Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a39e97-9498-3c1e-bd7f-12b6680a6a03.roa
File: b4a39e97-9498-3c1e-bd7f-12b6680a6a03.roa (raw, json)
Hash identifier: rHHevlVD1Rxcx+HoazQiJ+jKNF5uHIAc8hRE15/kw8c=
Subject key identifier: EC:D2:56:4C:FD:DA:65:72:80:C8:72:39:93:81:C2:09:69:F9:E5:46
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183ED7D95C8CD7D87CB8D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a39e97-9498-3c1e-bd7f-12b6680a6a03.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396606
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:ed:7d:95:c8:cd:7d:87:cb:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=edcb3255-4df7-45ff-a44c-db8c105cd815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:d5:2a:59:60:c7:92:84:eb:71:08:68:8f:
58:30:90:8d:7a:82:2c:ec:52:e6:fc:4a:b5:f2:d1:
fb:99:31:76:b3:cf:b4:43:dd:0f:7e:74:94:27:53:
db:55:03:17:e7:09:cb:1f:15:9d:53:ae:b0:b0:c8:
42:dd:a3:84:84:ed:8c:42:d2:d2:d8:83:f8:53:83:
7c:9a:a5:f3:cd:80:85:5e:ca:82:ae:57:b7:e9:6c:
bb:08:52:e4:fe:16:a0:f4:dc:0d:02:92:59:7b:f7:
16:ea:96:10:b0:56:d6:b1:be:ba:c8:63:ec:ab:67:
41:0e:07:60:a1:e6:20:ec:0e:65:f1:b7:05:d3:5c:
4c:85:3a:53:41:14:a8:b7:a0:da:dc:3d:bd:bf:97:
e8:09:28:a0:75:bb:12:33:90:e9:66:13:58:c2:88:
b0:27:a7:74:a4:f4:04:cd:d2:82:d6:93:b0:9e:4a:
79:13:89:5d:95:93:eb:bf:7c:c2:fc:b9:a5:8f:a2:
cb:f4:8a:1d:63:4e:95:43:1c:f1:f6:b1:94:2d:b3:
e1:43:6f:4e:0b:17:e8:51:ea:de:44:76:c5:0a:81:
6e:4d:b1:99:98:e1:49:7b:4c:69:09:4f:99:17:96:
ee:56:e3:ce:65:ee:41:5d:b4:a8:fb:2d:80:e8:84:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D2:56:4C:FD:DA:65:72:80:C8:72:39:93:81:C2:09:69:F9:E5:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a39e97-9498-3c1e-bd7f-12b6680a6a03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:04:14:97:6d:eb:9a:e9:0f:56:40:23:09:0b:99:eb:86:cd:
94:b8:53:47:fd:04:26:ae:a4:41:d1:43:c2:10:ac:44:7c:2b:
85:a4:b1:21:1f:cb:ea:51:16:7f:6f:dd:d8:1c:00:9c:f2:fe:
10:14:a0:40:07:b8:a2:f7:dd:29:10:23:a8:7a:81:05:7b:65:
bf:62:04:13:a9:72:89:5a:0d:06:13:41:8c:c3:69:3a:30:67:
59:c9:6b:f1:19:c7:97:33:73:9b:ff:b8:ae:63:fa:d1:53:36:
f2:d2:28:60:29:1a:36:17:67:64:1f:9a:7a:2e:09:07:6c:b3:
98:21:74:17:e9:10:73:af:dd:7d:4a:10:7a:e4:1c:f4:75:4c:
79:5c:5c:57:a0:19:03:10:4d:89:94:b4:90:a3:79:cd:60:30:
d0:72:7b:c9:b3:84:ea:5b:d7:ea:7d:7b:c5:e8:ec:93:51:e7:
9e:20:f5:fc:ce:d2:e4:44:1b:83:ee:e7:f5:cd:9e:5b:fe:b8:
87:68:19:9e:bf:e3:d9:d5:9c:ca:18:b8:dc:b8:bf:79:ac:94:
e9:a0:16:c1:2d:10:27:41:65:23:a4:78:29:26:74:a5:0e:db:
a6:20:cb:f3:9b:02:6f:61:c0:96:69:9c:7c:fb:a6:ef:75:4a:
f3:8d:e2:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg+19lcjNfYfLjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZWRjYjMyNTUtNGRmNy00NWZmLWE0NGMtZGI4YzEwNWNkODE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa7VKllgx5KE63EIaI9YMJCNeoIs7FLm/Eq1
8tH7mTF2s8+0Q90PfnSUJ1PbVQMX5wnLHxWdU66wsMhC3aOEhO2MQtLS2IP4U4N8
mqXzzYCFXsqCrle36Wy7CFLk/hag9NwNApJZe/cW6pYQsFbWsb66yGPsq2dBDgdg
oeYg7A5l8bcF01xMhTpTQRSot6Da3D29v5foCSigdbsSM5DpZhNYwoiwJ6d0pPQE
zdKC1pOwnkp5E4ldlZPrv3zC/Lmlj6LL9IodY06VQxzx9rGULbPhQ29OCxfoUere
RHbFCoFuTbGZmOFJe0xpCU+ZF5buVuPOZe5BXbSo+y2A6ISVLQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOzSVkz92mVygMhyOZOBwglp+eVGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjRhMzllOTctOTQ5OC0z
YzFlLWJkN2YtMTJiNjY4MGE2YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCuBBSXbeua6Q9WQCMJC5nrhs2UuFNH/QQmrqRB0UPCEKxEfCuFpLEh
H8vqURZ/b93YHACc8v4QFKBAB7ii990pECOoeoEFe2W/YgQTqXKJWg0GE0GMw2k6
MGdZyWvxGceXM3Ob/7iuY/rRUzby0ihgKRo2F2dkH5p6LgkHbLOYIXQX6RBzr919
ShB65Bz0dUx5XFxXoBkDEE2JlLSQo3nNYDDQcnvJs4TqW9fqfXvF6OyTUeeeIPX8
ztLkRBuD7uf1zZ5b/riHaBmev+PZ1ZzKGLjcuL95rJTpoBbBLRAnQWUjpHgpJnSl
DtumIMvzmwJvYcCWaZx8+6bvdUrzjeLf
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:54 2025 by rpki-client