Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85403a26-17fb-33e6-a30e-d7c40bf621bb.roa
File: 85403a26-17fb-33e6-a30e-d7c40bf621bb.roa (raw, json)
Hash identifier: RVu3+OKzGQDm+9c+OAhQGQWEv5OkfemwU+H7wMIQCzY=
Subject key identifier: B9:8E:2F:AC:87:C7:92:0E:F8:59:3A:E5:F6:F5:A0:C0:4D:0A:56:89
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584953C453904847CCAEA4466680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85403a26-17fb-33e6-a30e-d7c40bf621bb.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 36625
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:53:90:48:47:cc:ae:a4:46:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=1af384ec-dc61-490f-bd0d-b1cd2105fc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:f1:5f:b8:9a:de:23:a0:49:3b:c1:4d:4f:
92:c9:d0:29:ba:33:00:4e:5e:52:35:a9:d9:ad:04:
9c:ee:40:17:2d:98:74:ae:75:18:14:95:c0:fe:94:
c1:b1:a4:07:a7:e3:8a:44:fd:86:ab:5e:35:3a:6f:
bc:a4:ff:77:a2:61:16:c0:1e:9e:9f:c9:94:2c:47:
72:ec:1d:1f:60:ac:fe:56:a0:c6:b2:7f:e4:b9:fc:
80:e1:48:5a:87:f4:27:7a:03:68:86:82:cc:a4:4a:
8a:37:7e:6b:98:00:87:57:a7:c1:ed:d6:d9:ab:89:
f6:33:2b:14:4e:08:9f:0e:45:1c:65:9e:91:da:bd:
f7:92:f9:cf:f1:c8:29:47:b1:23:de:29:98:e4:3a:
15:3f:a1:9a:63:33:57:84:c2:ce:ba:7e:d5:a5:21:
24:92:fd:d3:ac:98:c7:84:4e:37:9a:f1:a2:95:70:
bc:a9:57:01:e7:3a:44:48:be:dc:f6:d6:d3:1c:94:
c1:85:bc:3d:f4:40:ba:57:28:04:e9:5e:04:12:da:
e1:dd:da:c8:6d:fd:06:33:63:8a:f9:e2:0e:41:67:
ca:4e:84:9b:69:bb:55:80:dc:39:43:f4:47:ff:43:
87:8a:40:bc:75:79:83:0f:9b:15:1a:1f:7c:11:4f:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8E:2F:AC:87:C7:92:0E:F8:59:3A:E5:F6:F5:A0:C0:4D:0A:56:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85403a26-17fb-33e6-a30e-d7c40bf621bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b6:41:ab:38:62:8c:e0:c8:56:d5:f2:a2:29:c8:23:61:11:
ec:a9:f0:30:51:39:a9:6f:78:b7:c7:81:5e:4a:4b:26:1f:d2:
c2:67:4e:0c:6e:54:e6:d5:8b:7e:63:74:fd:8c:cf:a1:65:ee:
d1:68:7c:cd:6c:d1:35:ea:1d:e8:94:48:7e:3b:e0:8d:eb:df:
9a:4c:48:ea:b0:66:d8:a1:47:98:79:fc:f4:40:5b:68:b5:04:
4c:f2:50:17:aa:f2:cf:c2:85:fc:a7:b9:06:1b:7a:b9:ee:89:
78:77:87:5b:53:c9:e3:79:64:e4:24:df:7c:e5:e1:43:07:3c:
81:05:47:2a:f1:cc:86:b5:db:60:29:ae:e6:16:2b:90:03:20:
ee:9f:40:b9:44:71:41:a7:04:21:cb:f6:d3:3d:50:7c:21:ba:
94:80:b9:db:92:71:0a:be:7f:f1:22:23:9c:f4:c0:64:3c:84:
cc:e3:d9:d5:8a:70:23:8f:9f:a1:d8:43:6a:c3:3f:0a:b4:34:
1a:31:8c:77:4a:7c:3d:fa:cd:85:8f:81:97:9e:7c:8d:43:eb:
8c:7c:c0:0f:67:8c:fd:37:6a:db:73:b0:3e:16:bb:bb:67:ce:
3d:cf:4f:c7:48:1c:15:45:95:55:d6:4d:5a:d1:84:3f:d4:a3:
97:0d:cd:7a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxFOQSEfMrqRGZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MWFmMzg0ZWMtZGM2MS00OTBmLWJkMGQtYjFjZDIxMDVmYzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogrxX7ia3iOgSTvBTU+SydApujMATl5SNanZ
rQSc7kAXLZh0rnUYFJXA/pTBsaQHp+OKRP2Gq141Om+8pP93omEWwB6en8mULEdy
7B0fYKz+VqDGsn/kufyA4Uhah/QnegNohoLMpEqKN35rmACHV6fB7dbZq4n2MysU
TgifDkUcZZ6R2r33kvnP8cgpR7Ej3imY5DoVP6GaYzNXhMLOun7VpSEkkv3TrJjH
hE43mvGilXC8qVcB5zpESL7c9tbTHJTBhbw99EC6VygE6V4EEtrh3drIbf0GM2OK
+eIOQWfKToSbabtVgNw5Q/RH/0OHikC8dXmDD5sVGh98EU9mbwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLmOL6yHx5IO+Fk65fb1oMBNClaJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODU0MDNhMjYtMTdmYi0z
M2U2LWEzMGUtZDdjNDBiZjYyMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAvtkGrOGKM4MhW1fKiKcgjYRHsqfAwUTmpb3i3x4FeSksmH9LCZ04M
blTm1Yt+Y3T9jM+hZe7RaHzNbNE16h3olEh+O+CN69+aTEjqsGbYoUeYefz0QFto
tQRM8lAXqvLPwoX8p7kGG3q57ol4d4dbU8njeWTkJN985eFDBzyBBUcq8cyGtdtg
Ka7mFiuQAyDun0C5RHFBpwQhy/bTPVB8IbqUgLnbknEKvn/xIiOc9MBkPITM49nV
inAjj5+h2ENqwz8KtDQaMYx3Snw9+s2Fj4GXnnyNQ+uMfMAPZ4z9N2rbc7A+Fru7
Z849z0/HSBwVRZVV1k1a0YQ/1KOXDc16
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:35 2025 by rpki-client