Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7db93dfc-bdca-3be1-a57c-2d3e5359c245.roa
File: 7db93dfc-bdca-3be1-a57c-2d3e5359c245.roa (raw, json)
Hash identifier: IYcYyrOUf1+A9jutLpNxtKoI6c4hcJ4UB6Snfrh2dD4=
Subject key identifier: 0E:35:F9:BD:41:68:23:89:6F:BF:63:D0:48:F5:A9:F1:E6:6A:F5:17
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493ED3EF75B2E1F01784CD28C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7db93dfc-bdca-3be1-a57c-2d3e5359c245.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 397201
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:ef:75:b2:e1:f0:17:84:cd:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=5d66cebf-a755-4e0b-bb3f-adee09faa71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:6a:b5:01:b4:10:92:31:34:d1:6b:ce:3f:
f1:26:cd:d1:d2:0c:49:44:6a:72:68:10:07:d4:62:
6d:65:57:ec:6f:03:35:c1:7b:fe:20:13:fb:b1:00:
15:c2:d4:18:d8:b5:1b:64:4b:03:1f:56:5f:27:65:
fd:0a:03:c1:b7:89:e2:9d:77:1c:4f:a4:db:f9:e0:
f4:3d:49:ed:d3:e1:c8:d7:0b:bc:4b:11:87:b3:ce:
e2:b0:b0:01:99:a0:9d:80:ba:37:5b:a1:41:a9:90:
c4:63:58:49:f8:23:49:1f:78:18:40:13:43:67:c7:
43:97:d2:d6:fa:a9:68:55:fd:b0:99:81:92:55:1f:
47:7d:18:69:3f:4f:83:ca:fa:ca:3e:89:80:31:1d:
8a:00:e5:34:0f:c3:5c:4d:34:53:23:34:a9:ea:9a:
c3:5a:8e:ae:01:e8:a1:3a:a0:4b:d4:66:7f:a5:5e:
f3:f9:84:58:1f:9f:7e:06:dd:c2:50:be:b1:46:1e:
0f:f8:9d:c4:25:64:2f:06:08:b6:02:3f:2f:1a:ef:
28:f6:0b:53:19:d9:6d:58:cc:be:cf:43:d4:90:27:
90:04:2a:2e:d5:95:43:fd:2d:2e:dc:b5:6f:4d:0c:
60:85:94:ed:54:80:0f:85:44:7f:f6:d4:b7:71:38:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:35:F9:BD:41:68:23:89:6F:BF:63:D0:48:F5:A9:F1:E6:6A:F5:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7db93dfc-bdca-3be1-a57c-2d3e5359c245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:55:0b:05:48:79:d6:31:6d:1f:9a:e0:f2:cc:5c:ee:4c:4f:
ca:9e:15:e9:1f:8a:99:8a:21:e8:e6:16:e9:66:5a:68:18:d6:
38:38:d8:1a:a2:64:34:19:40:56:d8:2c:4f:9d:ff:ae:2f:dc:
3f:fd:f4:35:f9:27:f7:34:6a:7f:62:18:65:86:8b:fc:95:3a:
7a:70:6e:c8:08:5f:b2:48:85:82:48:f8:ff:63:ec:ca:a4:5f:
88:c5:8b:e9:5d:fa:10:f4:67:fd:db:94:3f:2a:33:99:5a:99:
78:96:13:24:a6:85:c1:2e:36:7c:f6:a3:86:a7:af:ed:d4:6a:
02:0f:5f:9a:8a:90:74:5a:85:7c:52:e9:b8:c7:05:83:fb:63:
cf:41:4d:54:76:3c:71:5f:2a:68:89:3c:47:65:7e:77:4d:96:
20:29:73:bc:de:6e:32:d9:17:32:f4:6b:3a:60:8f:9f:5b:cc:
a2:d1:2b:d7:ec:3e:5f:d4:fe:42:da:7e:d5:dc:95:de:d2:37:
8b:4b:15:0b:a7:76:e5:4c:7e:63:ea:ff:d2:43:99:5a:c9:02:
f6:d4:ce:a5:ad:a4:1e:74:1b:9b:56:a1:b4:f7:f0:67:02:ab:
f5:7c:84:c2:24:85:51:a9:43:2c:91:1a:ae:c6:97:6b:49:ee:
30:89:e0:b9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk+0+91suHwF4TNKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
NWQ2NmNlYmYtYTc1NS00ZTBiLWJiM2YtYWRlZTA5ZmFhNzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXdqtQG0EJIxNNFrzj/xJs3R0gxJRGpyaBAH
1GJtZVfsbwM1wXv+IBP7sQAVwtQY2LUbZEsDH1ZfJ2X9CgPBt4ninXccT6Tb+eD0
PUnt0+HI1wu8SxGHs87isLABmaCdgLo3W6FBqZDEY1hJ+CNJH3gYQBNDZ8dDl9LW
+qloVf2wmYGSVR9HfRhpP0+DyvrKPomAMR2KAOU0D8NcTTRTIzSp6prDWo6uAeih
OqBL1GZ/pV7z+YRYH59+Bt3CUL6xRh4P+J3EJWQvBgi2Aj8vGu8o9gtTGdltWMy+
z0PUkCeQBCou1ZVD/S0u3LVvTQxghZTtVIAPhUR/9tS3cTixewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA41+b1BaCOJb79j0Ej1qfHmavUXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RiOTNkZmMtYmRjYS0z
YmUxLWE1N2MtMmQzZTUzNTljMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCHVQsFSHnWMW0fmuDyzFzuTE/KnhXpH4qZiiHo5hbpZlpoGNY4ONga
omQ0GUBW2CxPnf+uL9w//fQ1+Sf3NGp/Yhhlhov8lTp6cG7ICF+ySIWCSPj/Y+zK
pF+IxYvpXfoQ9Gf925Q/KjOZWpl4lhMkpoXBLjZ89qOGp6/t1GoCD1+aipB0WoV8
Uum4xwWD+2PPQU1UdjxxXypoiTxHZX53TZYgKXO83m4y2Rcy9Gs6YI+fW8yi0SvX
7D5f1P5C2n7V3JXe0jeLSxULp3blTH5j6v/SQ5layQL21M6lraQedBubVqG09/Bn
Aqv1fITCJIVRqUMskRquxpdrSe4wieC5
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:40 2025 by rpki-client