Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71ee0fc7-d2be-3e8b-8dd6-412185bfbe3c.roa
File: 71ee0fc7-d2be-3e8b-8dd6-412185bfbe3c.roa (raw, json)
Hash identifier: oOQ30FtOka7TepCYPEZtGDVKV2oHk9e66+dFhZNwEVQ=
Subject key identifier: C8:04:D5:6B:05:B3:09:2D:05:1C:85:BC:91:35:8B:B5:EC:B4:50:A0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3EDAC4231748CEB0CA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71ee0fc7-d2be-3e8b-8dd6-412185bfbe3c.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 21313
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3e:da:c4:23:17:48:ce:b0:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=6060f1d7-9465-49a0-bea1-3f95b717ff55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:3e:93:e9:16:f2:e0:bf:bb:b3:4c:a2:08:
9f:39:af:0a:df:4e:20:54:27:ab:5c:20:eb:92:75:
c3:d6:1a:7c:91:2d:8a:49:9a:d0:d7:72:b1:8b:16:
6e:30:71:1a:81:7f:56:e2:81:f4:ac:70:71:22:f8:
85:77:d0:a2:e0:ee:56:33:ed:31:22:0b:ca:21:f7:
97:95:4a:52:45:aa:34:58:93:da:ae:57:9b:6c:d1:
c8:b1:9e:c4:8d:b2:b6:a8:34:89:78:14:2d:dd:b2:
65:8e:f1:98:6f:f3:da:be:27:82:43:f4:70:34:2d:
bf:8c:bd:db:3e:1c:37:88:a6:29:fb:53:83:7a:71:
eb:58:fc:ba:49:c4:f2:c0:50:c9:22:19:70:fb:93:
0d:16:55:48:05:7a:96:ba:f4:9a:4b:ba:7c:53:7f:
ea:15:cb:1b:b9:1c:6f:47:07:77:47:96:04:d0:ae:
6e:53:dd:2b:81:a7:ef:6d:a2:2e:5e:02:8c:1c:c7:
8a:a2:3e:05:0b:d3:e1:79:98:57:68:e2:a5:71:58:
67:dd:e7:2c:89:f4:a7:62:23:0a:c7:d5:b2:f1:d6:
0a:b8:88:7c:86:60:73:fb:95:a3:b3:bc:01:f5:67:
c3:9c:42:7f:88:ea:f9:16:8b:65:d1:13:b2:94:c5:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:04:D5:6B:05:B3:09:2D:05:1C:85:BC:91:35:8B:B5:EC:B4:50:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71ee0fc7-d2be-3e8b-8dd6-412185bfbe3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:48:96:1b:90:de:d4:85:42:82:03:dc:27:a8:8c:74:90:86:
bd:09:f1:b0:07:c0:68:0d:a3:4a:aa:47:d7:fa:84:29:56:3c:
d1:66:dd:c6:40:90:e3:f4:1e:0d:13:24:44:9d:ed:0a:85:9a:
57:5a:6b:de:fa:2a:8e:70:7a:7f:20:58:7c:02:a2:02:5a:c4:
a9:78:a6:74:43:1a:42:93:06:41:7f:07:e3:27:fd:30:d4:22:
fb:d6:07:3a:d2:a4:c0:89:bb:b2:35:61:90:ff:61:d4:4a:31:
cc:f9:8d:b7:cf:f6:56:d2:2b:74:b8:e0:08:96:03:88:3e:14:
af:ce:9f:90:c2:24:65:07:53:8f:c2:70:43:8b:80:7a:5b:c6:
a2:90:56:b3:47:7c:4b:67:19:06:07:36:de:61:81:62:88:0b:
48:08:53:1c:c2:23:b8:56:6b:f9:c3:88:c9:f0:78:82:3b:50:
11:8e:80:00:f8:e4:a5:bd:b4:1e:26:ac:8e:a3:e7:44:a2:46:
09:f2:47:d7:d9:26:6c:0b:c8:e7:e2:94:f2:96:61:59:6a:6a:
63:07:52:ff:49:87:f9:86:f3:c8:59:ce:1e:70:37:6e:de:cf:
c9:1d:c2:c9:c9:4d:db:5c:24:91:99:7b:1c:63:49:93:a5:25:
21:11:c2:ba
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiaOz7axCMXSM6wykAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
NjA2MGYxZDctOTQ2NS00OWEwLWJlYTEtM2Y5NWI3MTdmZjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm4+k+kW8uC/u7NMogifOa8K304gVCerXCDr
knXD1hp8kS2KSZrQ13KxixZuMHEagX9W4oH0rHBxIviFd9Ci4O5WM+0xIgvKIfeX
lUpSRao0WJParlebbNHIsZ7EjbK2qDSJeBQt3bJljvGYb/PavieCQ/RwNC2/jL3b
Phw3iKYp+1ODenHrWPy6ScTywFDJIhlw+5MNFlVIBXqWuvSaS7p8U3/qFcsbuRxv
Rwd3R5YE0K5uU90rgafvbaIuXgKMHMeKoj4FC9PheZhXaOKlcVhn3ecsifSnYiMK
x9Wy8dYKuIh8hmBz+5Wjs7wB9WfDnEJ/iOr5Fotl0ROylMXJBwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMgE1WsFswktBRyFvJE1i7XstFCgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzFlZTBmYzctZDJiZS0z
ZThiLThkZDYtNDEyMTg1YmZiZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBSSJYbkN7UhUKCA9wnqIx0kIa9CfGwB8BoDaNKqkfX+oQpVjzRZt3G
QJDj9B4NEyREne0KhZpXWmve+iqOcHp/IFh8AqICWsSpeKZ0QxpCkwZBfwfjJ/0w
1CL71gc60qTAibuyNWGQ/2HUSjHM+Y23z/ZW0it0uOAIlgOIPhSvzp+QwiRlB1OP
wnBDi4B6W8aikFazR3xLZxkGBzbeYYFiiAtICFMcwiO4Vmv5w4jJ8HiCO1ARjoAA
+OSlvbQeJqyOo+dEokYJ8kfX2SZsC8jn4pTylmFZampjB1L/SYf5hvPIWc4ecDdu
3s/JHcLJyU3bXCSRmXscY0mTpSUhEcK6
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:42 2025 by rpki-client