Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa
File: 57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa (raw, json)
Hash identifier: tVf8nWOPqOYzTVOemQXL7bjUCPVGCgnR9VkrosHoKOw=
Subject key identifier: 40:50:3D:BA:24:03:93:39:35:C1:D8:AB:7C:6B:3F:80:BC:9A:44:06
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C054436F1020A9662AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396583
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c0:54:43:6f:10:20:a9:66:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=71999158-7cdb-4888-8a40-c16ecd0d1d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:1c:3c:b8:02:33:6e:1b:c6:33:b2:00:48:
3b:29:bf:67:42:56:17:6a:9d:f3:41:4a:21:b4:19:
62:08:f8:14:02:75:3b:33:d0:19:75:8a:c0:48:66:
d1:e8:d3:cf:78:c6:6a:21:03:47:91:94:b0:5e:7e:
d2:cf:fe:19:01:72:ea:d2:b1:f4:fe:7d:d1:9f:f4:
07:78:50:ec:63:4c:5e:16:ce:f8:3c:ce:4f:0e:34:
54:d9:af:60:93:37:c1:02:77:22:a6:be:d5:99:a8:
72:35:24:01:c0:33:f5:32:8c:6b:3e:ee:d8:7a:5b:
8e:75:c4:28:83:19:5b:66:b7:e3:05:a2:2f:b2:4b:
68:15:6c:86:4f:20:57:85:4f:12:2f:5d:92:65:e8:
ce:8a:ad:80:4c:09:08:0c:20:81:1a:70:12:f6:db:
94:cc:ba:6c:73:fb:1c:a1:63:30:c3:d8:91:65:d9:
5b:c9:7a:c4:82:ba:bc:1f:8a:34:ca:dd:f0:6c:d8:
5c:87:58:7f:00:c8:79:b1:c6:4b:9f:36:57:bd:4d:
23:0c:e5:e7:3d:d0:86:62:42:ab:ca:95:45:6e:c3:
f9:d1:2a:45:dd:eb:44:04:40:3f:77:10:41:4a:4a:
79:ee:1e:31:97:88:f1:97:1a:e3:40:00:98:12:7c:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:50:3D:BA:24:03:93:39:35:C1:D8:AB:7C:6B:3F:80:BC:9A:44:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57dc8f4e-f25a-3dfc-94ab-4cf8d18e4cb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:fb:4d:42:a1:ce:b3:c8:34:43:08:0f:2e:a7:85:ea:2a:28:
1f:34:37:a6:2a:d7:8a:77:d8:48:63:92:41:75:65:cc:a3:c5:
3e:6c:13:1d:94:bb:32:78:12:b2:b6:0a:eb:c1:d5:6d:5c:ab:
e8:67:a6:e9:96:5c:c4:0d:20:da:23:64:13:51:c6:81:da:c1:
95:40:48:ec:49:b2:8a:0f:07:47:f8:65:28:d5:10:67:aa:e9:
61:d8:3b:d6:be:06:fe:a4:71:c1:38:aa:23:e9:fe:c1:3d:d9:
e2:96:ea:df:dc:64:70:23:9c:7b:f2:62:0c:7a:c7:60:25:2d:
43:f2:07:43:95:d2:b4:bc:0b:97:87:58:dd:a3:06:33:d9:c3:
1d:d9:83:6e:0c:6e:22:ac:16:58:ec:0d:3c:d4:e2:39:d0:0c:
f5:5b:38:bb:b9:8e:bd:bc:5f:9d:c0:2c:0a:47:11:05:eb:6e:
bc:bd:3b:00:89:84:56:43:09:f7:7c:f5:59:fe:19:f5:32:01:
50:7c:4a:0b:bf:6e:57:64:91:66:77:5a:b9:e7:7a:ac:5e:4c:
95:92:3f:c9:b3:7e:4a:e0:4a:a8:73:e2:08:36:c5:82:94:42:
f8:a3:68:d6:ca:62:37:36:ac:a6:30:bb:d7:77:d8:5b:72:75:
8a:56:6f:75
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMBUQ28QIKlmKsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
NzE5OTkxNTgtN2NkYi00ODg4LThhNDAtYzE2ZWNkMGQxZDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ8cPLgCM24bxjOyAEg7Kb9nQlYXap3zQUoh
tBliCPgUAnU7M9AZdYrASGbR6NPPeMZqIQNHkZSwXn7Sz/4ZAXLq0rH0/n3Rn/QH
eFDsY0xeFs74PM5PDjRU2a9gkzfBAncipr7VmahyNSQBwDP1MoxrPu7YeluOdcQo
gxlbZrfjBaIvsktoFWyGTyBXhU8SL12SZejOiq2ATAkIDCCBGnAS9tuUzLpsc/sc
oWMww9iRZdlbyXrEgrq8H4o0yt3wbNhch1h/AMh5scZLnzZXvU0jDOXnPdCGYkKr
ypVFbsP50SpF3etEBEA/dxBBSkp57h4xl4jxlxrjQACYEnxS6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEBQPbokA5M5NcHYq3xrP4C8mkQGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTdkYzhmNGUtZjI1YS0z
ZGZjLTk0YWItNGNmOGQxOGU0Y2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBZ+01Coc6zyDRDCA8up4XqKigfNDemKteKd9hIY5JBdWXMo8U+bBMd
lLsyeBKytgrrwdVtXKvoZ6bpllzEDSDaI2QTUcaB2sGVQEjsSbKKDwdH+GUo1RBn
qulh2DvWvgb+pHHBOKoj6f7BPdnilurf3GRwI5x78mIMesdgJS1D8gdDldK0vAuX
h1jdowYz2cMd2YNuDG4irBZY7A081OI50Az1Wzi7uY69vF+dwCwKRxEF6268vTsA
iYRWQwn3fPVZ/hn1MgFQfEoLv25XZJFmd1q553qsXkyVkj/Js35K4Eqoc+IINsWC
lEL4o2jWymI3NqymMLvXd9hbcnWKVm91
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:41 2025 by rpki-client