Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa
File: bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa (raw, json)
Hash identifier: 3mBeBGYYAvksg+NAVrnmNgKuRT7ZhYIoapqWAEcdkNM=
Subject key identifier: 60:76:13:D5:E9:5C:4C:25:3B:03:45:04:7B:58:18:57:F2:0A:1E:2A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BB17A34C759CA00CE9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 36624
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bb:17:a3:4c:75:9c:a0:0c:e9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=f2bed57b-bfcd-49cc-96bc-648b6c0e6d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:e8:6f:84:f2:d9:a0:30:db:c7:4e:83:3b:
59:8b:f9:10:6e:27:6c:5e:e9:3d:11:65:b2:fa:e7:
27:6e:12:dc:22:1e:54:d2:25:13:73:9e:e6:53:6f:
f3:1b:69:69:88:13:8a:9c:bd:b7:3b:e5:08:2e:fc:
33:3c:50:a4:9c:19:4f:d2:c9:66:be:63:a3:dc:25:
28:da:60:ca:91:f5:75:0d:8d:7d:df:95:fb:f8:df:
d6:e3:b8:80:60:9c:e4:f4:16:9a:5e:ef:80:e9:22:
71:50:15:ba:71:41:63:dd:d3:b2:d9:7a:cb:33:75:
7e:01:69:db:0d:16:7b:c9:6f:f5:87:68:1f:96:8c:
cc:30:c5:c3:79:ed:07:78:a0:04:bb:5f:2c:fc:50:
e2:6f:00:da:2d:f5:63:b0:c9:72:ce:72:f9:04:08:
1d:9e:3f:8c:01:e4:0f:a0:8c:89:ad:a4:4a:44:da:
7f:35:fd:a6:bb:a4:b8:7c:2f:81:e8:d5:1e:fd:9f:
53:d9:5e:e7:d3:f2:ac:ee:a9:a6:26:18:5c:14:96:
c4:7c:7e:8d:0d:e2:40:f4:bb:e4:93:73:c8:88:3e:
78:cb:3e:d7:97:0a:85:1d:04:41:d8:e6:ee:6a:48:
a8:ab:15:e3:2e:3b:a9:05:a0:38:31:77:a0:05:a3:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:76:13:D5:E9:5C:4C:25:3B:03:45:04:7B:58:18:57:F2:0A:1E:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:86:7c:d4:d3:2a:e9:e0:72:e1:ec:61:c5:5a:41:55:59:aa:
13:83:28:d4:93:9b:02:5c:ec:1b:2d:d0:51:a9:e5:2c:ed:e5:
53:d6:4f:2a:48:70:e0:6c:f4:50:37:fa:91:4d:f9:c6:ea:89:
69:24:ca:42:06:5c:5f:76:e2:20:38:47:31:2e:6b:ba:6d:eb:
49:e4:65:7a:5e:8a:b8:ca:10:7e:12:5b:66:6a:cd:b0:26:11:
37:9a:5e:2f:6a:8d:a6:ff:74:8b:12:05:20:c5:93:e1:57:da:
57:9d:0a:24:1b:c9:b0:66:89:7f:48:b5:de:83:c8:f5:bc:05:
34:1f:0c:58:cc:67:bb:08:48:ae:65:ad:9d:d6:db:6a:04:73:
4f:56:37:2a:aa:09:9f:9c:69:7b:de:6a:70:cc:be:62:f9:0a:
43:6c:f8:75:f1:21:8b:46:ea:1b:c1:17:f4:df:cb:47:19:83:
b0:01:29:06:97:7a:33:ca:c7:d7:4f:94:21:13:77:50:cd:47:
83:38:20:b1:5a:d5:38:63:cf:f2:bf:75:79:4f:1a:ea:3e:7e:
1c:f1:58:0a:62:e2:b0:2f:1f:fb:e4:fb:ff:53:32:a5:6c:dc:
54:14:f4:58:77:23:09:88:57:25:d0:c9:1d:09:16:95:8d:11:
4c:2c:01:ed
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMLsXo0x1nKAM6cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZjJiZWQ1N2ItYmZjZC00OWNjLTk2YmMtNjQ4YjZjMGU2ZDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqofob4Ty2aAw28dOgztZi/kQbidsXuk9EWWy
+ucnbhLcIh5U0iUTc57mU2/zG2lpiBOKnL23O+UILvwzPFCknBlP0slmvmOj3CUo
2mDKkfV1DY1935X7+N/W47iAYJzk9BaaXu+A6SJxUBW6cUFj3dOy2XrLM3V+AWnb
DRZ7yW/1h2gflozMMMXDee0HeKAEu18s/FDibwDaLfVjsMlyznL5BAgdnj+MAeQP
oIyJraRKRNp/Nf2mu6S4fC+B6NUe/Z9T2V7n0/Ks7qmmJhhcFJbEfH6NDeJA9Lvk
k3PIiD54yz7XlwqFHQRB2ObuakioqxXjLjupBaA4MXegBaN3GwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGB2E9XpXEwlOwNFBHtYGFfyCh4qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJkMTBhMTYtN2VkZC0z
OGI2LThjODktZTUwODhiN2E3ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQChhnzU0yrp4HLh7GHFWkFVWaoTgyjUk5sCXOwbLdBRqeUs7eVT1k8q
SHDgbPRQN/qRTfnG6olpJMpCBlxfduIgOEcxLmu6betJ5GV6Xoq4yhB+Eltmas2w
JhE3ml4vao2m/3SLEgUgxZPhV9pXnQokG8mwZol/SLXeg8j1vAU0HwxYzGe7CEiu
Za2d1ttqBHNPVjcqqgmfnGl73mpwzL5i+QpDbPh18SGLRuobwRf038tHGYOwASkG
l3ozysfXT5QhE3dQzUeDOCCxWtU4Y8/yv3V5TxrqPn4c8VgKYuKwLx/75Pv/UzKl
bNxUFPRYdyMJiFcl0MkdCRaVjRFMLAHt
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:53 2025 by rpki-client