Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de89de38-b714-3349-8fe2-62e8d0fd6ab7.roa
File: de89de38-b714-3349-8fe2-62e8d0fd6ab7.roa (raw, json)
Hash identifier: 0v3gnxSULexAbJ03CqWwbHP3hupiwaMum5iqGfAGJJA=
Subject key identifier: 44:04:08:A0:92:01:AA:73:20:CC:1D:79:DD:03:DB:07:29:50:8C:60
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0F174215E44790FD41EA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de89de38-b714-3349-8fe2-62e8d0fd6ab7.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396586
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f1:74:21:5e:44:79:0f:d4:1e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=abe59e68-7a7b-4457-9b70-0366e419aa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:67:a0:85:08:e8:13:97:54:2d:e6:c6:9f:
cc:cc:72:a1:50:14:89:2b:5d:a1:bf:e2:f3:7f:5f:
d0:c5:dc:46:7f:bb:99:4b:38:aa:8b:e4:db:72:74:
f4:69:fa:31:0e:71:36:b8:96:40:3f:0b:e0:53:f1:
f2:a0:72:7a:3b:1b:02:b7:5a:5c:d4:bc:88:3e:fa:
50:ff:b8:83:1a:aa:9c:8a:1f:80:99:fb:10:55:d3:
49:73:71:3c:3c:0b:61:ab:3b:8e:b4:b6:94:3e:64:
86:a5:92:24:90:88:e6:26:bb:23:1f:f0:67:38:a3:
84:57:c2:10:1a:01:39:a6:e8:cd:b8:f2:56:ab:9b:
91:fb:99:f8:15:4d:92:81:8c:0f:78:3e:d5:ed:df:
57:37:52:ce:19:b2:ec:46:24:c6:2c:0a:e2:91:7b:
67:4e:e7:bb:c7:a1:f3:57:0e:bb:95:a7:4b:8e:51:
a7:40:55:06:ad:35:36:39:c3:5c:b5:9e:d7:40:fd:
c3:31:67:db:00:de:03:9c:d5:35:09:55:44:82:d4:
32:f1:ec:21:b7:e6:4c:c2:ac:48:ab:05:38:61:fc:
3b:2d:06:b8:dc:0b:15:04:e0:5a:6d:f2:07:ed:36:
23:bd:12:12:1b:c6:5f:ac:85:6c:f2:28:e4:05:be:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:04:08:A0:92:01:AA:73:20:CC:1D:79:DD:03:DB:07:29:50:8C:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de89de38-b714-3349-8fe2-62e8d0fd6ab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:08:7a:a1:26:6d:c7:6d:57:19:b6:73:0f:d6:50:ac:34:40:
e0:de:0b:c0:82:6f:e9:40:2c:21:84:8e:35:d1:09:10:ac:5d:
ae:cc:2a:b4:fb:fa:4a:f3:55:5c:61:00:b0:69:43:9f:5c:13:
8d:ca:45:cd:60:df:79:5a:b5:8c:cb:d3:8e:9c:17:50:35:f3:
0c:1b:c7:01:16:f8:df:ad:1f:e3:3b:75:a4:70:80:ac:16:12:
b2:db:c8:73:29:e5:de:42:27:bb:8d:25:ea:0e:21:16:22:ee:
b0:4b:53:7c:ec:fc:47:e0:ee:32:d0:8d:a3:15:26:90:17:45:
b0:2f:88:a1:1e:36:77:cc:09:e4:8a:e1:28:b3:89:da:98:ac:
13:ac:84:ab:1f:c7:62:d1:99:13:b2:63:fc:df:62:7c:27:6a:
7c:42:d2:5e:c7:6b:dc:d2:ec:ba:ee:9a:43:77:8e:24:5d:2a:
5a:be:39:3e:83:2b:f3:6e:3b:c3:08:55:27:ad:9b:6a:66:0b:
68:5c:79:ac:76:f5:03:f5:d4:45:b6:9b:f5:c2:8d:76:d0:8f:
9e:fe:2a:76:3e:1a:43:2b:60:b8:e5:5f:56:f8:12:8d:f4:dd:
f0:6a:65:d4:b5:36:99:54:10:f4:ca:87:95:ed:4f:43:45:aa:
b0:33:c3:4e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wPF0IV5EeQ/UHqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
YWJlNTllNjgtN2E3Yi00NDU3LTliNzAtMDM2NmU0MTlhYTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30BnoIUI6BOXVC3mxp/MzHKhUBSJK12hv+Lz
f1/QxdxGf7uZSziqi+TbcnT0afoxDnE2uJZAPwvgU/HyoHJ6OxsCt1pc1LyIPvpQ
/7iDGqqcih+AmfsQVdNJc3E8PAthqzuOtLaUPmSGpZIkkIjmJrsjH/BnOKOEV8IQ
GgE5pujNuPJWq5uR+5n4FU2SgYwPeD7V7d9XN1LOGbLsRiTGLArikXtnTue7x6Hz
Vw67ladLjlGnQFUGrTU2OcNctZ7XQP3DMWfbAN4DnNU1CVVEgtQy8ewht+ZMwqxI
qwU4Yfw7LQa43AsVBOBabfIH7TYjvRISG8ZfrIVs8ijkBb5e9QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEQECKCSAapzIMwded0D2wcpUIxgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGU4OWRlMzgtYjcxNC0z
MzQ5LThmZTItNjJlOGQwZmQ2YWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB8CHqhJm3HbVcZtnMP1lCsNEDg3gvAgm/pQCwhhI410QkQrF2uzCq0
+/pK81VcYQCwaUOfXBONykXNYN95WrWMy9OOnBdQNfMMG8cBFvjfrR/jO3WkcICs
FhKy28hzKeXeQie7jSXqDiEWIu6wS1N87PxH4O4y0I2jFSaQF0WwL4ihHjZ3zAnk
iuEos4namKwTrISrH8di0ZkTsmP832J8J2p8QtJex2vc0uy67ppDd44kXSpavjk+
gyvzbjvDCFUnrZtqZgtoXHmsdvUD9dRFtpv1wo120I+e/ip2PhpDK2C45V9W+BKN
9N3wamXUtTaZVBD0yoeV7U9DRaqwM8NO
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:58 2025 by rpki-client