Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa
File: 8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa (raw, json)
Hash identifier: md7fCgIZzKdKax1lsKUx7IdWLGag73UAa/T5rCuZuhk=
Subject key identifier: D6:8F:99:5C:43:9A:5A:4B:7E:D8:7A:91:E4:9D:98:8B:92:8D:79:97
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C75ADB10AEF6421F3750
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 19836
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c7:5a:db:10:ae:f6:42:1f:37:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=cc1c57a2-a64c-4937-aa61-7addaa62a60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:f2:56:33:26:ca:6a:f4:1d:4d:8b:a6:02:
b9:e9:21:45:53:36:86:36:b3:a7:f8:e2:1e:e4:6b:
19:e9:e5:47:1d:ea:c4:16:b4:dc:1a:f0:3b:4a:5e:
f9:ee:1a:a4:66:ab:88:13:2b:16:e2:3d:f5:11:dc:
f2:4b:ff:9e:73:9a:49:7e:ba:17:83:bc:49:3a:a6:
52:9c:10:30:34:a4:0c:e8:d0:6d:96:4a:6b:59:1f:
22:d7:b1:a6:ec:7b:8b:1f:63:27:a6:89:df:a3:2e:
7d:67:21:03:87:c1:fa:77:7f:4b:bd:be:db:1a:91:
d2:95:48:ad:64:f6:7f:19:1b:8d:8a:59:73:98:43:
d6:f2:73:bc:78:49:a8:83:e7:c3:b3:d7:27:33:8e:
c2:ce:6f:18:88:94:c6:68:66:89:3b:67:41:fa:5c:
af:f4:d8:a4:6e:b1:74:63:ec:3d:85:aa:31:6d:52:
41:33:0b:a1:2e:39:ea:b8:08:bc:1a:aa:ea:eb:b4:
50:28:63:cf:2a:a6:45:16:17:82:29:da:7b:2e:fe:
d4:d3:f1:64:da:8d:f0:1e:7e:1d:14:4e:7f:73:bd:
9e:df:32:01:2a:70:bb:46:e6:a5:e4:84:36:60:66:
cd:aa:b4:bf:4f:97:dc:39:d3:47:67:e0:58:9c:d7:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:99:5C:43:9A:5A:4B:7E:D8:7A:91:E4:9D:98:8B:92:8D:79:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:c7:ec:17:bf:07:be:38:c1:aa:fc:78:f7:9e:7e:fd:b2:a6:
59:29:b0:78:04:f6:bc:b3:a1:b2:b8:17:a3:1c:14:09:c5:59:
a0:f6:81:5d:51:ab:76:b5:dc:23:31:72:e2:34:f1:3e:d8:27:
7c:c8:b3:e9:11:91:d1:ba:2a:f2:5c:43:98:ab:4f:89:c6:bf:
07:04:d3:3d:ad:4e:b5:7b:81:19:2d:fb:63:3d:bb:c7:10:3c:
d7:5e:6c:f3:ba:a2:86:2d:a8:01:1b:9b:4e:a9:52:ee:5d:00:
71:6e:b6:03:9f:96:e9:81:59:91:d1:74:e9:bb:4a:3c:45:9b:
eb:86:6e:f4:a0:cb:28:4e:b4:a5:7c:b6:50:6d:58:7a:74:c7:
79:a4:c9:61:33:e5:b2:fd:05:1e:c5:9f:d9:48:19:1f:35:18:
ab:f3:49:9f:90:90:35:b3:db:35:fa:1c:70:33:81:ea:f8:b5:
5d:81:79:9a:cf:36:16:1c:5c:1e:90:9f:3b:7c:6d:b8:df:4f:
27:1c:a2:a0:5b:37:8b:c4:92:74:8d:8a:b0:17:d0:f6:c6:ee:
2c:86:92:f9:78:f9:97:fe:73:71:fc:e9:8e:9e:19:57:87:88:
01:f9:56:9c:57:8e:f9:6b:86:a2:f4:3b:cf:7f:46:10:9a:eb:
aa:0c:21:f4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg8da2xCu9kIfN1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
Y2MxYzU3YTItYTY0Yy00OTM3LWFhNjEtN2FkZGFhNjJhNjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRryVjMmymr0HU2LpgK56SFFUzaGNrOn+OIe
5GsZ6eVHHerEFrTcGvA7Sl757hqkZquIEysW4j31EdzyS/+ec5pJfroXg7xJOqZS
nBAwNKQM6NBtlkprWR8i17Gm7HuLH2Mnponfoy59ZyEDh8H6d39Lvb7bGpHSlUit
ZPZ/GRuNillzmEPW8nO8eEmog+fDs9cnM47Czm8YiJTGaGaJO2dB+lyv9NikbrF0
Y+w9haoxbVJBMwuhLjnquAi8Gqrq67RQKGPPKqZFFheCKdp7Lv7U0/Fk2o3wHn4d
FE5/c72e3zIBKnC7Rual5IQ2YGbNqrS/T5fcOdNHZ+BYnNdMvwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNaPmVxDmlpLfth6keSdmIuSjXmXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGI5MmVkNWItODQ0Yi0z
YWJmLTlmMjMtM2NjMTM5ZmUxNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqyHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCux+wXvwe+OMGq/Hj3nn79sqZZKbB4BPa8s6GyuBejHBQJxVmg9oFd
Uat2tdwjMXLiNPE+2Cd8yLPpEZHRuiryXEOYq0+Jxr8HBNM9rU61e4EZLftjPbvH
EDzXXmzzuqKGLagBG5tOqVLuXQBxbrYDn5bpgVmR0XTpu0o8RZvrhm70oMsoTrSl
fLZQbVh6dMd5pMlhM+Wy/QUexZ/ZSBkfNRir80mfkJA1s9s1+hxwM4Hq+LVdgXma
zzYWHFwekJ87fG24308nHKKgWzeLxJJ0jYqwF9D2xu4shpL5ePmX/nNx/OmOnhlX
h4gB+VacV475a4ai9DvPf0YQmuuqDCH0
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:26 2025 by rpki-client