Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35ef49d9-e8fa-32e8-8151-3c0a5791ccd7.roa
File: 35ef49d9-e8fa-32e8-8151-3c0a5791ccd7.roa (raw, json)
Hash identifier: J7n3gD7jLm/fcAtr2WRX0WmiwHmYDEY6KBqoy+Ntays=
Subject key identifier: FE:FD:53:DC:57:18:3E:FC:D1:9A:2A:53:78:5B:E7:16:2C:04:C4:FA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D900BEEF8F64569C2280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35ef49d9-e8fa-32e8-8151-3c0a5791ccd7.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396593
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d9:00:be:ef:8f:64:56:9c:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=19d84519-ded2-4425-a686-c3711b85c77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:41:bc:63:67:81:44:84:d1:cc:d5:68:92:
c8:fd:24:16:26:16:4f:4d:18:ea:bc:d2:95:a3:c1:
2e:4d:11:99:53:7b:6c:50:b6:ef:05:a9:e2:3c:bf:
96:8a:f6:dc:f6:3b:ba:bb:a3:54:cc:c8:27:f7:08:
70:20:9b:73:b7:94:6d:99:31:d5:bf:7b:a5:b4:7c:
12:9e:de:4d:0b:c6:15:62:fc:70:a6:b9:73:d3:99:
4f:e4:5e:ab:ce:b6:aa:1b:00:c4:d6:0a:57:2d:a9:
f6:25:62:3b:72:54:94:2c:79:dd:36:63:c7:be:ad:
0a:e4:cc:33:ec:a6:5f:37:e7:f8:fb:38:80:86:12:
a3:84:48:a8:14:e4:ef:bf:ee:b2:36:d8:1c:3d:c1:
f5:99:5c:ed:e8:a2:48:12:86:22:b7:d0:34:7c:e5:
45:fb:8d:96:86:7c:49:27:11:af:de:83:1e:50:fa:
ca:a2:c3:9f:d8:b9:3e:71:eb:2e:2d:fd:17:6a:c4:
e7:be:42:86:11:d6:5e:c4:d6:ea:30:56:d9:61:2e:
cb:2e:64:01:86:64:04:6f:6e:c2:88:67:27:87:02:
01:88:13:cf:d7:87:3d:53:18:33:8d:cd:a8:c9:ba:
e1:ed:cf:ea:66:6e:45:e2:bf:57:f5:99:e5:8a:4f:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:53:DC:57:18:3E:FC:D1:9A:2A:53:78:5B:E7:16:2C:04:C4:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35ef49d9-e8fa-32e8-8151-3c0a5791ccd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:74:7c:cc:54:5f:e7:d2:a8:f4:28:92:ed:03:42:43:20:65:
c1:6d:7e:43:1e:dc:b5:63:bf:71:b7:28:9a:0c:3a:a2:21:5f:
4e:7e:d5:aa:fb:5f:16:16:87:3d:91:6a:d0:4f:05:fd:ca:65:
02:5f:e2:10:2b:73:05:d7:c8:25:62:67:30:4a:61:7d:5b:f9:
91:19:ec:93:a0:f2:60:6b:db:c6:f2:e3:01:fa:8a:12:4b:96:
2a:1d:b4:a2:43:7d:81:d9:d8:49:bc:8f:5f:20:9f:dc:13:6e:
e0:68:c6:48:c7:30:5d:75:d8:3e:76:e8:be:03:5b:81:e6:4e:
49:6d:02:c6:5c:88:f5:51:90:3e:f0:1d:11:31:32:26:d6:bd:
95:71:72:59:48:5e:b6:57:a7:ee:06:51:c8:0a:06:1c:c5:20:
82:5c:0a:3a:ae:92:c5:07:9d:7e:14:ee:c3:8f:a9:92:67:94:
d1:7a:04:c3:44:cb:83:a4:96:99:c6:44:5e:82:90:1f:fc:4d:
ad:ed:23:0e:40:a1:84:1e:78:5f:50:ce:17:3a:ed:bc:b3:58:
6b:d2:76:6a:a4:e2:64:e2:d2:d8:c7:33:dd:77:3e:23:92:b5:
0c:5a:3d:fc:76:0c:60:77:aa:82:53:0a:ea:79:65:f7:f9:bb:
72:ac:e3:a7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg9kAvu+PZFacIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
MTlkODQ1MTktZGVkMi00NDI1LWE2ODYtYzM3MTFiODVjNzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB1BvGNngUSE0czVaJLI/SQWJhZPTRjqvNKV
o8EuTRGZU3tsULbvBaniPL+Wivbc9ju6u6NUzMgn9whwIJtzt5RtmTHVv3ultHwS
nt5NC8YVYvxwprlz05lP5F6rzraqGwDE1gpXLan2JWI7clSULHndNmPHvq0K5Mwz
7KZfN+f4+ziAhhKjhEioFOTvv+6yNtgcPcH1mVzt6KJIEoYit9A0fOVF+42WhnxJ
JxGv3oMeUPrKosOf2Lk+cesuLf0XasTnvkKGEdZexNbqMFbZYS7LLmQBhmQEb27C
iGcnhwIBiBPP14c9Uxgzjc2oybrh7c/qZm5F4r9X9Znlik/4MQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP79U9xXGD780ZoqU3hb5xYsBMT6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzVlZjQ5ZDktZThmYS0z
MmU4LTgxNTEtM2MwYTU3OTFjY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC7dHzMVF/n0qj0KJLtA0JDIGXBbX5DHty1Y79xtyiaDDqiIV9OftWq
+18WFoc9kWrQTwX9ymUCX+IQK3MF18glYmcwSmF9W/mRGeyToPJga9vG8uMB+ooS
S5YqHbSiQ32B2dhJvI9fIJ/cE27gaMZIxzBdddg+dui+A1uB5k5JbQLGXIj1UZA+
8B0RMTIm1r2VcXJZSF62V6fuBlHICgYcxSCCXAo6rpLFB51+FO7Dj6mSZ5TRegTD
RMuDpJaZxkRegpAf/E2t7SMOQKGEHnhfUM4XOu28s1hr0nZqpOJk4tLYxzPddz4j
krUMWj38dgxgd6qCUwrqeWX3+btyrOOn
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:39 2025 by rpki-client