Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7609c12-d599-3a6c-bc38-3b66258c1021.roa
File: a7609c12-d599-3a6c-bc38-3b66258c1021.roa (raw, json)
Hash identifier: An9AfmVQHODjF0YoxTY/ijzFM93mDgkHlPP9/TVfGGM=
Subject key identifier: 9A:27:15:9C:B8:42:C8:EC:32:4C:BB:83:68:09:FC:82:13:A6:C5:7A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F5857A53F728C8E31A7CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7609c12-d599-3a6c-bc38-3b66258c1021.roa
Signing time: Thu 23 Jan 2025 13:38:21 +0000
ROA not before: Thu 23 Jan 2025 13:38:21 +0000
ROA not after: Wed 23 Apr 2025 12:38:21 +0000
asID: 396586
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:85:7a:53:f7:28:c8:e3:1a:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:21 2025 GMT
Not After : Apr 23 12:38:21 2025 GMT
Subject: CN=685f828d-e6ec-49f6-867c-65646f9a271f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:58:34:ba:76:b5:79:02:8f:68:11:05:86:
80:4e:4b:a8:5d:b7:b9:91:87:c2:a3:dc:b4:d1:7b:
c4:cc:31:74:d5:89:18:d3:4f:2d:da:36:78:7b:f9:
01:17:82:ae:0d:34:ba:ab:c2:b9:c0:7d:b3:54:7d:
07:5b:c7:50:c5:59:28:1c:5c:4b:eb:0a:db:a6:34:
16:1c:1c:b4:6e:d1:b9:9e:c9:56:67:c1:d1:2e:39:
35:25:a7:ee:24:28:ff:b3:f5:b4:84:c8:57:73:b6:
38:e3:73:f6:26:d6:0c:fc:65:0d:cb:e1:64:08:0b:
88:55:5e:94:16:6b:f1:da:7b:36:ba:56:7d:5b:56:
68:2d:51:e7:26:36:ae:a0:4e:f6:6f:c9:e5:ef:ed:
19:6e:b8:70:c4:af:f7:35:89:b8:05:9c:3d:b9:b9:
88:d4:9b:49:21:40:c3:82:80:c2:c5:4a:cb:9d:71:
9c:dd:96:b8:2d:67:57:33:00:e3:2c:44:8d:51:9d:
2d:58:bb:44:15:b3:0c:c1:a5:6e:53:47:7a:e3:29:
73:eb:d6:f1:67:44:7e:e3:4c:c6:1e:65:c3:e2:a9:
27:23:f4:92:9e:da:1d:7d:7d:f1:3b:84:d8:ef:84:
30:02:bc:14:aa:42:0f:a5:d7:13:62:d4:75:8e:05:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:27:15:9C:B8:42:C8:EC:32:4C:BB:83:68:09:FC:82:13:A6:C5:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7609c12-d599-3a6c-bc38-3b66258c1021.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:98:43:21:02:c8:6d:0e:b3:bd:64:4a:08:73:dd:79:7a:f7:
b8:f2:e3:8f:7e:f0:ff:15:d6:9b:f5:63:a6:29:3b:e5:05:82:
ed:07:8d:8b:3e:2d:af:8b:21:2b:3a:90:38:87:9e:ec:09:b8:
e9:27:cc:f9:b2:4a:37:e8:1a:00:39:ca:b7:46:2d:46:ed:ec:
14:1e:3d:4d:40:21:a7:19:78:2f:2b:40:d9:10:d3:9f:e3:d9:
0b:7d:57:c8:45:36:a2:51:1a:04:e3:9e:06:b8:2b:52:6b:23:
b0:6b:cc:c3:f7:d2:35:b1:98:cd:76:a3:26:89:1a:4f:0b:98:
6b:99:66:5c:a6:8c:e8:f6:50:29:83:7d:07:06:ae:d2:18:31:
cb:f1:fb:e5:52:bb:b6:47:00:1d:ee:2f:cc:fb:3f:a1:37:8f:
bc:e6:67:e0:5a:db:19:8f:25:6a:fd:6e:61:70:d8:ae:32:dc:
59:d9:7d:3b:d6:57:e1:ec:65:23:aa:f6:1b:55:2a:9c:c8:a0:
7f:66:46:fb:59:74:63:c1:d9:ef:05:ba:be:4c:b0:aa:7d:e1:
4d:b6:85:6c:90:66:ce:30:82:c9:c2:de:79:9e:b5:20:1c:36:
55:13:8e:b0:b5:bf:f7:f7:f1:17:d9:63:ea:7d:fd:42:f4:0c:
42:f3:53:9e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEij9YV6U/coyOMafMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMzEzMzgyMVoXDTI1MDQyMzEyMzgyMVowLzEtMCsGA1UEAxMk
Njg1ZjgyOGQtZTZlYy00OWY2LTg2N2MtNjU2NDZmOWEyNzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPhYNLp2tXkCj2gRBYaATkuoXbe5kYfCo9y0
0XvEzDF01YkY008t2jZ4e/kBF4KuDTS6q8K5wH2zVH0HW8dQxVkoHFxL6wrbpjQW
HBy0btG5nslWZ8HRLjk1JafuJCj/s/W0hMhXc7Y443P2JtYM/GUNy+FkCAuIVV6U
Fmvx2ns2ulZ9W1ZoLVHnJjauoE72b8nl7+0ZbrhwxK/3NYm4BZw9ubmI1JtJIUDD
goDCxUrLnXGc3Za4LWdXMwDjLESNUZ0tWLtEFbMMwaVuU0d64ylz69bxZ0R+40zG
HmXD4qknI/SSntodfX3xO4TY74QwArwUqkIPpdcTYtR1jgVmHwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJonFZy4QsjsMky7g2gJ/IITpsV6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTc2MDljMTItZDU5OS0z
YTZjLWJjMzgtM2I2NjI1OGMxMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCemEMhAshtDrO9ZEoIc915eve48uOPfvD/Fdab9WOmKTvlBYLtB42L
Pi2viyErOpA4h57sCbjpJ8z5sko36BoAOcq3Ri1G7ewUHj1NQCGnGXgvK0DZENOf
49kLfVfIRTaiURoE454GuCtSayOwa8zD99I1sZjNdqMmiRpPC5hrmWZcpozo9lAp
g30HBq7SGDHL8fvlUru2RwAd7i/M+z+hN4+85mfgWtsZjyVq/W5hcNiuMtxZ2X07
1lfh7GUjqvYbVSqcyKB/Zkb7WXRjwdnvBbq+TLCqfeFNtoVskGbOMILJwt55nrUg
HDZVE46wtb/39/EX2WPqff1C9AxC81Oe
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:50 2025 by rpki-client