Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99e69f5b-7924-3e0a-a3e3-6f5e448ed392.roa
File: 99e69f5b-7924-3e0a-a3e3-6f5e448ed392.roa (raw, json)
Hash identifier: Fc0nkViJWAwqK7niE0u5Oc2Yi/n02B2yjd6UXEprxjw=
Subject key identifier: 22:4F:AD:23:CB:6A:50:40:D8:48:2A:65:96:05:D8:98:B1:7C:88:45
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492CB23496D3446919957FCE04
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99e69f5b-7924-3e0a-a3e3-6f5e448ed392.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 396571
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:34:96:d3:44:69:19:95:7f:ce:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=ce93a194-d88e-4649-bf37-f6e5833a5ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:d1:9f:d9:2d:1e:5c:19:fd:bc:36:be:2d:
16:a9:40:77:63:70:c9:2e:46:c1:bb:f6:e5:9d:7c:
76:d9:a5:c2:fa:9d:61:25:c7:95:b7:9d:a3:08:9a:
fa:9a:36:66:da:0e:93:7a:a8:ad:0d:c6:95:e8:da:
7f:d7:a4:bd:e6:cc:26:be:17:6d:e6:3a:24:41:29:
14:9a:67:42:91:28:62:a8:b1:b5:95:92:8c:2e:e7:
fa:bf:ec:19:a5:4c:c3:18:5f:74:bc:44:64:2b:78:
97:92:ed:de:7e:1b:61:a8:35:45:ef:dc:a5:94:d0:
41:28:4d:a0:14:9c:74:6e:47:de:49:bf:15:c1:bf:
69:46:37:99:94:24:cb:98:64:97:12:fc:9c:eb:53:
b4:9e:52:1b:90:4a:93:ee:f7:2a:db:cc:40:67:9a:
8f:fa:81:35:4c:44:58:c6:7a:94:c9:d0:87:8c:0c:
9b:d8:31:12:6e:99:aa:64:8a:3e:bc:4c:b3:8f:69:
96:65:da:ee:90:0e:2d:0a:bc:75:94:47:4d:93:8c:
02:b2:80:56:74:a4:aa:22:d0:f8:b1:5a:e6:21:0c:
ba:07:78:eb:5a:5b:cf:12:c2:8e:f9:90:bb:20:8f:
c1:cc:f0:56:78:bd:6f:50:b7:18:04:e5:0c:c0:36:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4F:AD:23:CB:6A:50:40:D8:48:2A:65:96:05:D8:98:B1:7C:88:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99e69f5b-7924-3e0a-a3e3-6f5e448ed392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:53:eb:8c:0b:69:2b:d5:6d:78:ed:34:ae:e5:0d:69:36:36:
b3:62:e7:f2:65:94:79:2d:f1:cc:5d:13:ee:7c:25:11:68:47:
2f:7a:ae:ad:83:7f:e0:e2:2a:d9:6b:57:79:c7:4e:36:08:66:
db:a9:57:53:0d:ab:e2:24:12:ed:a0:36:cb:a5:6f:7a:5a:ea:
86:44:bf:2e:26:3a:ad:d5:e0:6e:14:bb:bd:3e:dd:8b:8f:b5:
54:16:3a:79:33:b0:ab:fa:bc:f3:c4:b5:26:cf:9c:2a:8c:05:
f4:5f:8f:4f:fd:53:c3:cd:e1:d6:c1:1e:88:89:e3:ec:db:6f:
0a:76:6d:f0:42:8c:f8:ff:5e:3a:6c:dc:1a:55:bd:09:3f:48:
2b:cd:f4:28:96:93:5f:52:c9:d3:2b:c6:9f:56:50:fc:aa:f4:
3e:e3:66:5e:5d:63:9c:94:5f:f3:59:ea:8a:c2:b3:ac:91:12:
a1:d9:45:2f:0a:a2:b1:10:fc:5e:ad:46:48:ca:af:78:21:40:
83:91:18:95:00:46:a4:08:84:33:03:6b:2d:46:53:49:8b:71:
f9:1a:77:81:70:f2:58:40:c1:a1:0f:f6:6d:57:c0:9a:b2:aa:
39:11:d0:c2:a1:d8:e5:c0:1f:94:03:5d:d0:a2:95:ae:f7:5d:
d8:a7:82:56
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkssjSW00RpGZV/zgQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2U5M2ExOTQtZDg4ZS00NjQ5LWJmMzctZjZlNTgzM2E1ZWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12bRn9ktHlwZ/bw2vi0WqUB3Y3DJLkbBu/bl
nXx22aXC+p1hJceVt52jCJr6mjZm2g6TeqitDcaV6Np/16S95swmvhdt5jokQSkU
mmdCkShiqLG1lZKMLuf6v+wZpUzDGF90vERkK3iXku3efhthqDVF79yllNBBKE2g
FJx0bkfeSb8Vwb9pRjeZlCTLmGSXEvyc61O0nlIbkEqT7vcq28xAZ5qP+oE1TERY
xnqUydCHjAyb2DESbpmqZIo+vEyzj2mWZdrukA4tCrx1lEdNk4wCsoBWdKSqItD4
sVrmIQy6B3jrWlvPEsKO+ZC7II/BzPBWeL1vULcYBOUMwDaarwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCJPrSPLalBA2EgqZZYF2JixfIhFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTllNjlmNWItNzkyNC0z
ZTBhLWEzZTMtNmY1ZTQ0OGVkMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC/U+uMC2kr1W147TSu5Q1pNjazYufyZZR5LfHMXRPufCURaEcveq6t
g3/g4irZa1d5x042CGbbqVdTDaviJBLtoDbLpW96WuqGRL8uJjqt1eBuFLu9Pt2L
j7VUFjp5M7Cr+rzzxLUmz5wqjAX0X49P/VPDzeHWwR6IiePs228Kdm3wQoz4/146
bNwaVb0JP0grzfQolpNfUsnTK8afVlD8qvQ+42ZeXWOclF/zWeqKwrOskRKh2UUv
CqKxEPxerUZIyq94IUCDkRiVAEakCIQzA2stRlNJi3H5GneBcPJYQMGhD/ZtV8Ca
sqo5EdDCodjlwB+UA13QopWu913Yp4JW
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:37 2025 by rpki-client