Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/720b1a4f-0a6b-3aea-b01b-0f829c58363c.roa
File: 720b1a4f-0a6b-3aea-b01b-0f829c58363c.roa (raw, json)
Hash identifier: FZI/1iREDWsoJ3CIllEqOjHGVUClgdoff/rsvC2vRhU=
Subject key identifier: F3:DD:04:C4:43:B9:30:C1:15:08:F3:D1:08:B8:C8:7F:29:FE:3E:AA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B38D7320A31D94B3DD9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/720b1a4f-0a6b-3aea-b01b-0f829c58363c.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396542
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:38:d7:32:0a:31:d9:4b:3d:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=0b4306cf-2e8e-46de-a9c9-08b78d0d2a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:d1:12:0e:50:c7:de:7c:3c:91:c3:51:d5:
29:71:c1:97:77:a4:47:ff:84:23:fc:5a:f9:bb:07:
ab:86:b4:ef:65:1f:b3:ce:a8:91:60:9f:27:33:94:
bb:9d:8f:49:72:a2:95:94:2f:f8:f0:2d:be:80:78:
08:eb:dc:4e:26:ed:43:1a:e9:7c:e3:76:d6:ac:ec:
8b:ac:fe:2c:65:ad:ba:9e:c2:6b:eb:58:bc:16:76:
03:72:86:c0:f6:19:11:68:e3:ec:9e:68:22:af:a4:
a1:ad:37:cf:7a:14:d8:c7:ba:fc:a9:86:0f:b0:3c:
54:6a:69:a5:01:ae:f5:61:ab:41:17:d9:a0:c0:95:
df:72:71:e3:5c:86:90:03:6f:d3:43:2a:ab:ab:3c:
2b:7d:15:96:bb:32:bb:52:de:22:3d:15:46:03:b8:
be:68:d2:c3:1d:ea:2e:fa:b2:54:74:75:6b:b5:38:
a7:74:d3:b6:b0:6f:ed:42:2d:82:e4:6a:cd:98:7a:
dc:d8:52:a1:d3:c4:8f:bb:47:3e:ee:bc:e1:30:53:
8c:37:18:28:6e:c5:9a:93:00:e3:09:4d:49:7f:b5:
23:3d:5d:1a:ab:eb:57:de:1a:49:b5:8d:92:20:28:
d2:08:6f:f7:ec:57:90:19:1a:a9:56:09:ad:48:c2:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DD:04:C4:43:B9:30:C1:15:08:F3:D1:08:B8:C8:7F:29:FE:3E:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/720b1a4f-0a6b-3aea-b01b-0f829c58363c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:79:be:1d:7a:f5:33:c8:d2:7f:84:63:0d:68:66:2b:8d:8c:
ca:7b:6c:29:2b:4b:1e:d2:08:a4:49:29:fa:56:13:73:85:b7:
26:87:62:88:8e:52:0f:c7:89:bf:d1:4e:70:57:74:62:96:68:
35:b5:7b:cc:74:7b:61:b7:fd:1f:84:7e:99:77:34:60:bd:88:
27:51:9c:7c:94:e1:eb:c4:6b:f1:e9:02:58:cb:07:fd:cf:16:
74:3b:18:3c:2d:47:a9:38:ad:c1:bd:4f:96:7e:d3:db:d6:c9:
bd:b3:af:07:6d:eb:b2:92:44:d4:69:bb:dc:94:17:f6:75:c2:
29:4b:92:8a:bc:21:a4:63:5c:fc:52:f1:88:7d:b1:8f:74:65:
e5:70:65:30:35:e2:3a:46:ef:98:e7:db:51:5e:85:bb:1b:aa:
d8:a0:a3:7d:8e:ea:c5:f1:07:67:9e:16:ce:ee:bf:ce:75:61:
d8:6c:a8:41:9b:92:9b:a6:2a:1a:95:ba:35:63:43:d5:ef:74:
b3:f3:36:33:93:2b:c9:c4:bb:ac:f6:22:d5:cf:0b:15:8a:10:
10:27:9b:fe:c1:3e:83:ea:eb:14:c4:0c:11:77:be:f7:5f:b3:
d3:5e:91:a0:f0:d6:d9:85:87:d6:c1:e8:6a:d3:3f:74:a4:73:
e0:7b:8f:63
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiaOzjXMgox2Us92cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
MGI0MzA2Y2YtMmU4ZS00NmRlLWE5YzktMDhiNzhkMGQyYTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nzREg5Qx958PJHDUdUpccGXd6RH/4Qj/Fr5
uwerhrTvZR+zzqiRYJ8nM5S7nY9JcqKVlC/48C2+gHgI69xOJu1DGul843bWrOyL
rP4sZa26nsJr61i8FnYDcobA9hkRaOPsnmgir6ShrTfPehTYx7r8qYYPsDxUamml
Aa71YatBF9mgwJXfcnHjXIaQA2/TQyqrqzwrfRWWuzK7Ut4iPRVGA7i+aNLDHeou
+rJUdHVrtTindNO2sG/tQi2C5GrNmHrc2FKh08SPu0c+7rzhMFOMNxgobsWakwDj
CU1Jf7UjPV0aq+tX3hpJtY2SICjSCG/37FeQGRqpVgmtSMKc1QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPPdBMRDuTDBFQjz0Qi4yH8p/j6qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzIwYjFhNGYtMGE2Yi0z
YWVhLWIwMWItMGY4MjljNTgzNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBWeb4devUzyNJ/hGMNaGYrjYzKe2wpK0se0gikSSn6VhNzhbcmh2KI
jlIPx4m/0U5wV3Rilmg1tXvMdHtht/0fhH6ZdzRgvYgnUZx8lOHrxGvx6QJYywf9
zxZ0Oxg8LUepOK3BvU+WftPb1sm9s68HbeuykkTUabvclBf2dcIpS5KKvCGkY1z8
UvGIfbGPdGXlcGUwNeI6Ru+Y59tRXoW7G6rYoKN9jurF8QdnnhbO7r/OdWHYbKhB
m5Kbpioalbo1Y0PV73Sz8zYzkyvJxLus9iLVzwsVihAQJ5v+wT6D6usUxAwRd773
X7PTXpGg8NbZhYfWwehq0z90pHPge49j
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:13 2025 by rpki-client