Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9abff1eb-446a-3264-b131-1b096dfefeb7.roa
File: 9abff1eb-446a-3264-b131-1b096dfefeb7.roa (raw, json)
Hash identifier: D4Q+rDSQ65Uus8W4bdZ5X6MFSrkAdPLVtAEzE3wGe/o=
Subject key identifier: 8E:CB:2B:6A:CF:33:DE:C5:F3:97:F8:8F:26:F4:AC:3C:4D:24:FF:53
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B78442B9B8A80B7BE82FCDB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9abff1eb-446a-3264-b131-1b096dfefeb7.roa
Signing time: Thu 30 Jan 2025 13:46:18 +0000
ROA not before: Thu 30 Jan 2025 13:46:18 +0000
ROA not after: Wed 30 Apr 2025 12:46:18 +0000
asID: 396600
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:42:b9:b8:a8:0b:7b:e8:2f:cd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:18 2025 GMT
Not After : Apr 30 12:46:18 2025 GMT
Subject: CN=a5770ee4-4eee-43ec-b835-c6f446e2f909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:e9:9c:21:ef:a4:25:54:ea:c3:6d:35:e6:
1e:18:ba:7b:3b:72:96:a0:cb:f0:cd:63:eb:2e:af:
c4:8b:89:53:88:7f:ff:c0:67:10:1b:32:da:bb:9f:
6f:3c:20:e1:5e:56:ac:44:f2:26:1b:33:98:ac:bc:
89:4b:89:97:9b:d9:ff:79:44:94:87:6d:eb:c4:f7:
ed:42:69:1b:b8:bc:25:6e:7f:8b:49:77:43:6e:35:
e4:59:be:92:9b:d6:05:13:8e:0d:dd:78:a1:2d:ee:
5e:58:c6:75:c3:8a:a7:c4:ac:f9:f1:22:da:19:77:
6d:6d:c0:90:ef:52:9e:cd:9b:17:2c:06:8f:b9:3f:
dc:0b:ff:41:63:c5:46:e5:70:74:f0:b0:09:cd:93:
2b:fa:b6:74:9b:aa:b5:ca:9b:bc:1c:ce:ba:b6:a5:
56:c6:82:7b:fc:9c:34:f4:87:9c:70:ee:85:11:ea:
90:58:e1:cd:41:ac:17:f6:9e:bd:fc:bf:57:32:db:
08:2e:15:2c:b2:d1:f3:f2:c2:b4:ed:2e:ce:01:be:
ec:96:4e:c1:92:26:92:b6:68:83:2d:23:83:f1:67:
f9:36:85:35:69:87:29:9c:26:61:16:0f:b2:e5:5a:
e6:c5:15:b9:c8:3c:84:b1:db:c4:26:5b:ed:39:3f:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CB:2B:6A:CF:33:DE:C5:F3:97:F8:8F:26:F4:AC:3C:4D:24:FF:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9abff1eb-446a-3264-b131-1b096dfefeb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:c6:09:aa:94:8c:0e:3d:05:40:ac:2a:8b:66:d6:bc:c7:2a:
df:fb:8d:d5:ee:e2:07:ce:94:93:a9:c9:9a:5f:7e:84:00:00:
4d:62:e0:0e:d0:18:84:04:95:3c:e3:ee:20:de:d4:7d:1f:69:
e4:47:db:82:89:44:00:67:c3:e4:12:59:b0:d1:3e:74:4c:62:
55:a3:76:f2:19:38:17:f8:02:fb:d7:90:bb:f5:51:35:01:83:
f1:48:0c:2f:52:23:22:0a:c8:09:03:30:07:bd:d0:47:2b:18:
2e:21:15:8d:6b:ca:1a:49:6d:d9:86:75:95:e6:7e:39:84:f2:
42:97:6b:fe:cc:91:b0:56:dd:0b:8d:26:cd:50:1c:58:25:f4:
9d:65:50:76:07:dd:f6:c7:2f:46:60:79:65:c8:97:1a:e3:a9:
60:1a:1c:ef:f4:19:bc:0e:c0:f4:8d:61:61:de:31:9a:9e:46:
c4:64:b9:ce:04:1f:7a:d6:ce:a9:20:e2:fa:ca:e5:f4:76:31:
a5:7e:81:67:f9:fd:b1:69:e1:6b:ae:d4:fc:fc:0d:28:8d:5e:
7a:64:b1:db:9c:4a:fa:56:5c:dc:a2:78:85:12:49:3e:ca:cc:
1a:50:cc:c8:e2:05:75:be:de:43:f1:d6:9a:54:08:ca:8b:51:
36:1b:d2:44
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hEK5uKgLe+gvzbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMDEzNDYxOFoXDTI1MDQzMDEyNDYxOFowLzEtMCsGA1UEAxMk
YTU3NzBlZTQtNGVlZS00M2VjLWI4MzUtYzZmNDQ2ZTJmOTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvjpnCHvpCVU6sNtNeYeGLp7O3KWoMvwzWPr
Lq/Ei4lTiH//wGcQGzLau59vPCDhXlasRPImGzOYrLyJS4mXm9n/eUSUh23rxPft
QmkbuLwlbn+LSXdDbjXkWb6Sm9YFE44N3XihLe5eWMZ1w4qnxKz58SLaGXdtbcCQ
71KezZsXLAaPuT/cC/9BY8VG5XB08LAJzZMr+rZ0m6q1ypu8HM66tqVWxoJ7/Jw0
9IeccO6FEeqQWOHNQawX9p69/L9XMtsILhUsstHz8sK07S7OAb7slk7BkiaStmiD
LSOD8Wf5NoU1aYcpnCZhFg+y5VrmxRW5yDyEsdvEJlvtOT+5AQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI7LK2rPM97F85f4jyb0rDxNJP9TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWFiZmYxZWItNDQ2YS0z
MjY0LWIxMzEtMWIwOTZkZmVmZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB6xgmqlIwOPQVArCqLZta8xyrf+43V7uIHzpSTqcmaX36EAABNYuAO
0BiEBJU84+4g3tR9H2nkR9uCiUQAZ8PkElmw0T50TGJVo3byGTgX+AL715C79VE1
AYPxSAwvUiMiCsgJAzAHvdBHKxguIRWNa8oaSW3ZhnWV5n45hPJCl2v+zJGwVt0L
jSbNUBxYJfSdZVB2B932xy9GYHllyJca46lgGhzv9Bm8DsD0jWFh3jGankbEZLnO
BB961s6pIOL6yuX0djGlfoFn+f2xaeFrrtT8/A0ojV56ZLHbnEr6VlzconiFEkk+
yswaUMzI4gV1vt5D8daaVAjKi1E2G9JE
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:15 2025 by rpki-client