Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa
File: cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa (raw, json)
Hash identifier: NJ5l/mmIpHV4VKDtJXUr3xq3Eh0GI98iykpXogZYRQQ=
Subject key identifier: A0:00:A4:EE:FD:56:DB:63:6C:73:96:DA:62:18:AE:37:51:AE:3B:6F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DB33D61166712CF79B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396560
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:db:33:d6:11:66:71:2c:f7:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=54130bf3-0342-41a4-a56a-0d4bed3f592e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cf:62:d3:20:8d:e1:3e:07:c8:19:62:22:c5:
e3:60:7e:e5:08:0f:c8:38:9f:fa:ea:98:07:ce:0b:
ee:54:c1:85:f1:db:a2:c2:d6:74:10:2f:8d:9f:e0:
ac:e2:f4:8a:da:91:a7:ca:f0:c1:b8:e0:61:3c:2b:
f1:79:51:9e:63:65:79:97:f2:e9:10:e9:6a:8b:49:
ab:4f:4f:41:f0:ed:f6:fd:2c:9b:ab:3a:6e:73:bc:
84:6e:e4:70:7e:7d:63:b2:23:fc:2f:8a:23:e5:40:
7d:0f:ce:24:2d:8d:d8:82:cf:36:eb:8b:7e:d3:42:
d1:c8:f7:d1:df:0b:5c:75:04:79:e1:14:89:08:aa:
30:91:8d:48:6f:7f:01:1f:8d:3d:fd:f6:1a:36:7d:
4a:e4:cc:29:db:65:0a:03:ac:7e:5a:17:11:d3:36:
84:62:a9:14:c3:f1:b6:48:86:af:49:ed:fa:50:41:
28:b1:a7:fd:1c:35:ac:0a:25:75:b3:9a:1a:31:38:
49:a3:97:ad:f6:60:40:70:40:16:54:f3:ce:af:b5:
79:96:5d:dc:36:53:2c:e0:de:00:b1:49:23:bc:b9:
29:76:b1:9e:60:a5:b4:74:48:8e:d0:c6:5e:83:d2:
f0:25:e8:a1:0d:ef:86:6e:5d:f1:8e:1a:c0:d2:0c:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:00:A4:EE:FD:56:DB:63:6C:73:96:DA:62:18:AE:37:51:AE:3B:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:1e:d2:73:d5:49:16:09:35:90:e0:20:56:0d:e7:73:ab:88:
b6:38:dd:2b:c6:66:8e:ac:73:86:54:70:1f:b7:e3:24:fb:35:
cd:08:ab:87:e9:7f:c9:aa:7b:3b:d2:bd:79:23:35:d2:ef:fa:
97:73:18:93:f5:94:a4:0d:c5:f8:3d:e4:69:0b:0c:d3:bd:39:
a7:5d:39:17:09:64:df:3a:cf:81:a1:c2:28:32:29:56:14:c1:
ba:86:44:a6:42:e2:bb:ad:6e:8e:19:c2:bf:22:37:e0:74:0e:
a9:36:55:d3:f7:ba:e6:8c:f6:e8:71:db:a7:bf:0f:91:f7:26:
34:34:84:17:e5:30:9c:91:b0:e5:9d:88:35:e1:61:e9:47:62:
44:a0:07:29:17:46:71:4d:bc:9c:db:1d:f5:73:66:43:08:e4:
cf:6c:aa:c0:14:32:cb:ad:75:fb:f1:13:c3:e0:6f:d8:c8:34:
c0:82:4a:72:d7:c2:f6:d5:bc:a3:e8:7f:41:ef:6f:49:4c:56:
64:a7:ce:e5:ef:87:c3:cb:91:fe:db:c9:b5:75:88:3b:02:94:
ad:45:f6:60:b4:fa:3f:81:9e:53:1b:25:d4:bc:47:ce:f7:f7:
90:b7:57:07:12:16:24:5c:cf:83:6a:b8:b8:5c:28:1e:e1:97:
39:93:c4:28
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiUpdsz1hFmcSz3mwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
NTQxMzBiZjMtMDM0Mi00MWE0LWE1NmEtMGQ0YmVkM2Y1OTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM9i0yCN4T4HyBliIsXjYH7lCA/IOJ/66pgH
zgvuVMGF8duiwtZ0EC+Nn+Cs4vSK2pGnyvDBuOBhPCvxeVGeY2V5l/LpEOlqi0mr
T09B8O32/Sybqzpuc7yEbuRwfn1jsiP8L4oj5UB9D84kLY3Ygs8264t+00LRyPfR
3wtcdQR54RSJCKowkY1Ib38BH409/fYaNn1K5Mwp22UKA6x+WhcR0zaEYqkUw/G2
SIavSe36UEEosaf9HDWsCiV1s5oaMThJo5et9mBAcEAWVPPOr7V5ll3cNlMs4N4A
sUkjvLkpdrGeYKW0dEiO0MZeg9LwJeihDe+Gbl3xjhrA0gz/QQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKAApO79VttjbHOW2mIYrjdRrjtvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M5NTFkNWYtOWFkMi0z
NmEyLTlhYmUtZWZjZWI4YWY1MjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCLHtJz1UkWCTWQ4CBWDedzq4i2ON0rxmaOrHOGVHAft+Mk+zXNCKuH
6X/Jqns70r15IzXS7/qXcxiT9ZSkDcX4PeRpCwzTvTmnXTkXCWTfOs+BocIoMilW
FMG6hkSmQuK7rW6OGcK/IjfgdA6pNlXT97rmjPbocdunvw+R9yY0NIQX5TCckbDl
nYg14WHpR2JEoAcpF0ZxTbyc2x31c2ZDCOTPbKrAFDLLrXX78RPD4G/YyDTAgkpy
18L21byj6H9B729JTFZkp87l74fDy5H+28m1dYg7ApStRfZgtPo/gZ5TGyXUvEfO
9/eQt1cHEhYkXM+Dari4XCge4Zc5k8Qo
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:58 2025 by rpki-client