Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd1d5c25-1d63-3b8b-b443-366de68598ea.roa
File: cd1d5c25-1d63-3b8b-b443-366de68598ea.roa (raw, json)
Hash identifier: FFX0wIzE58XhE/cq68FZL6D5PrUD2sgpvRtAzMspDi0=
Subject key identifier: CB:A9:29:65:7B:EF:9B:13:8E:DF:CD:C5:8B:B6:FD:2D:A3:71:AB:1D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BF6420C132E21A7B0000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd1d5c25-1d63-3b8b-b443-366de68598ea.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396576
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bf:64:20:c1:32:e2:1a:7b:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=83aa14d8-9e02-4673-b15e-803b711b2206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:a3:01:a5:22:ed:de:3a:3c:8e:5b:6c:9c:
8d:9e:0a:f2:1f:83:01:6f:f6:2c:55:df:d9:62:26:
6a:97:92:48:e5:32:e1:03:1c:60:b7:d7:d1:21:77:
1d:e4:a5:63:21:34:a5:8d:70:ae:65:24:1d:d9:f2:
bd:d1:06:cf:4e:cb:8d:64:28:25:ae:3e:d2:1d:c9:
25:15:86:a5:60:45:43:db:b0:20:07:6e:07:6a:65:
e7:8d:77:d6:eb:98:5a:51:c2:28:60:7c:6c:d1:ee:
23:31:10:2e:e5:c5:6e:a3:8d:cf:3b:02:52:13:55:
a0:81:da:87:cd:0c:e7:ab:09:33:e7:cb:a1:44:70:
8e:56:6a:fd:3a:19:b6:7f:57:7f:3b:9d:c2:98:30:
e2:08:17:f7:17:b6:35:09:7e:fa:d0:e3:54:20:03:
a7:65:f5:24:f5:77:18:a4:56:12:a8:92:94:cc:2c:
c1:a2:7e:30:30:60:ad:58:d4:44:21:4e:b8:d9:e6:
88:ce:de:13:29:28:16:7f:51:48:66:e7:f4:f5:c7:
62:f7:bd:0a:1b:1d:7d:b0:8c:21:e2:b9:5c:f8:3e:
89:69:6a:91:9f:d2:c6:21:60:29:c5:08:d5:b9:8c:
ca:12:ca:51:b1:f0:08:ce:9b:38:75:bf:47:cd:33:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:29:65:7B:EF:9B:13:8E:DF:CD:C5:8B:B6:FD:2D:A3:71:AB:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd1d5c25-1d63-3b8b-b443-366de68598ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c5:eb:9c:bb:d9:62:85:3d:54:b3:3a:52:e9:cb:cf:90:aa:
c9:74:6b:06:55:46:07:8c:23:61:f5:06:bc:eb:78:bc:25:34:
76:f4:9f:fc:c2:73:72:68:1e:22:1c:4d:62:07:d3:fe:5a:73:
6b:ec:b4:df:63:29:ce:f6:42:b2:39:ba:4e:bf:fe:4a:16:60:
72:46:54:9b:e6:f1:39:c2:10:e1:7d:a6:11:73:b7:51:24:04:
3a:3d:7d:59:5c:f0:b2:50:a3:05:1d:6a:90:f9:d6:f7:87:9f:
8f:84:78:38:69:14:5d:dd:28:f8:a2:ca:aa:28:3e:5b:83:f0:
ca:27:86:40:1c:a7:6a:5c:02:81:30:75:bb:81:70:47:f4:83:
7b:c2:b2:25:d5:78:52:fe:b8:ce:0c:10:91:7c:53:06:8e:e5:
80:44:3f:86:87:79:93:70:47:bd:c7:bc:01:9b:05:f1:cd:0c:
35:55:9a:ef:5f:82:22:e5:21:94:23:7e:21:c9:23:84:33:14:
e3:13:e6:71:a0:fa:0c:38:b3:45:b5:3a:38:e0:e5:57:c5:3e:
53:b6:03:83:4e:9e:02:e3:fd:66:f1:a1:a7:84:6a:13:2b:3d:
28:23:de:74:06:f1:07:26:16:02:eb:e0:b2:df:52:a3:83:e4:
ee:9c:55:2d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioML9kIMEy4hp7AAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
ODNhYTE0ZDgtOWUwMi00NjczLWIxNWUtODAzYjcxMWIyMjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQWjAaUi7d46PI5bbJyNngryH4MBb/YsVd/Z
YiZql5JI5TLhAxxgt9fRIXcd5KVjITSljXCuZSQd2fK90QbPTsuNZCglrj7SHckl
FYalYEVD27AgB24HamXnjXfW65haUcIoYHxs0e4jMRAu5cVuo43POwJSE1WggdqH
zQznqwkz58uhRHCOVmr9Ohm2f1d/O53CmDDiCBf3F7Y1CX760ONUIAOnZfUk9XcY
pFYSqJKUzCzBon4wMGCtWNREIU642eaIzt4TKSgWf1FIZuf09cdi970KGx19sIwh
4rlc+D6JaWqRn9LGIWApxQjVuYzKEspRsfAIzps4db9HzTMnYwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMupKWV775sTjt/NxYu2/S2jcasdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2QxZDVjMjUtMWQ2My0z
YjhiLWI0NDMtMzY2ZGU2ODU5OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB2xeucu9lihT1UszpS6cvPkKrJdGsGVUYHjCNh9Qa863i8JTR29J/8
wnNyaB4iHE1iB9P+WnNr7LTfYynO9kKyObpOv/5KFmByRlSb5vE5whDhfaYRc7dR
JAQ6PX1ZXPCyUKMFHWqQ+db3h5+PhHg4aRRd3Sj4osqqKD5bg/DKJ4ZAHKdqXAKB
MHW7gXBH9IN7wrIl1XhS/rjODBCRfFMGjuWARD+Gh3mTcEe9x7wBmwXxzQw1VZrv
X4Ii5SGUI34hySOEMxTjE+ZxoPoMOLNFtTo44OVXxT5TtgODTp4C4/1m8aGnhGoT
Kz0oI950BvEHJhYC6+Cy31Kjg+TunFUt
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:45 2025 by rpki-client