Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355b363a-ed5a-3bd5-8a0f-7f69dd06dbf5.roa
File: 355b363a-ed5a-3bd5-8a0f-7f69dd06dbf5.roa (raw, json)
Hash identifier: /F/NUHHPR4VEXycZ04iyqlBv3IzrdSKTEW8K7kyi5Ls=
Subject key identifier: E7:22:44:46:9C:36:60:00:07:3E:FC:13:A1:C7:A9:38:44:9A:2E:9F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B7843B82CEDEAC8DCC0423C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355b363a-ed5a-3bd5-8a0f-7f69dd06dbf5.roa
Signing time: Thu 30 Jan 2025 13:46:15 +0000
ROA not before: Thu 30 Jan 2025 13:46:15 +0000
ROA not after: Wed 30 Apr 2025 12:46:15 +0000
asID: 396555
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:3b:82:ce:de:ac:8d:cc:04:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:15 2025 GMT
Not After : Apr 30 12:46:15 2025 GMT
Subject: CN=c658b6e1-1d88-4cb8-9884-97605637bd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:d8:3d:89:5b:55:4b:98:60:94:d6:90:84:
1c:d8:19:34:b8:61:74:3f:17:6d:bb:ba:1a:ab:b5:
ff:5e:67:8a:b2:48:3e:42:e8:30:aa:5f:e8:df:04:
bb:5f:7e:6d:6b:8f:f6:e5:a1:db:22:87:3e:09:d0:
01:8c:84:56:5e:6e:48:86:a6:20:82:eb:45:b4:20:
c4:16:54:c7:db:93:72:67:58:05:ca:0f:a9:8b:c4:
08:35:20:f8:73:3b:a6:02:e5:5d:06:e6:6a:74:79:
9c:1c:3b:7b:65:c6:04:f2:7b:ef:80:11:f8:ea:99:
cb:1b:08:f6:c6:51:3d:d6:60:93:50:14:5a:a3:48:
55:0d:6a:08:b6:85:63:53:c9:40:51:5f:40:98:66:
f2:47:35:09:71:e1:6e:a8:d7:38:23:d9:9c:ef:7a:
62:50:7e:5a:d0:d0:5e:74:f4:b6:25:71:7b:0a:41:
8c:ec:79:86:66:3e:e3:9b:2e:cd:25:b5:d9:74:06:
2b:ef:8b:4e:3d:a8:46:a5:4f:9e:8f:81:99:01:c0:
b0:11:98:35:17:4c:4d:b2:f4:31:cc:8a:41:88:3e:
a3:1e:1e:45:fc:ab:a7:ac:89:27:82:ec:c1:68:35:
4a:5d:e4:9b:0a:63:72:43:4a:fd:ee:d1:34:3a:f9:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:44:46:9C:36:60:00:07:3E:FC:13:A1:C7:A9:38:44:9A:2E:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355b363a-ed5a-3bd5-8a0f-7f69dd06dbf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:c9:82:95:11:5d:91:dc:c6:5d:10:69:65:69:0f:d3:96:1a:
d5:96:22:3d:a4:7b:23:b4:5a:07:8c:3b:93:b5:03:36:b0:b4:
43:a5:f5:00:49:10:d0:79:e7:ce:af:f4:11:f7:b1:b8:98:5f:
a2:ae:e8:18:e1:37:2f:d0:e2:3a:91:6f:33:9c:03:67:dc:43:
5f:f2:72:f2:65:76:97:13:83:3d:6f:dd:ee:45:d2:f3:70:0c:
6d:81:7d:07:aa:70:19:61:dd:35:e7:ad:19:63:ca:ab:21:c5:
55:33:98:65:48:61:2f:34:76:70:c1:c9:f0:52:27:b9:95:2e:
ae:9c:9e:f3:e7:e9:29:8c:70:66:a2:d7:91:b1:5d:fd:98:fb:
33:fe:98:22:fa:2b:f3:b1:d3:c3:8d:d7:7f:f0:6b:80:8b:9a:
69:64:a3:c1:8c:15:6d:a0:d4:f3:a7:b1:61:10:f0:af:7b:b8:
06:ca:bd:9b:bf:0a:46:16:6a:5c:87:0e:37:f2:10:0a:bc:ef:
cd:4d:23:59:2a:46:29:c7:df:17:a0:8f:dd:48:a6:17:32:3a:
3b:27:5f:43:cb:55:9f:ae:7c:f6:0a:65:4b:af:6f:40:39:62:
cd:45:41:34:a0:73:87:8c:d5:dc:e0:ee:99:36:6f:9e:b3:01:
a1:df:3d:2b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hDuCzt6sjcwEI8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMDEzNDYxNVoXDTI1MDQzMDEyNDYxNVowLzEtMCsGA1UEAxMk
YzY1OGI2ZTEtMWQ4OC00Y2I4LTk4ODQtOTc2MDU2MzdiZDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY/YPYlbVUuYYJTWkIQc2Bk0uGF0Pxdtu7oa
q7X/XmeKskg+Qugwql/o3wS7X35ta4/25aHbIoc+CdABjIRWXm5IhqYggutFtCDE
FlTH25NyZ1gFyg+pi8QINSD4czumAuVdBuZqdHmcHDt7ZcYE8nvvgBH46pnLGwj2
xlE91mCTUBRao0hVDWoItoVjU8lAUV9AmGbyRzUJceFuqNc4I9mc73piUH5a0NBe
dPS2JXF7CkGM7HmGZj7jmy7NJbXZdAYr74tOPahGpU+ej4GZAcCwEZg1F0xNsvQx
zIpBiD6jHh5F/KunrIknguzBaDVKXeSbCmNyQ0r97tE0Ovn0xwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOciREacNmAABz78E6HHqThEmi6fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzU1YjM2M2EtZWQ1YS0z
YmQ1LThhMGYtN2Y2OWRkMDZkYmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC0yYKVEV2R3MZdEGllaQ/TlhrVliI9pHsjtFoHjDuTtQM2sLRDpfUA
SRDQeefOr/QR97G4mF+irugY4Tcv0OI6kW8znANn3ENf8nLyZXaXE4M9b93uRdLz
cAxtgX0HqnAZYd01560ZY8qrIcVVM5hlSGEvNHZwwcnwUie5lS6unJ7z5+kpjHBm
oteRsV39mPsz/pgi+ivzsdPDjdd/8GuAi5ppZKPBjBVtoNTzp7FhEPCve7gGyr2b
vwpGFmpchw438hAKvO/NTSNZKkYpx98XoI/dSKYXMjo7J19Dy1Wfrnz2CmVLr29A
OWLNRUE0oHOHjNXc4O6ZNm+eswGh3z0r
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:35 2025 by rpki-client