Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/782d5f0a-4f39-3f5e-a148-a94a51ac5bc5.roa
File: 782d5f0a-4f39-3f5e-a148-a94a51ac5bc5.roa (raw, json)
Hash identifier: 7lWWCvm03/XlLrwAY9vV6cNLgDkFPfCmKCixtGSEfzs=
Subject key identifier: B1:DB:E2:F7:D2:AF:1C:D6:00:AC:01:A4:A1:09:51:61:1E:7C:BE:B5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848854B3570BD7E65D97936C760
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/782d5f0a-4f39-3f5e-a148-a94a51ac5bc5.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 396559
IP address blocks: 192.42.175.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:35:70:bd:7e:65:d9:79:36:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=c936aa65-2e9b-40c7-99ff-a19adea594b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:34:8c:aa:ba:65:95:41:62:db:a3:5b:98:
b9:de:48:1e:76:9c:9f:ed:3f:88:b7:a6:48:48:c2:
6e:ae:b3:ff:f0:88:0f:22:ac:d4:56:05:97:47:e1:
11:64:1b:b8:22:9e:d8:c2:e4:b7:ab:37:a6:ea:c4:
a1:d9:e3:54:6e:24:99:cb:ac:35:c5:d2:5c:e2:ce:
76:d9:41:d5:7a:27:56:ca:c7:5a:b5:55:dd:ff:2d:
f2:29:fe:99:e9:95:09:3d:93:5d:2a:22:6b:92:38:
61:bf:76:89:36:c6:c2:7c:9a:84:fd:18:f0:c6:8c:
9a:60:25:15:8c:dd:90:fc:0e:fe:e7:2c:57:88:b9:
f4:ef:c2:d3:16:a0:6d:6c:bd:42:16:c9:f0:1f:ad:
c6:23:f1:8b:c6:3c:a2:74:c9:9a:09:c6:ea:5c:bd:
1a:8c:b7:96:fc:ca:44:25:3c:b2:f6:ae:3d:7f:c5:
43:79:2f:18:5f:56:30:04:e2:7d:28:0f:0e:44:47:
66:1a:10:a6:32:c0:52:25:b0:21:3f:3d:bc:c7:02:
60:13:e4:4b:4d:70:80:3d:2d:50:93:ad:fa:5b:2d:
80:ed:a5:ed:f7:e2:93:0b:46:c6:b1:29:33:fe:fe:
8c:f1:ef:87:40:19:f9:32:21:d8:cf:13:6f:7b:7e:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DB:E2:F7:D2:AF:1C:D6:00:AC:01:A4:A1:09:51:61:1E:7C:BE:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/782d5f0a-4f39-3f5e-a148-a94a51ac5bc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ec:4a:3b:a5:86:4e:29:c3:f6:e7:41:b1:4d:9e:46:b1:1a:
17:d6:94:5a:20:36:f3:30:07:0b:2c:5d:63:49:62:f5:3a:ca:
57:df:f2:8d:cf:ff:5a:6e:bc:0c:1b:02:e8:89:0b:6a:bd:73:
f6:2d:97:50:ec:aa:93:58:f5:f9:04:db:ab:1b:ef:44:be:23:
d5:4f:9e:38:ca:69:6b:fc:8f:ed:37:f8:46:bf:79:2a:1b:9d:
7f:82:b2:e7:9d:2d:ce:20:43:c3:04:8b:dd:4a:79:75:ed:e8:
74:b1:fc:3f:89:77:47:b2:b8:29:65:00:35:17:c6:b1:b5:30:
e4:ee:9c:72:1d:cb:28:85:e4:4f:46:85:d8:f2:b5:82:c5:29:
b1:f7:24:0f:11:91:62:fe:cc:5c:93:c1:63:a9:52:40:79:b7:
bc:47:28:82:1d:b9:7e:ef:ac:b2:0e:b9:48:e7:e8:ee:4f:b9:
8f:73:d4:9b:ad:f3:8f:e2:6c:73:03:51:2a:ee:59:74:e4:0e:
50:69:0e:4a:ed:17:06:a8:f3:e7:df:f2:d9:cd:37:93:d1:c7:
d0:86:1d:3b:4c:97:5b:7b:65:11:31:0e:8c:d0:18:e4:97:83:
e5:dd:76:73:14:3d:0d:c6:09:39:66:bd:ea:38:f3:e8:f4:6f:
71:2b:ff:9a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiFSzVwvX5l2Xk2x2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
YzkzNmFhNjUtMmU5Yi00MGM3LTk5ZmYtYTE5YWRlYTU5NGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp00jKq6ZZVBYtujW5i53kgedpyf7T+It6ZI
SMJurrP/8IgPIqzUVgWXR+ERZBu4Ip7YwuS3qzem6sSh2eNUbiSZy6w1xdJc4s52
2UHVeidWysdatVXd/y3yKf6Z6ZUJPZNdKiJrkjhhv3aJNsbCfJqE/RjwxoyaYCUV
jN2Q/A7+5yxXiLn078LTFqBtbL1CFsnwH63GI/GLxjyidMmaCcbqXL0ajLeW/MpE
JTyy9q49f8VDeS8YX1YwBOJ9KA8OREdmGhCmMsBSJbAhPz28xwJgE+RLTXCAPS1Q
k636Wy2A7aXt9+KTC0bGsSkz/v6M8e+HQBn5MiHYzxNve37YPwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLHb4vfSrxzWAKwBpKEJUWEefL61MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzgyZDVmMGEtNGYzOS0z
ZjVlLWExNDgtYTk0YTUxYWM1YmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB17Eo7pYZOKcP250GxTZ5GsRoX1pRaIDbzMAcLLF1jSWL1OspX3/KN
z/9abrwMGwLoiQtqvXP2LZdQ7KqTWPX5BNurG+9EviPVT544ymlr/I/tN/hGv3kq
G51/grLnnS3OIEPDBIvdSnl17eh0sfw/iXdHsrgpZQA1F8axtTDk7pxyHcsoheRP
RoXY8rWCxSmx9yQPEZFi/sxck8FjqVJAebe8RyiCHbl+76yyDrlI5+juT7mPc9Sb
rfOP4mxzA1Eq7ll05A5QaQ5K7RcGqPPn3/LZzTeT0cfQhh07TJdbe2URMQ6M0Bjk
l4Pl3XZzFD0Nxgk5Zr3qOPPo9G9xK/+a
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:11 2025 by rpki-client