Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa
File: bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa (raw, json)
Hash identifier: 59Pz9komfqwumXthihQOCXrlGPw1ZGUZQyfGeaJW5PY=
Subject key identifier: 0B:DA:3B:6F:1F:39:14:01:9E:79:78:5E:B3:27:FD:E2:63:95:62:F9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848854B3E31C9ECE5A963390D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 396579
IP address blocks: 192.42.175.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:3e:31:c9:ec:e5:a9:63:39:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=4fe98e56-c9eb-4fa7-a266-7df682b15148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:8f:32:a7:47:e4:ff:30:2b:5e:c3:6d:71:
95:5c:e1:47:95:88:3c:31:3b:0c:4e:e0:81:85:61:
2f:69:16:7b:64:7c:b4:d2:84:d3:80:8d:bf:11:76:
da:4b:03:8c:6c:34:0b:0f:ee:0c:99:e5:01:21:ae:
ca:46:23:5e:d0:ef:37:5c:be:89:23:90:fa:c8:7f:
51:af:65:f7:4b:f6:3c:8d:1e:32:ce:e9:7e:96:a6:
7b:9e:4b:38:d7:7c:3b:38:d2:8f:c1:ac:74:6f:c7:
d7:10:01:8e:ec:ea:44:4d:26:c8:3f:f5:d2:83:72:
25:3a:7f:2e:9f:58:3c:0d:86:3b:1e:3d:10:b8:af:
24:52:a2:73:d4:df:f9:e0:56:47:fe:5b:19:5e:6c:
0c:6a:d2:be:80:16:a6:52:32:a1:0f:ea:25:56:8f:
67:8e:be:8a:48:5d:6f:de:62:fc:92:83:ed:e6:cb:
4b:f2:d3:27:ef:9d:62:ec:a1:d6:cb:05:93:eb:e3:
24:b8:b4:76:f2:f2:c3:b2:3d:f2:ef:99:82:c6:fe:
b4:96:ed:bf:77:0f:c0:5e:5c:a2:0d:dc:6a:bf:7f:
2a:89:d2:85:93:89:d0:1f:bd:91:92:62:97:e5:98:
2c:24:2a:63:d6:8a:aa:55:2c:34:98:44:ee:0e:6b:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DA:3B:6F:1F:39:14:01:9E:79:78:5E:B3:27:FD:E2:63:95:62:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:94:88:54:a6:5c:fc:d8:dd:28:e5:cf:f3:20:b9:26:9a:44:
a1:f6:a3:d7:74:e9:dc:5e:ea:b1:cc:86:cd:b6:26:21:dc:9b:
8e:98:45:7d:fd:ec:2c:f9:3a:75:9f:51:c1:f6:eb:d5:a3:8b:
c2:67:f4:68:a9:c7:d1:50:be:d9:d5:55:11:93:be:80:bd:f5:
69:94:58:24:f8:bb:2b:c6:ad:a9:24:97:a9:2d:fc:ef:03:5f:
b6:a5:28:c2:ae:64:4d:70:95:5c:98:1f:a7:d3:d5:26:6a:a6:
fe:8b:90:89:62:b3:f8:ed:1b:3e:8f:ad:d8:25:55:d4:51:08:
1f:18:3e:f7:af:34:97:a4:56:45:28:e6:1f:71:8d:da:99:46:
6e:a7:cd:bf:6b:9d:15:cf:f6:dc:b8:52:a4:3d:80:a5:27:a9:
6d:24:9d:ed:79:d9:43:f6:fc:ad:c8:d0:11:3e:ee:69:b9:ee:
91:24:c8:28:1d:fd:08:d4:25:50:b7:69:be:78:a3:b5:d5:a2:
9f:90:2c:cf:bc:9b:84:20:9e:56:2d:98:7e:fb:cf:c3:b1:a9:
47:66:34:8c:6f:a4:c0:9e:80:2e:a0:ac:cf:e7:cc:17:fb:65:
f8:a2:bc:b3:73:56:43:09:e5:23:f5:28:d4:3d:f1:6c:89:94:
5e:25:a6:b9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiFSz4xyezlqWM5DUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
NGZlOThlNTYtYzllYi00ZmE3LWEyNjYtN2RmNjgyYjE1MTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu56PMqdH5P8wK17DbXGVXOFHlYg8MTsMTuCB
hWEvaRZ7ZHy00oTTgI2/EXbaSwOMbDQLD+4MmeUBIa7KRiNe0O83XL6JI5D6yH9R
r2X3S/Y8jR4yzul+lqZ7nks413w7ONKPwax0b8fXEAGO7OpETSbIP/XSg3IlOn8u
n1g8DYY7Hj0QuK8kUqJz1N/54FZH/lsZXmwMatK+gBamUjKhD+olVo9njr6KSF1v
3mL8koPt5stL8tMn751i7KHWywWT6+MkuLR28vLDsj3y75mCxv60lu2/dw/AXlyi
Ddxqv38qidKFk4nQH72RkmKX5ZgsJCpj1oqqVSw0mETuDmtA/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAvaO28fORQBnnl4XrMn/eJjlWL5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFmZDRlMDktMGUzMC0z
YjJiLTlhM2ItZjgxNDkzMDEyNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC2lIhUplz82N0o5c/zILkmmkSh9qPXdOncXuqxzIbNtiYh3JuOmEV9
/ews+Tp1n1HB9uvVo4vCZ/RoqcfRUL7Z1VURk76AvfVplFgk+Lsrxq2pJJepLfzv
A1+2pSjCrmRNcJVcmB+n09Umaqb+i5CJYrP47Rs+j63YJVXUUQgfGD73rzSXpFZF
KOYfcY3amUZup82/a50Vz/bcuFKkPYClJ6ltJJ3tedlD9vytyNARPu5pue6RJMgo
Hf0I1CVQt2m+eKO11aKfkCzPvJuEIJ5WLZh++8/DsalHZjSMb6TAnoAuoKzP58wX
+2X4oryzc1ZDCeUj9SjUPfFsiZReJaa5
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:02 2025 by rpki-client