Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84d4e5de-65f0-3246-8902-a3c7f0fc2a5f.roa
File: 84d4e5de-65f0-3246-8902-a3c7f0fc2a5f.roa (raw, json)
Hash identifier: o+03Flj1cbhMmZ8SkCEn9oDq4jB8aBg0mL3CmTcg/5I=
Subject key identifier: DC:D1:CE:CD:FC:72:94:EF:A1:D5:B9:17:49:A9:E7:4E:98:51:C6:9A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492CB2387911C4208849382700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84d4e5de-65f0-3246-8902-a3c7f0fc2a5f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 396540
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:38:79:11:c4:20:88:49:38:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=924bca37-f3da-4c7c-b793-d95a4efcf7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:ec:9e:cd:5b:23:ce:9c:1c:a5:f6:5c:cf:
be:55:14:2a:ce:84:97:71:41:42:6f:e3:bd:dc:c7:
aa:0a:ff:dd:fc:46:40:83:27:7f:ff:af:29:86:96:
1c:48:70:c7:c8:e9:bc:84:78:f7:a4:a2:73:8e:22:
02:25:25:64:e5:42:f9:fd:4f:0a:c0:fc:7c:d7:52:
78:9e:bd:48:22:d3:89:87:04:e6:c9:bb:66:e6:5e:
4c:21:2d:61:e7:69:f4:12:dc:90:5a:1a:0d:9b:96:
15:be:75:db:11:c5:fe:e8:01:44:d2:eb:69:ce:49:
19:5d:25:ae:96:fd:93:ac:da:f5:a5:de:be:51:80:
0c:4e:ea:06:60:6e:93:57:37:84:ba:e8:50:c8:06:
01:a6:a4:7a:5f:5a:40:a3:9b:97:1c:4e:fc:1b:59:
f8:2e:44:a9:06:23:a8:81:35:ab:5b:f2:cb:59:38:
f3:bb:76:48:6d:d4:2c:30:4e:db:ca:a7:a6:25:19:
57:32:70:59:f0:2a:2f:e7:03:48:7a:b4:8e:3e:c6:
2a:da:85:24:34:11:62:a6:29:e0:94:96:1f:8e:6a:
29:a7:61:44:e7:a4:41:bc:69:32:74:b5:b1:0c:6f:
8d:61:47:76:e8:01:62:7e:e1:f9:d5:f6:fd:53:4f:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D1:CE:CD:FC:72:94:EF:A1:D5:B9:17:49:A9:E7:4E:98:51:C6:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84d4e5de-65f0-3246-8902-a3c7f0fc2a5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:ca:b9:18:d4:b1:ae:45:15:94:b9:eb:71:57:6c:f4:bb:de:
a8:6d:8c:51:22:8d:fa:68:47:e3:2a:8c:23:8a:88:67:dc:a0:
35:00:ef:2a:6a:20:32:f5:35:5d:db:93:61:8a:96:a9:74:87:
a4:a6:fa:7e:80:2b:bf:2c:f6:e5:9b:bd:ab:38:0d:df:4d:7e:
ce:bc:67:77:27:cb:34:51:8f:a1:45:55:ff:4f:c5:f5:d4:53:
74:40:71:f4:44:1f:da:21:23:1a:aa:95:f3:98:21:a6:f2:ad:
31:2d:53:a0:7b:5e:7f:1c:5a:33:b9:f8:a9:5a:b9:71:dd:c3:
30:b7:d3:d1:52:ce:06:69:8e:ac:0a:db:2d:55:7f:9c:49:5a:
78:4a:1c:35:f4:f8:06:a3:c1:69:93:ce:7f:7e:f7:06:dc:20:
5b:5a:2e:2c:a2:20:20:22:5a:08:ba:2c:23:fa:2a:eb:4c:b3:
8b:5e:e6:04:e0:1f:b0:ed:83:29:26:1a:dc:26:4a:26:aa:87:
b0:bf:1e:43:5b:40:bc:1b:36:05:6c:7d:10:7a:3a:50:0d:8d:
ad:1d:55:63:63:5b:e9:fa:9b:2d:f9:5a:61:fd:e5:6d:8e:a6:
85:5d:06:b6:41:28:f9:15:6b:9f:be:6e:ba:55:ca:3c:43:83:
3a:0b:d9:1c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkssjh5EcQgiEk4JwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OTI0YmNhMzctZjNkYS00YzdjLWI3OTMtZDk1YTRlZmNmN2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPbsns1bI86cHKX2XM++VRQqzoSXcUFCb+O9
3MeqCv/d/EZAgyd//68phpYcSHDHyOm8hHj3pKJzjiICJSVk5UL5/U8KwPx811J4
nr1IItOJhwTmybtm5l5MIS1h52n0EtyQWhoNm5YVvnXbEcX+6AFE0utpzkkZXSWu
lv2TrNr1pd6+UYAMTuoGYG6TVzeEuuhQyAYBpqR6X1pAo5uXHE78G1n4LkSpBiOo
gTWrW/LLWTjzu3ZIbdQsME7byqemJRlXMnBZ8Cov5wNIerSOPsYq2oUkNBFiping
lJYfjmopp2FE56RBvGkydLWxDG+NYUd26AFifuH51fb9U08JrQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNzRzs38cpTvodW5F0mp506YUcaaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODRkNGU1ZGUtNjVmMC0z
MjQ2LTg5MDItYTNjN2YwZmMyYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQARyrkY1LGuRRWUuetxV2z0u96obYxRIo36aEfjKowjiohn3KA1AO8q
aiAy9TVd25NhipapdIekpvp+gCu/LPblm72rOA3fTX7OvGd3J8s0UY+hRVX/T8X1
1FN0QHH0RB/aISMaqpXzmCGm8q0xLVOge15/HFozufipWrlx3cMwt9PRUs4GaY6s
CtstVX+cSVp4Shw19PgGo8Fpk85/fvcG3CBbWi4soiAgIloIuiwj+irrTLOLXuYE
4B+w7YMpJhrcJkomqoewvx5DW0C8GzYFbH0QejpQDY2tHVVjY1vp+pst+Vph/eVt
jqaFXQa2QSj5FWufvm66Vco8Q4M6C9kc
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:29 2025 by rpki-client