Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ec009-255c-3ee7-9e04-756afbad6161.roa
File: aa2ec009-255c-3ee7-9e04-756afbad6161.roa (raw, json)
Hash identifier: xkek7nN61rRHiK6FJUSN+o9HHIqYCz0TKETUoIekcqc=
Subject key identifier: 9E:75:86:02:58:9D:A4:CC:DB:CA:75:C5:AD:55:F5:7F:D0:52:EF:22
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183BA2202FDBE3889EA7600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ec009-255c-3ee7-9e04-756afbad6161.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 36616
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:ba:22:02:fd:be:38:89:ea:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=e40f104a-d08c-4a04-afa5-af18ae1eeafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:f9:87:87:02:ec:d9:d9:8a:ef:e7:8c:ed:
bc:7e:e8:0f:b8:b3:09:73:68:be:fb:8c:45:b7:52:
4e:a4:af:ac:be:a1:ba:16:db:dc:38:ca:69:ad:f7:
de:07:6a:9f:b1:da:0b:0d:41:24:c4:d2:0c:09:c7:
83:14:da:60:c7:bb:0e:3c:1a:2b:bc:7b:a9:f5:01:
3b:51:63:b7:17:c2:a6:1a:e5:0d:21:8f:da:da:70:
34:d2:00:9d:80:07:6e:7c:6a:fa:35:64:c0:78:20:
f9:f4:7b:27:16:69:f5:37:a1:4b:38:5a:a7:ba:fb:
0e:89:96:d0:a7:77:23:a0:37:c1:4e:61:c6:0e:62:
2e:6b:79:64:e8:4a:e4:45:b5:7a:c4:8e:f5:25:d2:
f8:84:9a:42:a8:b5:86:d1:f2:53:81:73:f9:2e:41:
aa:f0:70:d5:8a:6d:ae:71:8e:50:a0:41:0c:b9:8e:
86:c1:02:a9:41:be:ab:76:96:72:13:e2:86:eb:48:
a5:ae:a5:e0:ab:09:c6:7f:b8:f4:7e:0e:39:8f:c1:
e2:22:42:a6:b3:27:2b:bc:5d:c5:bd:ca:38:10:61:
8f:2f:70:cf:63:62:4d:f1:96:12:73:2e:43:4a:04:
ed:78:a7:54:e4:26:69:25:9f:06:3c:de:a5:99:17:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:75:86:02:58:9D:A4:CC:DB:CA:75:C5:AD:55:F5:7F:D0:52:EF:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ec009-255c-3ee7-9e04-756afbad6161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:bf:e3:10:55:36:0c:78:b5:3d:b7:48:22:bc:66:c1:17:b0:
94:e9:72:37:dd:66:75:15:4d:72:00:2e:07:0f:06:2c:a3:25:
8b:fe:b2:ab:23:ec:a3:e5:25:51:81:ce:55:6d:b1:9a:26:29:
44:92:cd:2c:17:c0:76:b6:4e:60:32:d4:23:8a:df:ea:c5:12:
4b:9e:83:f2:8d:38:2a:3c:a4:01:2b:e3:6e:7b:a2:a7:da:4e:
f5:df:55:9a:2e:d6:39:a3:ea:d5:e2:9c:4e:8d:3a:1e:be:92:
e4:7d:fb:a2:fd:06:17:63:49:68:5a:c6:c1:6d:d1:0c:ea:66:
eb:5a:24:af:49:ca:58:06:78:d6:4d:10:d4:f0:38:fe:24:8e:
dc:2f:23:d8:d2:0c:db:53:d2:f3:d5:ef:98:20:92:ea:d5:63:
68:11:4e:c0:fd:bd:c4:57:ae:72:47:b5:2c:7f:3a:a3:20:e6:
f0:db:d1:27:be:83:40:6c:ef:10:c0:99:a3:bf:f4:89:e8:b3:
db:ce:6e:c1:c7:24:6b:35:f2:ce:1d:c4:27:f6:10:a5:86:f9:
e0:d4:39:4b:76:7e:39:e0:bb:ca:ea:49:72:b3:a2:e8:49:f2:
b2:59:4c:fe:e8:04:b5:12:cb:45:85:0b:2a:e8:86:c2:4c:36:
b4:c4:6d:18
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg7oiAv2+OInqdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZTQwZjEwNGEtZDA4Yy00YTA0LWFmYTUtYWYxOGFlMWVlYWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8n5h4cC7NnZiu/njO28fugPuLMJc2i++4xF
t1JOpK+svqG6FtvcOMpprffeB2qfsdoLDUEkxNIMCceDFNpgx7sOPBorvHup9QE7
UWO3F8KmGuUNIY/a2nA00gCdgAdufGr6NWTAeCD59HsnFmn1N6FLOFqnuvsOiZbQ
p3cjoDfBTmHGDmIua3lk6ErkRbV6xI71JdL4hJpCqLWG0fJTgXP5LkGq8HDVim2u
cY5QoEEMuY6GwQKpQb6rdpZyE+KG60ilrqXgqwnGf7j0fg45j8HiIkKmsycrvF3F
vco4EGGPL3DPY2JN8ZYScy5DSgTteKdU5CZpJZ8GPN6lmRc2vQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ51hgJYnaTM28p1xa1V9X/QUu8iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWEyZWMwMDktMjU1Yy0z
ZWU3LTllMDQtNzU2YWZiYWQ2MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB8v+MQVTYMeLU9t0givGbBF7CU6XI33WZ1FU1yAC4HDwYsoyWL/rKr
I+yj5SVRgc5VbbGaJilEks0sF8B2tk5gMtQjit/qxRJLnoPyjTgqPKQBK+Nue6Kn
2k7131WaLtY5o+rV4pxOjToevpLkffui/QYXY0loWsbBbdEM6mbrWiSvScpYBnjW
TRDU8Dj+JI7cLyPY0gzbU9Lz1e+YIJLq1WNoEU7A/b3EV65yR7UsfzqjIObw29En
voNAbO8QwJmjv/SJ6LPbzm7BxyRrNfLOHcQn9hClhvng1DlLdn454LvK6klys6Lo
SfKyWUz+6AS1EstFhQsq6IbCTDa0xG0Y
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:01:00 2025 by rpki-client