Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7db2025-2a8e-3249-a77e-acea5b95df9a.roa
File: a7db2025-2a8e-3249-a77e-acea5b95df9a.roa (raw, json)
Hash identifier: DyPZEjCQRl4titk0bZc3lplyKneSPbe0Wv5DFRnrdPE=
Subject key identifier: 62:75:C1:C3:D3:13:87:A0:5F:A0:28:16:F9:18:86:CF:76:D8:68:CC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0F3F714E17571148FE700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7db2025-2a8e-3249-a77e-acea5b95df9a.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396572
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f3:f7:14:e1:75:71:14:8f:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=4dd366ae-ca77-477d-8c08-fe1d94267827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:42:a9:ab:ae:82:58:2b:4c:62:7a:00:b4:
60:ce:f1:60:ab:b2:e8:6c:53:88:cb:be:14:f0:1e:
f4:a7:d9:ab:5f:1a:c5:44:16:16:11:7f:ac:e4:a8:
dd:5e:84:4c:53:13:46:2a:69:7d:4d:99:87:e1:17:
3f:9d:fb:17:37:3a:55:7f:9d:3f:9c:28:d6:f1:ae:
cc:43:ac:bf:eb:b9:6c:74:d3:99:0e:32:a1:ed:51:
20:3f:71:c5:ac:ea:24:86:3e:ee:a2:61:8d:25:26:
14:25:a1:a8:4b:a2:b0:5b:b0:ab:5a:dc:1a:55:4c:
58:1b:c1:af:52:62:20:b6:ca:a0:55:2e:ad:c0:fc:
cd:03:98:c3:67:91:35:12:94:68:35:d5:03:72:bd:
dd:6e:a2:60:da:4a:e8:11:0a:d1:2b:85:c2:e3:6d:
b8:0d:95:39:c3:0a:93:50:6a:b7:6d:97:9f:7d:e0:
eb:7a:85:c3:48:ce:e9:10:0b:ad:f4:89:e5:db:52:
01:d3:af:94:7a:8c:3a:28:0c:21:96:b2:41:e3:c0:
d9:8b:72:5c:f9:2f:af:ef:03:cf:ab:28:17:88:cd:
fa:47:81:fd:f0:d6:4c:ca:da:22:33:51:a4:bc:e6:
e3:54:04:20:bc:39:d7:46:e7:52:c3:fb:21:16:9c:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:C1:C3:D3:13:87:A0:5F:A0:28:16:F9:18:86:CF:76:D8:68:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7db2025-2a8e-3249-a77e-acea5b95df9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:bd:8d:ba:71:67:19:b0:e6:70:67:82:ac:18:cd:ee:ce:1d:
b7:a0:fc:7b:3a:0a:3b:a2:56:b8:7f:5e:f2:45:e4:c8:ca:4c:
8e:d5:09:84:a3:7c:19:50:e2:47:c7:dc:39:b1:45:9b:7f:45:
c8:44:22:58:66:85:73:92:59:fd:70:0d:6e:fc:df:76:70:f1:
56:54:6b:bc:71:f4:a7:ce:94:db:15:34:1e:41:b1:07:cb:bd:
66:2f:1c:6f:27:5e:87:21:9a:75:a1:cb:21:0a:2a:5e:2d:9e:
3b:2b:e5:93:48:76:5b:c8:01:90:84:43:83:8a:96:7a:85:75:
d7:90:00:5d:f7:69:4e:04:90:4c:07:e8:fd:87:c1:c3:ac:d1:
94:71:bd:1d:67:35:11:8e:ad:65:eb:3a:1e:46:f3:6d:b6:e1:
d0:d9:33:63:b6:46:e8:ab:31:73:7a:ae:e8:31:e6:90:11:ef:
67:04:93:2b:16:c4:d2:e9:80:ad:4e:02:6e:42:7b:2d:30:ef:
d8:c3:08:15:af:cb:56:25:bb:74:74:f5:2f:df:8c:bd:d9:9d:
ab:e1:80:7e:ab:bb:47:9f:fa:79:36:4c:f7:73:92:1e:52:4e:
a4:08:13:a5:be:93:85:49:42:70:77:81:6f:6c:f1:ae:24:8f:
5b:05:58:ad
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wPP3FOF1cRSP5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
NGRkMzY2YWUtY2E3Ny00NzdkLThjMDgtZmUxZDk0MjY3ODI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxltCqauuglgrTGJ6ALRgzvFgq7LobFOIy74U
8B70p9mrXxrFRBYWEX+s5KjdXoRMUxNGKml9TZmH4Rc/nfsXNzpVf50/nCjW8a7M
Q6y/67lsdNOZDjKh7VEgP3HFrOokhj7uomGNJSYUJaGoS6KwW7CrWtwaVUxYG8Gv
UmIgtsqgVS6twPzNA5jDZ5E1EpRoNdUDcr3dbqJg2kroEQrRK4XC4224DZU5wwqT
UGq3bZeffeDreoXDSM7pEAut9Inl21IB06+Ueow6KAwhlrJB48DZi3Jc+S+v7wPP
qygXiM36R4H98NZMytoiM1GkvObjVAQgvDnXRudSw/shFpzSqQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGJ1wcPTE4egX6AoFvkYhs922GjMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTdkYjIwMjUtMmE4ZS0z
MjQ5LWE3N2UtYWNlYTViOTVkZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC+vY26cWcZsOZwZ4KsGM3uzh23oPx7Ogo7ola4f17yReTIykyO1QmE
o3wZUOJHx9w5sUWbf0XIRCJYZoVzkln9cA1u/N92cPFWVGu8cfSnzpTbFTQeQbEH
y71mLxxvJ16HIZp1ocshCipeLZ47K+WTSHZbyAGQhEODipZ6hXXXkABd92lOBJBM
B+j9h8HDrNGUcb0dZzURjq1l6zoeRvNttuHQ2TNjtkboqzFzeq7oMeaQEe9nBJMr
FsTS6YCtTgJuQnstMO/YwwgVr8tWJbt0dPUv34y92Z2r4YB+q7tHn/p5Nkz3c5Ie
Uk6kCBOlvpOFSUJwd4FvbPGuJI9bBVit
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:39 2025 by rpki-client