Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5d5225-602e-366a-ab04-8856fb9ae6f5.roa
File: cd5d5225-602e-366a-ab04-8856fb9ae6f5.roa (raw, json)
Hash identifier: BnF0ypiEI8Ij8fOnrCyTQHEyXNTsd9HkL/4h/vaZfJQ=
Subject key identifier: B8:16:C8:5A:D1:14:B7:CC:E9:77:63:92:85:23:7D:BC:EC:BC:C3:8A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DD6F2D5F1BDA91BED3A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5d5225-602e-366a-ab04-8856fb9ae6f5.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 20431
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:dd:6f:2d:5f:1b:da:91:be:d3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=2d20f504-2a7a-4858-8be2-3cf6bd4b430a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:f0:23:f9:64:7c:6d:9c:f8:5a:ae:19:ca:
ab:72:f4:cb:9c:83:9b:61:a7:c7:ab:dc:ec:85:a3:
bb:65:15:9e:aa:1f:96:b6:a0:9f:d0:f9:7c:05:0e:
21:e6:df:f3:b3:43:28:20:27:9f:d9:8e:67:b1:fd:
76:a7:5e:34:00:88:90:66:dc:80:1b:1f:f5:1e:ff:
ef:cb:c2:c6:33:26:f0:d4:b9:f1:1e:95:ee:1d:85:
93:f0:9c:5f:d7:96:21:56:9a:ab:af:6e:53:1f:98:
b9:17:c2:c0:47:2a:2d:fc:10:e3:c2:7b:f6:6a:71:
96:b0:8b:47:c5:f2:1b:95:85:44:cb:b0:b3:9e:34:
a6:82:be:c2:16:c9:66:ef:1a:29:b9:8a:f9:42:5b:
ee:73:f8:ca:4e:57:a2:9a:36:01:33:e1:e7:29:8a:
66:02:4a:b7:c9:ce:f8:eb:3a:56:5f:cd:d3:bb:55:
60:1f:83:d5:cb:9a:a6:aa:f4:23:8b:cc:29:39:91:
dd:15:04:60:3a:b7:eb:d5:d0:0b:a7:83:31:c1:58:
ab:84:53:2b:e0:a4:51:64:27:9b:1a:28:b1:66:98:
ac:62:f8:9b:ce:db:d0:ea:d0:41:ae:c0:6a:03:1a:
8c:49:b8:50:4e:01:af:02:9b:f2:5f:ed:24:d2:ca:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:C8:5A:D1:14:B7:CC:E9:77:63:92:85:23:7D:BC:EC:BC:C3:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5d5225-602e-366a-ab04-8856fb9ae6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:01:67:dc:67:e8:e7:e3:e7:0f:df:86:56:49:d3:31:89:6d:
a9:f5:4b:93:4f:62:01:19:5f:bd:67:a2:cd:34:27:73:59:61:
8a:59:5d:14:5e:e6:c4:42:4e:56:a1:15:9f:e4:47:78:75:49:
97:e5:5d:b5:1a:cd:33:9e:f8:ff:09:15:13:70:89:5c:01:df:
81:15:d0:b5:ea:7e:79:ee:81:93:11:ea:df:07:f9:a0:19:c9:
4f:62:88:2d:31:01:13:e1:80:c3:d8:b8:61:ff:a3:49:dc:c6:
09:54:91:57:50:22:ff:d1:63:19:96:ce:bf:36:79:83:14:ec:
51:17:e6:5d:ba:7f:e1:47:06:3c:a4:8d:a2:ff:9a:52:6c:27:
3e:87:a3:aa:63:c5:c3:81:30:aa:60:9a:e3:be:87:c7:89:ed:
41:5b:ec:49:e2:40:c5:13:1d:e2:e9:67:b3:39:bd:4d:50:94:
1b:73:41:56:2d:c2:33:91:23:a1:be:a5:24:30:23:8c:fb:b0:
92:35:93:d8:7c:16:e2:2d:f8:65:7f:f9:04:fc:cd:88:20:c4:
3e:12:de:23:51:2d:51:1a:50:a8:20:3f:1e:e6:3d:43:8a:5f:
a1:af:e2:2a:85:fc:15:cb:13:82:9e:04:f2:58:ec:94:a1:f7:
ca:bc:77:7f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiUpd1vLV8b2pG+06AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
MmQyMGY1MDQtMmE3YS00ODU4LThiZTItM2NmNmJkNGI0MzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJTwI/lkfG2c+FquGcqrcvTLnIObYafHq9zs
haO7ZRWeqh+WtqCf0Pl8BQ4h5t/zs0MoICef2Y5nsf12p140AIiQZtyAGx/1Hv/v
y8LGMybw1LnxHpXuHYWT8Jxf15YhVpqrr25TH5i5F8LARyot/BDjwnv2anGWsItH
xfIblYVEy7CznjSmgr7CFslm7xopuYr5Qlvuc/jKTleimjYBM+HnKYpmAkq3yc74
6zpWX83Tu1VgH4PVy5qmqvQji8wpOZHdFQRgOrfr1dALp4MxwVirhFMr4KRRZCeb
GiixZpisYvibztvQ6tBBrsBqAxqMSbhQTgGvApvyX+0k0sqhOwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLgWyFrRFLfM6XdjkoUjfbzsvMOKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Q1ZDUyMjUtNjAyZS0z
NjZhLWFiMDQtODg1NmZiOWFlNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAtAWfcZ+jn4+cP34ZWSdMxiW2p9UuTT2IBGV+9Z6LNNCdzWWGKWV0U
XubEQk5WoRWf5Ed4dUmX5V21Gs0znvj/CRUTcIlcAd+BFdC16n557oGTEerfB/mg
GclPYogtMQET4YDD2Lhh/6NJ3MYJVJFXUCL/0WMZls6/NnmDFOxRF+Zdun/hRwY8
pI2i/5pSbCc+h6OqY8XDgTCqYJrjvofHie1BW+xJ4kDFEx3i6WezOb1NUJQbc0FW
LcIzkSOhvqUkMCOM+7CSNZPYfBbiLfhlf/kE/M2IIMQ+Et4jUS1RGlCoID8e5j1D
il+hr+IqhfwVyxOCngTyWOyUoffKvHd/
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:43 2025 by rpki-client