Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb198be9-be58-38c5-a6dc-8b10bee98a70.roa
File: bb198be9-be58-38c5-a6dc-8b10bee98a70.roa (raw, json)
Hash identifier: /oG4Gv5pgIZdLUfuhelfqwo5Q19++KB2d7pM4xR1DhA=
Subject key identifier: 77:52:94:3F:47:BF:A2:51:C5:39:76:3B:88:51:BF:B7:6E:E7:B8:FF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B7843D99DAAC2CC6DA11B440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb198be9-be58-38c5-a6dc-8b10bee98a70.roa
Signing time: Thu 30 Jan 2025 13:46:16 +0000
ROA not before: Thu 30 Jan 2025 13:46:16 +0000
ROA not after: Wed 30 Apr 2025 12:46:16 +0000
asID: 397204
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:3d:99:da:ac:2c:c6:da:11:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:16 2025 GMT
Not After : Apr 30 12:46:16 2025 GMT
Subject: CN=52e2eac9-9a99-464b-b5c4-c7fac431ebe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:c4:e1:16:7a:3f:bf:40:48:97:3d:df:50:
c6:43:79:55:41:60:11:9a:a6:f4:9e:0a:82:42:e9:
7d:f6:a3:b3:0e:34:8e:86:38:ae:db:d0:f4:b8:05:
97:94:24:92:4b:38:5d:ab:a8:a8:fd:23:c1:87:47:
a2:4b:ef:2d:e1:a2:68:49:ee:4f:96:65:50:d2:71:
40:45:cf:2b:21:fe:ad:7d:53:90:75:cf:b6:70:a5:
91:3f:c4:0f:a0:93:8e:fc:d4:fd:47:9c:92:b7:83:
0b:29:b1:53:7e:7e:69:af:00:a4:47:92:ea:f7:30:
6f:ff:52:c3:91:d3:d4:6b:86:b4:21:ca:f2:7b:70:
af:47:e7:08:fa:8a:5c:fc:a6:67:dd:19:7b:20:23:
61:78:c6:5a:17:24:ae:ff:70:60:c7:92:76:ad:b1:
f1:76:24:81:99:02:d5:15:bf:3a:35:42:63:7f:85:
7b:37:8b:1c:22:fb:4a:da:14:86:ce:31:da:6f:29:
ad:ab:12:dc:bf:59:a8:5a:e2:ad:0e:02:db:a6:6a:
32:88:4c:c0:0b:b4:11:a2:a7:bc:47:51:35:ed:9a:
f4:e6:61:f5:12:50:2d:8c:92:b6:bf:ac:17:29:ad:
81:54:ae:ee:60:5d:8a:2c:aa:a3:4f:4e:17:06:7e:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:52:94:3F:47:BF:A2:51:C5:39:76:3B:88:51:BF:B7:6E:E7:B8:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb198be9-be58-38c5-a6dc-8b10bee98a70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:1e:d0:f4:0e:35:9e:50:d2:4e:8c:a1:f9:b2:2b:25:25:cb:
cd:5a:33:8d:b4:43:64:21:dd:d8:95:c9:74:ac:03:89:97:43:
12:1a:3b:e4:fe:53:92:83:64:5c:c7:71:92:52:00:fa:b5:6a:
72:22:bf:68:20:a6:14:22:60:41:e3:c1:d7:28:de:84:f7:ed:
cb:c4:bb:f7:e7:80:8e:d2:aa:d1:55:32:80:1a:3e:9a:17:db:
be:a6:40:57:f1:c7:05:e2:b2:8e:47:87:71:aa:c3:cf:69:ab:
c1:9f:a9:d3:54:44:57:26:f1:e8:cd:b1:64:fe:b3:73:3d:c7:
c1:19:6a:ab:de:83:0d:3f:1a:68:97:8a:5e:54:0f:37:a9:8d:
71:50:4d:6c:ee:4f:13:ba:e6:d6:6e:95:fe:35:55:c5:c0:e2:
89:2b:d4:35:d2:29:b0:c5:af:f0:24:e2:ae:06:6e:f6:92:c0:
62:d6:e1:89:59:06:2e:9e:37:ce:fa:dc:38:e2:5c:c6:a1:0d:
4e:37:91:31:f6:c1:10:c8:9f:ce:9d:10:84:d2:d7:3c:08:2f:
06:96:14:88:82:bd:56:25:28:2e:2f:84:1e:05:98:d2:cc:85:
c0:20:59:bf:0f:1a:5c:e9:43:ae:e6:b6:bb:91:92:3e:7f:36:
87:37:41:3c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hD2Z2qwsxtoRtEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMDEzNDYxNloXDTI1MDQzMDEyNDYxNlowLzEtMCsGA1UEAxMk
NTJlMmVhYzktOWE5OS00NjRiLWI1YzQtYzdmYWM0MzFlYmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNLE4RZ6P79ASJc931DGQ3lVQWARmqb0ngqC
Qul99qOzDjSOhjiu29D0uAWXlCSSSzhdq6io/SPBh0eiS+8t4aJoSe5PlmVQ0nFA
Rc8rIf6tfVOQdc+2cKWRP8QPoJOO/NT9R5ySt4MLKbFTfn5prwCkR5Lq9zBv/1LD
kdPUa4a0Icrye3CvR+cI+opc/KZn3Rl7ICNheMZaFySu/3Bgx5J2rbHxdiSBmQLV
Fb86NUJjf4V7N4scIvtK2hSGzjHabymtqxLcv1moWuKtDgLbpmoyiEzAC7QRoqe8
R1E17Zr05mH1ElAtjJK2v6wXKa2BVK7uYF2KLKqjT04XBn743QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHdSlD9Hv6JRxTl2O4hRv7du57j/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmIxOThiZTktYmU1OC0z
OGM1LWE2ZGMtOGIxMGJlZTk4YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAoHtD0DjWeUNJOjKH5sislJcvNWjONtENkId3Ylcl0rAOJl0MSGjvk
/lOSg2Rcx3GSUgD6tWpyIr9oIKYUImBB48HXKN6E9+3LxLv354CO0qrRVTKAGj6a
F9u+pkBX8ccF4rKOR4dxqsPPaavBn6nTVERXJvHozbFk/rNzPcfBGWqr3oMNPxpo
l4peVA83qY1xUE1s7k8TuubWbpX+NVXFwOKJK9Q10imwxa/wJOKuBm72ksBi1uGJ
WQYunjfO+tw44lzGoQ1ON5Ex9sEQyJ/OnRCE0tc8CC8GlhSIgr1WJSguL4QeBZjS
zIXAIFm/Dxpc6UOu5ra7kZI+fzaHN0E8
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:15 2025 by rpki-client