Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa
File: c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa (raw, json)
Hash identifier: A6zq6w7Lfy2jNvA3GqgThf0mcQ+w6SFUt//7mOg+N3g=
Subject key identifier: AC:F5:AB:C1:AC:E1:14:E8:6E:67:C0:BC:FF:0F:A4:01:DE:B5:F4:36
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BCC8C42F8B013B3A3C50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 27544
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bc:c8:c4:2f:8b:01:3b:3a:3c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=545fee76-5c27-4891-8c3b-1a786db89a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:65:69:31:8c:e6:b3:a5:9c:a9:c5:23:12:
d8:85:ce:38:65:74:c9:d5:e0:af:05:da:5a:12:13:
b6:8f:fd:ff:6d:cf:95:8d:7d:15:06:0c:72:60:ce:
48:0b:a4:26:f0:ee:2a:ec:e6:49:b1:d6:d0:ff:5c:
a3:d8:6b:c3:3f:fb:1a:a9:1c:f1:ea:7c:38:4d:d5:
8a:3e:67:df:1b:91:cf:f8:f1:46:e6:7a:11:47:42:
92:b1:84:1f:b8:0a:8d:d4:3e:dd:74:d3:b7:40:1e:
40:30:12:e8:61:16:c1:db:7f:b9:b4:b1:39:2b:fe:
38:50:22:bc:17:78:e9:21:b0:a5:28:b3:ad:02:84:
45:7f:b3:07:d9:f0:6e:d0:49:5f:82:0c:21:57:e3:
bc:dc:71:8f:d2:e4:f9:55:ed:12:e8:f2:06:b7:0e:
e5:63:b4:88:99:bc:c0:0f:43:29:e5:eb:1a:90:cd:
2c:88:17:7c:76:ee:ba:c8:45:81:6f:83:7f:e6:5a:
9e:78:a6:97:ee:fe:c8:9c:29:68:3b:fe:76:1d:95:
17:0b:1c:31:a9:5f:1c:47:88:d1:3c:ea:49:33:9f:
00:1d:61:25:02:db:2c:8f:05:2c:30:c0:a1:89:41:
44:a2:7f:7f:f1:cc:0c:15:cb:65:c1:6e:66:60:af:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F5:AB:C1:AC:E1:14:E8:6E:67:C0:BC:FF:0F:A4:01:DE:B5:F4:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c72c18fa-2d16-3b1b-9ca1-8811c411d150.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:6a:56:c7:da:27:67:75:d3:38:a5:a8:73:a7:83:8d:39:ac:
3c:35:fb:64:e0:3f:e9:c1:2d:45:43:c8:37:c8:b8:be:aa:12:
34:a0:18:c2:dd:58:04:40:a9:f3:34:ad:20:c4:3e:ac:9c:e2:
71:33:6f:a0:cd:f4:0d:c4:a4:06:2e:0d:f9:e5:da:b7:82:ba:
be:dc:a8:6d:05:d2:aa:da:3f:61:4b:02:79:7d:c4:cb:06:66:
97:f7:12:d7:16:cd:04:34:22:5e:04:e0:5b:29:12:85:df:05:
87:fc:86:85:3d:9d:12:92:91:76:03:eb:b5:b5:0c:89:6b:1e:
32:71:92:ed:ba:c2:73:dc:3d:fa:16:43:de:bb:5d:4c:4b:8c:
17:97:a9:44:73:f5:61:b6:ad:5f:5a:7d:06:a4:30:92:ce:6c:
f5:ce:84:c6:34:e2:9c:a6:94:62:a3:b1:b1:c4:fb:e8:0a:f9:
d8:d2:70:09:00:3c:ed:ec:89:0d:bd:e7:78:f0:4d:76:56:2b:
1a:58:54:d6:27:d5:25:6c:02:0c:e4:4c:4d:bb:d9:bc:5a:32:
60:5e:c4:dd:05:83:62:73:6e:31:81:ae:90:f5:32:1c:d0:bd:
a3:60:10:fe:63:bd:ca:b5:67:ac:32:51:52:66:a0:21:31:80:
f1:ed:4d:d5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMLzIxC+LATs6PFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
NTQ1ZmVlNzYtNWMyNy00ODkxLThjM2ItMWE3ODZkYjg5YTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPllaTGM5rOlnKnFIxLYhc44ZXTJ1eCvBdpa
EhO2j/3/bc+VjX0VBgxyYM5IC6Qm8O4q7OZJsdbQ/1yj2GvDP/saqRzx6nw4TdWK
PmffG5HP+PFG5noRR0KSsYQfuAqN1D7ddNO3QB5AMBLoYRbB23+5tLE5K/44UCK8
F3jpIbClKLOtAoRFf7MH2fBu0ElfggwhV+O83HGP0uT5Ve0S6PIGtw7lY7SImbzA
D0Mp5esakM0siBd8du66yEWBb4N/5lqeeKaX7v7InCloO/52HZUXCxwxqV8cR4jR
POpJM58AHWElAtssjwUsMMChiUFEon9/8cwMFctlwW5mYK+P0wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKz1q8Gs4RTobmfAvP8PpAHetfQ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzcyYzE4ZmEtMmQxNi0z
YjFiLTljYTEtODgxMWM0MTFkMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCialbH2idnddM4pahzp4ONOaw8Nftk4D/pwS1FQ8g3yLi+qhI0oBjC
3VgEQKnzNK0gxD6snOJxM2+gzfQNxKQGLg355dq3grq+3KhtBdKq2j9hSwJ5fcTL
BmaX9xLXFs0ENCJeBOBbKRKF3wWH/IaFPZ0SkpF2A+u1tQyJax4ycZLtusJz3D36
FkPeu11MS4wXl6lEc/Vhtq1fWn0GpDCSzmz1zoTGNOKcppRio7GxxPvoCvnY0nAJ
ADzt7IkNved48E12VisaWFTWJ9UlbAIM5ExNu9m8WjJgXsTdBYNic24xga6Q9TIc
0L2jYBD+Y73KtWesMlFSZqAhMYDx7U3V
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:03 2025 by rpki-client