Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa
File: 8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa (raw, json)
Hash identifier: 6bpo+udL+DOVovYHDKsAKSR8VSG70vDIjXoY1bBlBFA=
Subject key identifier: 5B:1D:DB:42:B2:2B:D1:63:8B:30:E1:0D:F3:C9:8A:AA:C3:B6:55:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494B641E332D831BCB2F372000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 0
IP address blocks: 192.68.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1e:33:2d:83:1b:cb:2f:37:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=876d418b-ab26-408e-88a8-220d8fbd2261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:49:13:41:86:fc:a0:6b:67:e0:20:b1:0b:d6:
15:38:5a:92:31:df:e7:c0:50:bd:1a:02:67:84:aa:
e1:9b:41:a1:33:ea:dc:75:ff:e5:80:04:5e:49:32:
41:63:ad:a9:9b:ca:9c:77:da:f3:e9:30:46:45:0e:
31:bd:7e:ee:3e:a9:02:c7:bf:3e:d7:71:73:81:6e:
fe:78:b1:50:05:6e:44:04:80:87:0a:9a:75:18:84:
dc:35:2d:ec:ac:cc:4b:c1:4d:ac:a7:d6:b4:14:36:
99:09:9f:1f:e4:56:56:99:c5:37:28:6c:04:9f:3f:
7a:cd:d5:96:f6:80:02:30:b3:20:8a:af:7c:2c:fe:
a1:a1:c2:20:11:dc:f8:2f:64:72:e3:dd:75:45:c4:
8c:76:77:97:cf:6c:5c:f8:2b:f6:83:4c:0b:c1:b0:
90:fb:64:1a:b6:11:57:c6:1b:54:2f:67:9d:b0:df:
a8:86:78:76:07:43:5f:74:ca:85:87:f8:32:5e:85:
f4:3d:4d:9c:01:fd:0e:a9:e6:6e:08:3b:22:83:ab:
33:87:a5:c0:cb:59:d5:31:b9:01:40:c3:73:12:a5:
b3:cb:8d:b2:7d:cb:81:a4:7e:a7:fb:88:bc:02:6d:
4c:c9:f6:26:3f:3e:eb:d9:01:68:28:65:d1:b6:85:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1D:DB:42:B2:2B:D1:63:8B:30:E1:0D:F3:C9:8A:AA:C3:B6:55:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:d3:a4:de:f7:9a:44:5d:fe:8c:de:48:06:7d:75:d3:ea:1f:
2a:0d:61:b5:91:69:03:c2:5a:2a:30:0f:4a:50:d5:67:e7:10:
b5:ff:ce:c3:fd:23:3d:11:7e:3c:5e:c9:9a:09:69:06:03:4a:
6a:ff:de:94:57:01:1c:12:3c:bc:eb:6b:36:8c:eb:49:e9:bc:
cd:21:0b:1f:55:a4:2b:82:3f:88:f6:36:f8:54:7a:32:26:b6:
1a:f7:73:7c:54:d2:de:e9:ac:c3:38:93:d1:c7:e3:7e:d6:30:
98:16:18:7e:26:bc:79:3c:15:ad:b3:a8:8f:4a:9b:c3:81:14:
0c:4d:22:1e:19:0c:ef:98:2b:85:60:4b:8e:22:9c:e2:23:1e:
01:d7:d4:b7:3b:04:1d:7c:42:4c:0f:02:a7:49:0f:90:81:14:
cf:cd:d9:28:6c:ae:54:ef:49:dc:e5:c1:03:7c:20:d2:08:38:
5a:2a:e4:10:c4:10:c2:8d:8b:dd:2d:ca:4e:43:ac:76:f2:99:
6f:b2:34:ec:c8:37:bf:c2:9a:cc:e4:42:c4:bc:d6:19:f9:49:
66:eb:50:e6:74:ff:d8:d5:ef:bc:09:02:74:9c:a1:94:b5:9e:
63:ac:ce:4b:75:e8:95:88:cd:79:ff:9c:67:b8:27:70:0d:c2:
20:18:a5:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZB4zLYMbyy83IAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
ODc2ZDQxOGItYWIyNi00MDhlLTg4YTgtMjIwZDhmYmQyMjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EkTQYb8oGtn4CCxC9YVOFqSMd/nwFC9GgJn
hKrhm0GhM+rcdf/lgAReSTJBY62pm8qcd9rz6TBGRQ4xvX7uPqkCx78+13FzgW7+
eLFQBW5EBICHCpp1GITcNS3srMxLwU2sp9a0FDaZCZ8f5FZWmcU3KGwEnz96zdWW
9oACMLMgiq98LP6hocIgEdz4L2Ry4911RcSMdneXz2xc+Cv2g0wLwbCQ+2QathFX
xhtUL2edsN+ohnh2B0NfdMqFh/gyXoX0PU2cAf0OqeZuCDsig6szh6XAy1nVMbkB
QMNzEqWzy42yfcuBpH6n+4i8Am1MyfYmPz7r2QFoKGXRtoUskwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsd20KyK9FjizDhDfPJiqrDtlXlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGI0YTIwMWUtYjBiNS0z
NTJiLTllMDUtY2VkMWU2MDFmZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwESBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKHTpN73mkRd/ozeSAZ9ddPqHyoNYbWRaQPCWiowD0pQ1WfnELX/zsP9
Iz0RfjxeyZoJaQYDSmr/3pRXARwSPLzrazaM60npvM0hCx9VpCuCP4j2NvhUejIm
thr3c3xU0t7prMM4k9HH437WMJgWGH4mvHk8Fa2zqI9Km8OBFAxNIh4ZDO+YK4Vg
S44inOIjHgHX1Lc7BB18QkwPAqdJD5CBFM/N2ShsrlTvSdzlwQN8INIIOFoq5BDE
EMKNi90tyk5DrHbymW+yNOzIN7/CmszkQsS81hn5SWbrUOZ0/9jV77wJAnScoZS1
nmOszkt16JWIzXn/nGe4J3ANwiAYpR8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:12 2025 by rpki-client