Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff3dc59-670d-386a-bf4e-427741031bd8.roa
File: cff3dc59-670d-386a-bf4e-427741031bd8.roa (raw, json)
Hash identifier: oxL8fxc48IMrifhFAKoj+IN/FeSjIf7zIf/lM4oaX8I=
Subject key identifier: CE:68:04:4E:E8:0F:91:4A:57:D1:F1:A0:E0:BE:79:68:FB:06:89:91
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C50ECB942274EFD2DD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff3dc59-670d-386a-bf4e-427741031bd8.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 397210
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c5:0e:cb:94:22:74:ef:d2:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=1d10b909-611a-4968-baef-ffa02f02c9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:b5:92:1e:4c:38:2d:0f:06:0b:90:06:0f:
3b:b7:55:ea:8e:2d:a7:0d:85:97:45:2a:a9:db:c4:
d9:8d:74:b2:dd:5d:13:e7:ce:15:3a:90:4c:72:fd:
f6:fa:da:4b:ab:11:e3:03:4d:c1:62:d2:1b:a0:7d:
77:a9:17:17:82:40:d3:c8:4c:d6:5e:9e:81:01:cc:
ab:6d:f0:13:3f:85:02:e2:8d:c0:fc:a3:66:97:aa:
d2:e7:51:89:51:aa:96:e7:ad:77:fa:d1:32:4b:40:
0d:b8:ac:0d:aa:4a:fb:09:ee:d5:54:62:fc:4f:cd:
a5:6a:01:d7:8d:2d:7a:17:4e:67:22:1e:c8:f6:ea:
45:0c:9a:bd:e0:38:5f:df:ec:41:df:01:53:8a:a1:
99:e5:31:9d:8c:ef:a8:2b:bb:7c:c4:19:37:f2:1b:
4d:f9:14:a9:ca:63:03:0f:5a:13:be:1b:7a:30:1c:
92:91:ba:9e:1d:04:86:f5:c1:3d:c7:84:2d:e7:9d:
9f:ef:37:9a:12:82:cb:7f:bf:42:3a:54:86:85:ac:
e7:85:d3:80:12:67:a4:82:b1:dd:5a:38:f6:01:0e:
60:68:ae:a2:d1:2a:37:59:51:8c:43:57:0f:47:5e:
3a:1c:53:41:e8:52:b0:9b:9e:3c:7b:80:c8:6a:73:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:68:04:4E:E8:0F:91:4A:57:D1:F1:A0:E0:BE:79:68:FB:06:89:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff3dc59-670d-386a-bf4e-427741031bd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:da:20:75:b0:0d:c3:45:35:33:ef:1f:4f:ea:bd:ee:3a:6e:
ad:2b:ab:1d:96:4b:94:dc:a0:06:d3:2e:bc:30:57:8c:0d:86:
6d:cc:58:e9:f9:c0:7d:18:78:0c:1d:64:52:87:33:ec:e3:09:
77:ad:2e:ac:ac:43:e8:09:52:0b:2c:f2:c9:8a:6a:08:d6:7d:
ff:eb:90:1e:c3:69:9f:05:27:13:28:2f:fb:d3:05:a6:fe:c8:
68:6a:51:a5:37:ee:1c:bb:70:e9:30:51:a1:55:29:72:5a:d7:
45:37:e2:49:e9:d5:71:ec:91:96:e6:94:50:d4:1e:4c:d3:e8:
b8:83:c1:01:a5:86:a8:c0:7f:db:61:f7:cb:c4:77:61:e9:07:
c6:83:1c:18:be:93:a9:2c:21:ad:82:01:cf:b6:4d:8b:05:df:
41:54:7a:26:d8:73:af:5f:84:cb:bb:c0:87:36:1d:54:fb:f9:
24:3d:ce:86:6e:94:08:d3:f5:28:c5:bd:93:85:8b:84:43:d2:
f2:27:39:e3:c4:30:59:11:ed:64:91:96:92:bf:37:ad:a9:fa:
c7:ef:4d:fd:f2:4f:01:82:30:a8:b8:a0:86:e1:1f:25:ad:0a:
bf:16:d1:0c:0c:37:17:7f:c2:05:31:67:79:98:7f:f6:2b:12:
23:22:b7:f0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMUOy5QidO/S3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
MWQxMGI5MDktNjExYS00OTY4LWJhZWYtZmZhMDJmMDJjOWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJq1kh5MOC0PBguQBg87t1Xqji2nDYWXRSqp
28TZjXSy3V0T584VOpBMcv32+tpLqxHjA03BYtIboH13qRcXgkDTyEzWXp6BAcyr
bfATP4UC4o3A/KNml6rS51GJUaqW5613+tEyS0ANuKwNqkr7Ce7VVGL8T82lagHX
jS16F05nIh7I9upFDJq94Dhf3+xB3wFTiqGZ5TGdjO+oK7t8xBk38htN+RSpymMD
D1oTvht6MBySkbqeHQSG9cE9x4Qt552f7zeaEoLLf79COlSGhaznhdOAEmekgrHd
Wjj2AQ5gaK6i0So3WVGMQ1cPR146HFNB6FKwm548e4DIanNxNwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM5oBE7oD5FKV9HxoOC+eWj7BomRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZmM2RjNTktNjcwZC0z
ODZhLWJmNGUtNDI3NzQxMDMxYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBw2iB1sA3DRTUz7x9P6r3uOm6tK6sdlkuU3KAG0y68MFeMDYZtzFjp
+cB9GHgMHWRShzPs4wl3rS6srEPoCVILLPLJimoI1n3/65Aew2mfBScTKC/70wWm
/shoalGlN+4cu3DpMFGhVSlyWtdFN+JJ6dVx7JGW5pRQ1B5M0+i4g8EBpYaowH/b
YffLxHdh6QfGgxwYvpOpLCGtggHPtk2LBd9BVHom2HOvX4TLu8CHNh1U+/kkPc6G
bpQI0/Uoxb2ThYuEQ9LyJznjxDBZEe1kkZaSvzetqfrH70398k8BgjCouKCG4R8l
rQq/FtEMDDcXf8IFMWd5mH/2KxIjIrfw
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:36 2025 by rpki-client