Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acd398de-bd39-379d-b2b9-f800223dc3bd.roa
File: acd398de-bd39-379d-b2b9-f800223dc3bd.roa (raw, json)
Hash identifier: sQzdXZ+WmUqLaJetqWpb2ee2EUMxHSB1+4vi+qkrSt0=
Subject key identifier: 45:5A:48:08:92:04:B3:9E:0E:2B:7A:67:68:0A:C6:EC:68:29:1B:64
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183E81486EABE12F9148780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acd398de-bd39-379d-b2b9-f800223dc3bd.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 32651
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:e8:14:86:ea:be:12:f9:14:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=f4716d8e-5e40-4a35-8e9d-f3c0f9388d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:8f:d2:b1:6d:1a:8d:a1:c5:58:07:ba:20:
cb:cb:0d:6f:12:88:25:f6:d3:18:64:ed:1e:dc:a1:
35:e0:aa:8d:b5:3a:8b:99:c3:13:27:5f:a5:a8:80:
50:5b:40:05:b0:b0:f3:b3:d1:1d:d4:bb:18:ef:42:
19:2b:55:a7:be:1c:a7:d2:b8:1b:4f:cf:49:41:1a:
dd:81:e1:83:da:4d:89:26:f0:b1:d1:cb:c7:9d:f1:
72:8b:83:67:c4:51:2d:bb:b7:79:60:0b:05:ec:1d:
a1:ff:9f:c9:3d:8b:38:99:ea:2d:1d:1d:1f:db:ee:
ef:32:f4:a6:0f:d0:09:a8:bc:18:17:35:84:84:42:
c4:2e:6c:88:71:60:12:f1:b2:63:a6:87:45:1a:c7:
72:34:d5:bf:6f:01:37:20:b4:e6:ab:bf:cd:61:7f:
e4:2c:a3:05:f3:89:95:23:06:53:35:df:93:b5:b4:
b5:ff:ae:f8:34:82:b5:a9:48:18:1b:b3:d3:ba:3f:
d0:c3:61:b6:47:53:4c:33:20:8a:f4:b7:df:13:43:
9e:38:ef:01:bf:04:84:ca:79:db:17:25:a7:30:f5:
60:9d:a0:a7:e5:21:41:ed:7c:bc:43:9f:04:c7:2f:
52:65:65:d9:df:c9:62:a8:9a:db:d0:16:02:6c:ac:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5A:48:08:92:04:B3:9E:0E:2B:7A:67:68:0A:C6:EC:68:29:1B:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acd398de-bd39-379d-b2b9-f800223dc3bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:eb:5a:a7:ed:b9:01:a7:d2:e3:12:c7:28:2d:bd:b4:09:87:
1c:c4:c5:32:d2:b7:56:3f:88:6f:cf:8a:13:1c:61:11:05:b2:
b8:14:f5:1f:79:73:78:92:e8:c1:a2:c5:1d:8d:eb:6e:26:d1:
49:ca:de:92:32:d1:e1:f6:fd:a0:e0:7f:a6:b6:08:00:08:d6:
f5:8e:8d:b2:8a:04:4b:af:ea:3e:5e:e8:a1:2b:b9:0f:ba:92:
37:82:04:e3:01:8d:82:a3:28:97:1b:de:ea:e7:fa:5b:e2:5b:
1e:d6:e7:e0:49:8a:17:e0:6d:8a:a1:19:e2:88:50:35:cb:67:
20:c5:93:55:9d:7e:65:0f:70:7e:55:c6:40:4c:c9:ae:f9:1a:
68:be:1c:4a:d0:b7:fb:54:ea:40:a6:29:71:69:63:41:b7:66:
e7:11:d3:4f:16:b1:f5:7a:7c:e0:9d:0a:27:da:68:bc:8f:96:
5c:71:a0:42:e1:6f:5a:01:af:ef:83:e8:5f:40:7f:7a:29:57:
64:38:48:fd:6a:16:e5:8c:a9:3a:6a:f6:5f:f2:2b:ca:74:5b:
23:ba:66:71:3f:10:f4:a9:93:1f:e4:53:01:e4:2d:6f:7c:50:
6f:e2:57:15:6e:29:0d:75:f1:c5:03:c0:c9:bb:3f:01:92:ac:
bb:f9:8e:74
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg+gUhuq+EvkUh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZjQ3MTZkOGUtNWU0MC00YTM1LThlOWQtZjNjMGY5Mzg4ZDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotSP0rFtGo2hxVgHuiDLyw1vEogl9tMYZO0e
3KE14KqNtTqLmcMTJ1+lqIBQW0AFsLDzs9Ed1LsY70IZK1Wnvhyn0rgbT89JQRrd
geGD2k2JJvCx0cvHnfFyi4NnxFEtu7d5YAsF7B2h/5/JPYs4meotHR0f2+7vMvSm
D9AJqLwYFzWEhELELmyIcWAS8bJjpodFGsdyNNW/bwE3ILTmq7/NYX/kLKMF84mV
IwZTNd+TtbS1/674NIK1qUgYG7PTuj/Qw2G2R1NMMyCK9LffE0OeOO8BvwSEynnb
FyWnMPVgnaCn5SFB7Xy8Q58Exy9SZWXZ38liqJrb0BYCbKyZ2wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEVaSAiSBLOeDit6Z2gKxuxoKRtkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWNkMzk4ZGUtYmQzOS0z
NzlkLWIyYjktZjgwMDIyM2RjM2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBy61qn7bkBp9LjEscoLb20CYccxMUy0rdWP4hvz4oTHGERBbK4FPUf
eXN4kujBosUdjetuJtFJyt6SMtHh9v2g4H+mtggACNb1jo2yigRLr+o+XuihK7kP
upI3ggTjAY2CoyiXG97q5/pb4lse1ufgSYoX4G2KoRniiFA1y2cgxZNVnX5lD3B+
VcZATMmu+RpovhxK0Lf7VOpApilxaWNBt2bnEdNPFrH1enzgnQon2mi8j5ZccaBC
4W9aAa/vg+hfQH96KVdkOEj9ahbljKk6avZf8ivKdFsjumZxPxD0qZMf5FMB5C1v
fFBv4lcVbikNdfHFA8DJuz8Bkqy7+Y50
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:27 2025 by rpki-client