Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/115511aa-ec4d-3478-a2fe-4c8c804226d6.roa
File: 115511aa-ec4d-3478-a2fe-4c8c804226d6.roa (raw, json)
Hash identifier: b+4t/0i6hMTrXKQehP3UaVBFk1hTbpfqSyGbxuX6hx8=
Subject key identifier: DE:5F:DA:C5:C6:21:D8:47:93:3F:FF:AE:28:8A:4B:C5:75:63:20:74
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848CB089E86AD8A19E046727B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/115511aa-ec4d-3478-a2fe-4c8c804226d6.roa
Signing time: Thu 06 Feb 2025 13:33:21 +0000
ROA not before: Thu 06 Feb 2025 13:33:21 +0000
ROA not after: Wed 07 May 2025 12:33:21 +0000
asID: 396575
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:08:9e:86:ad:8a:19:e0:46:72:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 6 13:33:21 2025 GMT
Not After : May 7 12:33:21 2025 GMT
Subject: CN=90463f8b-6ee7-4c4a-b19e-3d582f785832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:e7:b8:80:b2:c1:84:fc:da:e7:6b:2f:65:
60:a9:bb:ff:d1:4d:85:29:da:d4:fe:40:26:58:bf:
82:f5:a2:0c:0a:da:32:b1:23:c7:e2:b6:db:80:43:
16:20:21:b1:e8:6c:f4:9d:b0:37:7f:6c:50:a3:43:
bb:5d:a4:44:ba:92:c4:ac:88:86:de:a0:6b:f2:f1:
b8:08:c7:a6:d3:96:d0:2b:30:b7:98:ca:b3:22:67:
60:58:a4:09:dc:b8:ef:71:01:c3:bb:94:f2:e4:1b:
98:28:48:ab:a7:3f:9a:48:03:bb:61:4b:dc:9d:fb:
c1:5f:ec:06:c0:23:27:05:5f:08:0b:c7:7d:ec:68:
bb:70:53:dd:26:3c:e7:dd:df:68:b1:76:e9:06:28:
42:e8:9f:a9:57:46:b2:19:59:41:b7:8d:4e:df:86:
9a:a1:04:a2:d2:b0:4c:74:c9:f1:7c:a5:4c:d7:d6:
a5:00:91:0c:91:46:20:08:59:79:39:7e:18:d7:6d:
43:58:af:e9:87:7e:1d:cd:47:63:3d:df:55:17:cd:
63:82:c9:d7:57:7a:70:95:97:26:74:90:50:72:11:
2e:5c:51:00:a0:57:97:af:7f:b7:b7:ed:40:7c:0c:
94:5f:ba:84:42:f6:3a:99:89:69:a6:66:e9:b6:b2:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5F:DA:C5:C6:21:D8:47:93:3F:FF:AE:28:8A:4B:C5:75:63:20:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/115511aa-ec4d-3478-a2fe-4c8c804226d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:64:17:c1:f4:cd:8c:fc:de:f0:71:78:36:e3:d6:e7:5c:2a:
f2:73:58:16:5d:ed:0d:78:6a:cd:73:6b:2b:cf:20:5f:88:66:
bb:4c:a9:bf:77:be:bb:7d:ce:08:4a:83:c0:e3:c9:f8:03:ad:
c1:87:37:a0:b1:06:09:ec:54:1a:59:12:40:c8:24:d6:7b:06:
f6:e4:e9:16:12:eb:67:0d:6a:55:ae:47:a5:7a:98:62:f6:bb:
b1:85:b2:38:39:ac:00:bb:cc:1a:b7:21:49:83:e4:dc:9b:7a:
86:53:29:02:02:d9:49:36:a7:a1:a0:d6:2a:b0:cb:8c:f2:20:
4a:03:33:07:47:a0:e9:3a:ff:9e:42:1c:93:b1:b6:0a:b1:1f:
db:96:b4:60:c1:af:1e:6b:e7:e2:2f:40:0b:06:4e:aa:a6:46:
4b:2d:1b:15:e1:d9:71:e2:c1:9f:fc:ac:35:58:f7:09:93:12:
26:ee:cb:a3:4b:cc:f2:fd:69:2a:2b:42:c6:ba:74:3a:b3:05:
d3:ad:dc:71:8c:90:98:0e:64:2b:02:7e:05:89:5e:76:e0:af:
51:f0:e4:a4:71:87:76:07:d3:56:5b:ed:e2:57:a0:7a:53:33:
45:6b:a8:08:57:de:d6:b2:7f:bc:bb:e4:7c:96:74:e8:e9:23:
7a:29:59:66
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjLCJ6GrYoZ4EZye4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwNjEzMzMyMVoXDTI1MDUwNzEyMzMyMVowLzEtMCsGA1UEAxMk
OTA0NjNmOGItNmVlNy00YzRhLWIxOWUtM2Q1ODJmNzg1ODMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk7nuICywYT82udrL2Vgqbv/0U2FKdrU/kAm
WL+C9aIMCtoysSPH4rbbgEMWICGx6Gz0nbA3f2xQo0O7XaREupLErIiG3qBr8vG4
CMem05bQKzC3mMqzImdgWKQJ3LjvcQHDu5Ty5BuYKEirpz+aSAO7YUvcnfvBX+wG
wCMnBV8IC8d97Gi7cFPdJjzn3d9osXbpBihC6J+pV0ayGVlBt41O34aaoQSi0rBM
dMnxfKVM19alAJEMkUYgCFl5OX4Y121DWK/ph34dzUdjPd9VF81jgsnXV3pwlZcm
dJBQchEuXFEAoFeXr3+3t+1AfAyUX7qEQvY6mYlppmbptrJdNQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFN5f2sXGIdhHkz//riiKS8V1YyB0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTE1NTExYWEtZWM0ZC0z
NDc4LWEyZmUtNGM4YzgwNDIyNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBdZBfB9M2M/N7wcXg249bnXCryc1gWXe0NeGrNc2srzyBfiGa7TKm/
d767fc4ISoPA48n4A63BhzegsQYJ7FQaWRJAyCTWewb25OkWEutnDWpVrkelephi
9ruxhbI4OawAu8watyFJg+Tcm3qGUykCAtlJNqehoNYqsMuM8iBKAzMHR6DpOv+e
QhyTsbYKsR/blrRgwa8ea+fiL0ALBk6qpkZLLRsV4dlx4sGf/Kw1WPcJkxIm7suj
S8zy/WkqK0LGunQ6swXTrdxxjJCYDmQrAn4FiV524K9R8OSkcYd2B9NWW+3iV6B6
UzNFa6gIV97Wsn+8u+R8lnTo6SN6KVlm
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:30 2025 by rpki-client