Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87775820-2443-3292-bad7-19f5f7b03077.roa
File: 87775820-2443-3292-bad7-19f5f7b03077.roa (raw, json)
Hash identifier: fLQwbVH6OTNrknzYpYZczDmyf6UVe62Y0Px1qOoDdIY=
Subject key identifier: 40:79:10:8B:E7:76:EE:2C:1F:04:B6:89:97:1D:49:57:5F:2C:3B:48
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183CC0972178002FD4EB240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87775820-2443-3292-bad7-19f5f7b03077.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 36628
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:cc:09:72:17:80:02:fd:4e:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=fd744c32-40d8-441f-b5fe-9799ddbfcd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:1e:84:e5:0d:52:00:7c:50:9e:82:64:d5:
35:6f:26:19:e2:59:e6:04:16:ed:e6:36:c3:c4:f6:
92:cc:e4:fc:62:b7:ab:9d:c3:55:fd:c3:9f:d9:50:
f1:7e:c8:44:29:ae:77:60:d7:57:16:89:7e:4d:ad:
1b:79:28:20:9e:59:eb:c9:52:a2:22:6e:c1:5c:4f:
23:4c:45:e9:c0:7b:d8:f9:d7:a1:e2:49:18:7e:80:
06:33:94:74:8d:89:d8:ea:c8:61:03:77:9e:2a:7b:
93:bf:da:5c:96:9e:58:d1:40:cc:96:fe:f2:d2:ee:
f1:50:6d:8c:b2:15:05:33:a8:a0:fa:fa:16:da:5b:
6c:99:89:f3:84:e1:5d:c2:df:4a:b4:79:04:d0:8c:
77:3a:ce:5e:48:b9:77:74:3a:a3:87:c6:b5:4a:18:
88:3b:51:ed:d0:22:97:ba:f7:de:e9:13:dd:20:ff:
f5:5c:15:20:78:a1:36:70:52:c2:5a:9d:6d:58:c4:
56:cf:f9:71:7d:11:f2:3d:63:88:f2:a7:c0:ae:df:
19:4b:c4:8a:78:27:4f:80:b6:66:39:9b:8e:24:30:
2a:ad:2a:af:bd:2d:cb:48:34:4e:e8:f4:71:5f:ec:
82:d8:14:14:11:10:3b:02:bf:50:88:be:12:11:09:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:79:10:8B:E7:76:EE:2C:1F:04:B6:89:97:1D:49:57:5F:2C:3B:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87775820-2443-3292-bad7-19f5f7b03077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:d6:72:a9:dc:00:f2:1c:64:eb:28:01:d5:ac:fe:76:c4:66:
30:a3:e7:28:eb:41:b4:c1:48:03:44:41:34:7c:b6:12:2e:29:
e7:1f:18:8a:19:9f:68:a5:70:1a:c6:0c:72:a0:2f:9c:57:44:
55:c4:18:07:57:8f:d2:e6:63:25:68:aa:0a:79:ad:10:55:88:
9e:e0:e0:0d:ec:06:50:f3:5b:49:49:af:ff:71:60:e8:a2:ea:
9e:b6:2d:79:2f:ef:ca:84:5a:18:0e:53:f4:c3:13:ce:08:d7:
10:69:8d:75:ac:65:f1:99:39:88:92:89:72:7e:8e:af:9c:9b:
c2:ee:1d:25:b9:5b:26:72:a0:87:b4:02:d7:c7:b5:bd:d3:a6:
94:4c:ec:66:47:a2:27:46:24:fd:29:93:55:10:46:98:49:99:
04:17:15:28:16:26:21:06:d5:c1:eb:fa:76:18:ea:9e:69:5d:
8c:3e:d1:82:fb:ca:de:77:ec:2c:4c:33:dd:7b:41:8f:77:1d:
55:be:2a:66:7b:6a:2b:fd:76:39:e2:21:27:04:5f:ea:2d:61:
00:18:7c:08:a7:a1:cb:77:8a:bb:c2:72:58:14:b1:cc:06:bd:
3a:a4:77:eb:a2:75:fd:8a:93:56:1b:b5:e1:33:30:05:83:d0:
85:ca:c0:10
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg8wJcheAAv1OskAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZmQ3NDRjMzItNDBkOC00NDFmLWI1ZmUtOTc5OWRkYmZjZDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT0ehOUNUgB8UJ6CZNU1byYZ4lnmBBbt5jbD
xPaSzOT8YrerncNV/cOf2VDxfshEKa53YNdXFol+Ta0beSggnlnryVKiIm7BXE8j
TEXpwHvY+deh4kkYfoAGM5R0jYnY6shhA3eeKnuTv9pclp5Y0UDMlv7y0u7xUG2M
shUFM6ig+voW2ltsmYnzhOFdwt9KtHkE0Ix3Os5eSLl3dDqjh8a1ShiIO1Ht0CKX
uvfe6RPdIP/1XBUgeKE2cFLCWp1tWMRWz/lxfRHyPWOI8qfArt8ZS8SKeCdPgLZm
OZuOJDAqrSqvvS3LSDRO6PRxX+yC2BQUERA7Ar9QiL4SEQl9AwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEB5EIvndu4sHwS2iZcdSVdfLDtIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODc3NzU4MjAtMjQ0My0z
MjkyLWJhZDctMTlmNWY3YjAzMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB01nKp3ADyHGTrKAHVrP52xGYwo+co60G0wUgDREE0fLYSLinnHxiK
GZ9opXAaxgxyoC+cV0RVxBgHV4/S5mMlaKoKea0QVYie4OAN7AZQ81tJSa//cWDo
ouqeti15L+/KhFoYDlP0wxPOCNcQaY11rGXxmTmIkolyfo6vnJvC7h0luVsmcqCH
tALXx7W906aUTOxmR6InRiT9KZNVEEaYSZkEFxUoFiYhBtXB6/p2GOqeaV2MPtGC
+8red+wsTDPde0GPdx1Vvipme2or/XY54iEnBF/qLWEAGHwIp6HLd4q7wnJYFLHM
Br06pHfronX9ipNWG7XhMzAFg9CFysAQ
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:47 2025 by rpki-client