghMYgIQwN3HkoKLgGJ9g9bJ+rEkqvMi
XmtOBpYxDzsVHQ9LQkUV5yVFddiqrp06+7I5K8g9s1Q04AX8Dtb3q9o7nqKhKrd4
bRfUrvXVPq7ezxW5/B0YkjshveVU61E/Y4RJKBHjdtDzJNUg5QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIKwk/LWJFWkrIMZ2LpvWnoxNAGEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGM3MzgwYmEtNTUxMy0z
ZWE5LWFiNDktNWI2ODc1YTZmMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBMLl+GR/vuJS8aefYYrkuPgRDRxHobOJGVwHuUBFGkmKlTQ1rCLSzf
p6VDcfEwym70iyyU01FVWRda+XOWMlmabzAhNrKaFtm5ZTDa1uMYKqLkkf1jehi6
3wZqb2v0CP03DETHgPfwEWg56GismKpNFuDFro16UbIolQYPWHHQLcN0GnpwyZBf
qVyH1hJp/alN1HrXgN72bRIda8Ux+PBGeUHs0cT4vCP1VSi1jLdCMYSd1g8sJT4x
5pVeesx4cJddvgpZu+kH5KLGmKS4z/7GyN5maRw+OHvq/Xh/WFnzdVRXf6lQNQZF
mgh5RRHj+Kl8U5yj4cMFVXLNKQFnGxcX
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:15 2025 by rpki-client