Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3337df80-a721-3a71-a21b-9cd4c5ec1046.roa
File: 3337df80-a721-3a71-a21b-9cd4c5ec1046.roa (raw, json)
Hash identifier: hB2/9zYRd1R8gsKJwlLRaCJZwjZQ9sFPqJLozIqluOs=
Subject key identifier: AC:F9:69:6F:30:E7:38:F3:E2:08:5C:E3:E9:B5:E6:DE:FE:C9:3E:58
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BA8B43E021DD6AA1CE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3337df80-a721-3a71-a21b-9cd4c5ec1046.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396545
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ba:8b:43:e0:21:dd:6a:a1:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=9957bea6-f7a8-4943-9683-1230d0cc247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1d:93:b9:01:d3:92:de:6d:74:77:c2:8f:20:
f5:ac:4a:e5:15:ac:01:53:29:5c:4c:91:14:b5:93:
ee:46:50:19:49:52:2e:16:a4:29:75:ce:c9:ec:2c:
b3:d7:b8:9d:a7:c2:d7:d2:89:14:88:27:32:56:ca:
2c:49:23:38:82:75:b5:5a:16:95:53:47:0d:94:2f:
31:94:7f:a8:1c:50:61:80:dd:30:b2:75:d3:d0:7b:
1d:9a:dc:73:fb:b9:7c:d1:a5:a7:39:a9:e8:2f:9b:
4d:2a:92:c4:a8:68:0e:f0:ba:fb:aa:5f:ac:20:7f:
a2:2d:bc:db:5c:21:5d:6c:76:9b:30:29:3e:f3:cd:
d2:d5:83:1f:56:87:06:86:99:77:50:07:d7:19:8d:
a9:b2:ff:80:6a:f5:05:ea:c9:a9:65:f2:6d:08:e0:
20:e6:9f:46:0a:3a:f5:8a:d7:4c:da:fb:38:2b:24:
ad:ea:b3:d3:68:f7:d0:c7:fa:09:de:45:ef:75:0a:
db:ab:aa:1d:45:19:80:7c:0c:e2:90:59:49:90:c9:
0f:8d:f4:ff:9a:06:e7:4c:77:47:37:e7:9b:46:a3:
45:68:8d:9f:64:84:a6:c1:b8:97:e0:a8:38:2b:33:
2f:d0:99:07:13:a5:1e:27:8f:7c:79:3b:2a:dd:a5:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:69:6F:30:E7:38:F3:E2:08:5C:E3:E9:B5:E6:DE:FE:C9:3E:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3337df80-a721-3a71-a21b-9cd4c5ec1046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:ce:7e:18:82:49:9a:3f:c6:91:bc:20:24:4a:fd:f8:00:df:
2f:ba:8c:a6:4f:6b:ba:16:bd:6e:4f:86:ca:b2:01:44:70:39:
02:18:1a:c3:5e:b0:ab:4a:c1:3b:fc:0c:87:55:d5:22:34:4a:
aa:ca:cf:be:bb:f6:42:5e:e4:f1:2a:23:2a:3e:d4:10:63:33:
d9:5c:83:ea:5b:d3:43:65:e2:03:57:a1:04:f8:92:b6:da:e1:
d8:7b:98:79:72:66:df:6e:f4:79:59:43:6b:ae:49:bf:6b:b9:
66:df:cf:56:47:d6:3c:12:5f:d8:e6:a0:65:48:b0:64:1d:3f:
88:7e:be:05:20:62:82:bc:44:d2:9c:0a:e3:f2:03:29:50:05:
85:75:8f:9f:e7:e7:59:44:af:14:ac:14:90:2e:27:37:ff:2f:
07:32:10:0c:cf:30:b1:1d:9f:42:9d:5f:e5:1c:4f:d3:a4:2d:
79:66:26:9f:e9:c5:6b:f5:b7:1a:d3:e4:ac:d1:a0:af:a2:c0:
dd:7f:98:4e:d6:d4:ba:d0:e0:e8:1a:4c:ba:b0:43:49:76:99:
e5:42:8b:3f:d3:82:cd:58:3d:38:9b:b1:d3:46:96:ce:98:17:
54:01:0b:fb:81:f9:ea:2c:16:2f:aa:24:db:4c:7f:62:4a:62:
d8:ab:5a:35
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMLqLQ+Ah3WqhzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
OTk1N2JlYTYtZjdhOC00OTQzLTk2ODMtMTIzMGQwY2MyNDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh2TuQHTkt5tdHfCjyD1rErlFawBUylcTJEU
tZPuRlAZSVIuFqQpdc7J7Cyz17idp8LX0okUiCcyVsosSSM4gnW1WhaVU0cNlC8x
lH+oHFBhgN0wsnXT0Hsdmtxz+7l80aWnOanoL5tNKpLEqGgO8Lr7ql+sIH+iLbzb
XCFdbHabMCk+883S1YMfVocGhpl3UAfXGY2psv+AavUF6smpZfJtCOAg5p9GCjr1
itdM2vs4KySt6rPTaPfQx/oJ3kXvdQrbq6odRRmAfAzikFlJkMkPjfT/mgbnTHdH
N+ebRqNFaI2fZISmwbiX4Kg4KzMv0JkHE6UeJ498eTsq3aUs+QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKz5aW8w5zjz4ghc4+m15t7+yT5YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzMzN2RmODAtYTcyMS0z
YTcxLWEyMWItOWNkNGM1ZWMxMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBczn4YgkmaP8aRvCAkSv34AN8vuoymT2u6Fr1uT4bKsgFEcDkCGBrD
XrCrSsE7/AyHVdUiNEqqys++u/ZCXuTxKiMqPtQQYzPZXIPqW9NDZeIDV6EE+JK2
2uHYe5h5cmbfbvR5WUNrrkm/a7lm389WR9Y8El/Y5qBlSLBkHT+Ifr4FIGKCvETS
nArj8gMpUAWFdY+f5+dZRK8UrBSQLic3/y8HMhAMzzCxHZ9CnV/lHE/TpC15Ziaf
6cVr9bca0+Ss0aCvosDdf5hO1tS60ODoGky6sENJdpnlQos/04LNWD04m7HTRpbO
mBdUAQv7gfnqLBYvqiTbTH9iSmLYq1o1
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:00 2025 by rpki-client