Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0dc6683-9d59-3255-8e6e-dbfe5c88d834.roa
File: b0dc6683-9d59-3255-8e6e-dbfe5c88d834.roa (raw, json)
Hash identifier: dek9ioIu056h9dPJdVFpWC/Jw2ZVpEzHxM4vj0z9eUY=
Subject key identifier: 57:4B:20:A3:1E:5A:54:5F:E2:1B:05:F5:46:5E:6C:E3:0E:E7:DD:7D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BAD8BE513E146FB111A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0dc6683-9d59-3255-8e6e-dbfe5c88d834.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396546
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ba:d8:be:51:3e:14:6f:b1:11:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=6827d018-dfc8-422e-8379-bc7c710aae17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:a2:f4:a6:7f:c1:68:f9:97:9e:01:71:7f:
e0:86:43:4e:23:30:2b:11:6a:c3:cb:a6:ea:90:8d:
de:98:ef:ac:26:cd:07:13:3c:1d:38:f8:b3:f8:50:
0a:c9:01:e8:2c:d0:53:11:33:d2:ed:90:0f:75:24:
4d:bd:0c:c4:52:7e:e5:4b:1e:12:93:e6:c6:87:f2:
2a:06:7a:7f:d6:49:6a:ac:17:81:e2:7c:cc:6d:64:
0c:70:9b:55:fd:dc:0a:5b:3d:e0:6e:f6:32:5f:7b:
6b:a9:82:f1:33:03:16:05:97:f1:f0:4d:cb:18:0d:
a4:76:b8:93:b1:f8:9a:77:20:a1:e1:38:c0:d8:a6:
7b:d7:fe:25:f4:f1:a9:f3:7c:a1:eb:12:31:94:60:
b4:d6:a1:96:bc:9d:19:33:03:e4:3f:a0:fc:8b:65:
36:05:c0:b6:c2:fb:08:ef:9d:85:72:e7:50:fb:11:
aa:52:ce:40:99:85:7b:16:c3:3b:17:c9:4c:65:ee:
0e:81:65:0c:c1:33:86:04:ce:21:bd:ff:89:32:a1:
94:49:83:79:a3:42:e9:65:a0:97:3d:c9:fd:99:0c:
d7:31:de:e1:88:14:10:7c:38:28:d9:c1:49:9b:78:
4f:cb:91:ab:5d:73:a9:1b:6c:6a:7c:d6:f8:33:d3:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4B:20:A3:1E:5A:54:5F:E2:1B:05:F5:46:5E:6C:E3:0E:E7:DD:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0dc6683-9d59-3255-8e6e-dbfe5c88d834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:3a:09:a3:dd:51:74:bd:1f:d8:8c:a0:da:39:43:80:c2:a8:
a1:43:d7:91:44:66:86:a6:5b:38:5e:67:ae:a1:c7:c2:91:51:
43:61:90:ed:75:09:d8:10:2c:4d:29:4b:fa:5a:07:5c:c6:6d:
62:85:c1:17:23:84:f4:58:19:7c:44:99:22:13:4f:c1:f3:20:
46:39:e5:38:d5:53:15:78:3f:87:3b:61:79:05:f4:7e:21:d1:
ea:8a:cc:4a:c1:d5:1f:a7:9b:4e:b2:d5:5c:20:2a:96:f1:90:
16:a1:44:aa:40:31:a2:5f:c3:37:f4:36:a7:0e:fd:d6:6d:00:
ad:a2:b7:39:b8:f1:15:a0:1c:94:e4:92:c9:db:37:c3:8d:06:
8d:f8:f4:79:c2:c6:35:27:33:6d:c5:0d:7d:bd:c6:72:27:c7:
ca:da:5e:f1:dd:d8:3a:ab:11:17:4c:bf:f1:51:ab:da:fa:82:
18:57:e5:8d:9b:ec:1a:3a:b6:45:a1:62:df:c3:c4:bf:1d:a5:
7d:1c:35:3b:03:2c:35:fe:fd:4b:4c:b5:53:70:04:62:6e:53:
32:e8:99:48:b0:31:cc:ee:ee:f9:6c:15:57:d3:5d:3b:02:a7:
24:1d:b0:97:10:c3:7b:22:82:65:ab:fe:d8:66:b0:49:3f:09:
a8:a0:bf:a1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMLrYvlE+FG+xEaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
NjgyN2QwMTgtZGZjOC00MjJlLTgzNzktYmM3YzcxMGFhZTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMyi9KZ/wWj5l54BcX/ghkNOIzArEWrDy6bq
kI3emO+sJs0HEzwdOPiz+FAKyQHoLNBTETPS7ZAPdSRNvQzEUn7lSx4Sk+bGh/Iq
Bnp/1klqrBeB4nzMbWQMcJtV/dwKWz3gbvYyX3trqYLxMwMWBZfx8E3LGA2kdriT
sfiadyCh4TjA2KZ71/4l9PGp83yh6xIxlGC01qGWvJ0ZMwPkP6D8i2U2BcC2wvsI
752FcudQ+xGqUs5AmYV7FsM7F8lMZe4OgWUMwTOGBM4hvf+JMqGUSYN5o0LpZaCX
Pcn9mQzXMd7hiBQQfDgo2cFJm3hPy5GrXXOpG2xqfNb4M9MT1wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFdLIKMeWlRf4hsF9UZebOMO5919MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjBkYzY2ODMtOWQ1OS0z
MjU1LThlNmUtZGJmZTVjODhkODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB7Ogmj3VF0vR/YjKDaOUOAwqihQ9eRRGaGpls4XmeuocfCkVFDYZDt
dQnYECxNKUv6Wgdcxm1ihcEXI4T0WBl8RJkiE0/B8yBGOeU41VMVeD+HO2F5BfR+
IdHqisxKwdUfp5tOstVcICqW8ZAWoUSqQDGiX8M39DanDv3WbQCtorc5uPEVoByU
5JLJ2zfDjQaN+PR5wsY1JzNtxQ19vcZyJ8fK2l7x3dg6qxEXTL/xUava+oIYV+WN
m+waOrZFoWLfw8S/HaV9HDU7Ayw1/v1LTLVTcARiblMy6JlIsDHM7u75bBVX0107
AqckHbCXEMN7IoJlq/7YZrBJPwmooL+h
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:21 2025 by rpki-client