Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ad808e5-5be2-3b2f-a9ce-8bc61cf0b366.roa
File: 4ad808e5-5be2-3b2f-a9ce-8bc61cf0b366.roa (raw, json)
Hash identifier: ++BGJwteGbaXtuI3FqMiTXCY8YexqiC+0D9GBo2ZP88=
Subject key identifier: 54:40:73:CF:22:F1:7B:1F:2B:1F:19:70:3E:EF:F7:BA:A2:17:F3:4F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D066C1E4BE10B2145500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ad808e5-5be2-3b2f-a9ce-8bc61cf0b366.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396541
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d0:66:c1:e4:be:10:b2:14:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=462d4f56-6a6f-4b70-8028-1c21d7ea5a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e3:9f:ab:e6:b6:11:96:8c:6d:ef:76:f7:7f:
8f:f0:2c:a9:74:83:9a:2c:95:d6:e9:4d:ee:8b:94:
10:c9:8d:fa:d7:05:7b:f3:ff:cd:59:bf:a8:67:46:
2d:e5:a6:48:30:16:28:9c:3d:80:91:90:1e:c9:25:
aa:e3:39:43:88:94:7e:97:5b:d7:0e:25:51:bc:bd:
c7:0f:8d:07:bb:27:7d:1e:5c:76:da:29:be:4a:e1:
0c:7f:5f:e5:51:2f:2b:41:99:30:09:27:4a:7b:fb:
92:34:26:72:55:63:df:c5:53:e3:47:cc:9f:e8:45:
19:b8:80:2d:a9:ec:d5:30:5e:ab:15:1d:84:de:7d:
49:fb:7c:89:8c:08:9a:98:f5:97:1c:cc:82:dd:07:
1d:f0:16:1a:65:68:0c:01:a4:f9:f9:13:13:17:f1:
ce:72:a2:51:75:ef:a4:54:86:25:b8:c0:ff:6f:a3:
3d:96:6f:02:d4:82:67:95:62:48:0b:15:72:8a:53:
95:ba:6d:2e:9a:2e:e2:6e:47:d9:14:3a:ca:8e:53:
aa:96:fa:ab:ea:89:7c:f3:1d:8f:cf:a9:8b:7d:75:
43:be:33:b7:68:31:21:58:9f:c1:c1:f9:5d:f2:ca:
31:25:de:15:9a:cf:70:69:3f:8b:b3:3c:00:5f:a3:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:40:73:CF:22:F1:7B:1F:2B:1F:19:70:3E:EF:F7:BA:A2:17:F3:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ad808e5-5be2-3b2f-a9ce-8bc61cf0b366.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:53:f4:cf:a6:2f:76:a6:92:33:32:ad:a2:e3:3d:d9:c1:f5:
06:c6:05:98:08:02:a5:66:ac:71:ba:2c:4e:5b:78:8d:5d:c8:
83:b7:50:28:08:5d:89:fa:62:e0:cc:ca:70:14:7e:60:98:b9:
22:7b:0a:96:8f:be:97:b9:ff:2b:75:1f:ff:ce:ba:5c:6e:6d:
27:64:b5:ba:d9:70:00:64:73:77:5c:8d:d1:d9:15:ba:cb:6c:
92:28:0b:fc:70:13:96:e8:e8:e6:f9:a5:9f:43:e0:54:22:ab:
e8:c7:09:86:a8:03:b3:a5:82:a0:50:6f:c9:de:93:34:86:2a:
b2:c5:39:71:eb:ce:f4:22:b5:41:13:1f:2e:4e:fc:1b:8e:b3:
79:77:ce:d3:32:89:39:53:d5:41:9a:fc:87:c8:9c:cd:06:69:
bd:10:ed:db:b0:18:af:79:d9:a8:80:e8:ef:bf:21:17:63:eb:
3e:64:36:e2:61:54:b5:dd:2d:5e:9c:2b:95:73:c3:a2:45:d5:
fd:a8:c9:13:66:a6:23:26:6e:f2:be:34:36:ae:cc:0e:0b:d3:
da:ca:ff:8d:77:74:b2:30:5c:34:68:79:ba:86:3d:6b:ff:31:
4a:ae:84:b0:69:14:70:5d:a4:da:7f:2f:1a:15:c9:4c:a9:71:
23:65:e4:36
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg9BmweS+ELIUVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
NDYyZDRmNTYtNmE2Zi00YjcwLTgwMjgtMWMyMWQ3ZWE1YTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+Ofq+a2EZaMbe9293+P8CypdIOaLJXW6U3u
i5QQyY361wV78//NWb+oZ0Yt5aZIMBYonD2AkZAeySWq4zlDiJR+l1vXDiVRvL3H
D40Huyd9Hlx22im+SuEMf1/lUS8rQZkwCSdKe/uSNCZyVWPfxVPjR8yf6EUZuIAt
qezVMF6rFR2E3n1J+3yJjAiamPWXHMyC3Qcd8BYaZWgMAaT5+RMTF/HOcqJRde+k
VIYluMD/b6M9lm8C1IJnlWJICxVyilOVum0umi7ibkfZFDrKjlOqlvqr6ol88x2P
z6mLfXVDvjO3aDEhWJ/Bwfld8soxJd4Vms9waT+LszwAX6PjPQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFRAc88i8XsfKx8ZcD7v97qiF/NPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGFkODA4ZTUtNWJlMi0z
YjJmLWE5Y2UtOGJjNjFjZjBiMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBsU/TPpi92ppIzMq2i4z3ZwfUGxgWYCAKlZqxxuixOW3iNXciDt1Ao
CF2J+mLgzMpwFH5gmLkiewqWj76Xuf8rdR//zrpcbm0nZLW62XAAZHN3XI3R2RW6
y2ySKAv8cBOW6Ojm+aWfQ+BUIqvoxwmGqAOzpYKgUG/J3pM0hiqyxTlx6870IrVB
Ex8uTvwbjrN5d87TMok5U9VBmvyHyJzNBmm9EO3bsBivedmogOjvvyEXY+s+ZDbi
YVS13S1enCuVc8OiRdX9qMkTZqYjJm7yvjQ2rswOC9Payv+Nd3SyMFw0aHm6hj1r
/zFKroSwaRRwXaTafy8aFclMqXEjZeQ2
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:40 2025 by rpki-client