Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126527e-e6e7-3b21-9475-99e27b03dade.roa
File: e126527e-e6e7-3b21-9475-99e27b03dade.roa (raw, json)
Hash identifier: p6/YZwSk+6gVOCJ5jZOylCE4EiCpUt/Aw7T+NbFg7wM=
Subject key identifier: B8:84:00:32:9A:D0:D1:A5:24:6E:B8:30:58:90:2F:E8:FB:D9:34:49
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848CB08A11F491AAB9574B1B200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126527e-e6e7-3b21-9475-99e27b03dade.roa
Signing time: Thu 06 Feb 2025 13:33:22 +0000
ROA not before: Thu 06 Feb 2025 13:33:22 +0000
ROA not after: Wed 07 May 2025 12:33:22 +0000
asID: 397197
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:08:a1:1f:49:1a:ab:95:74:b1:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 6 13:33:22 2025 GMT
Not After : May 7 12:33:22 2025 GMT
Subject: CN=8c8b8cf3-01f0-4239-94e5-03954fa8e859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:3c:18:3a:12:25:af:46:b7:e3:52:57:55:
83:c8:30:25:0b:57:1d:5a:1c:cc:f6:66:9c:40:30:
9f:fa:7a:d3:d5:ff:44:13:2b:ef:ca:eb:43:6e:65:
3a:2a:be:e4:2d:ec:f4:a8:9f:a4:88:5d:96:bb:d8:
57:42:1f:28:50:b9:8a:f1:0b:da:bc:6a:ef:fe:bb:
79:03:b1:71:31:62:a0:e2:e8:fa:de:78:37:2a:de:
23:28:1f:3b:36:11:90:2e:af:89:96:07:1e:ac:bd:
b9:c0:8a:e3:00:64:3d:e2:63:2e:8e:bf:e1:d5:d9:
32:78:f5:dd:24:a2:73:97:75:09:d3:bc:52:b7:35:
13:47:0f:37:3c:3c:21:7b:18:9c:e9:0e:dc:40:34:
00:55:6f:35:44:98:14:58:8b:2c:76:59:10:47:ec:
af:b6:ad:8d:e7:8f:e1:0a:b9:2b:1e:34:2e:75:b3:
44:59:71:a4:ef:97:a4:e1:72:b2:d0:9e:c6:b0:b4:
88:25:f1:8c:ff:8d:98:90:03:44:57:18:92:ad:9c:
b5:ac:68:73:50:7d:41:d5:4e:ec:2c:c1:66:3e:d0:
24:3a:d6:6d:c7:2e:60:51:de:ae:77:fd:91:e1:74:
c0:a8:49:89:ed:2a:de:2d:6a:b1:81:7b:1c:9c:f3:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:00:32:9A:D0:D1:A5:24:6E:B8:30:58:90:2F:E8:FB:D9:34:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126527e-e6e7-3b21-9475-99e27b03dade.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:05:7e:bf:2d:b3:14:34:93:d9:d3:2e:8f:97:b7:20:00:16:
2b:b4:7b:95:1e:a0:d1:5d:51:78:2a:fb:7b:61:a7:a3:3b:21:
47:37:4c:8d:6a:d9:0a:41:ab:ca:64:01:c9:ac:e7:c4:fc:2f:
d7:c1:9c:d6:05:6f:d2:71:04:42:d0:af:ab:b3:06:83:fc:dd:
72:ab:d1:8f:8a:60:e6:75:d4:e8:46:7f:b5:65:60:88:b3:92:
f3:ff:3e:c7:01:19:e4:c5:59:6f:93:22:b9:49:12:09:b1:91:
17:f4:66:08:9e:c3:aa:44:27:d3:d5:30:94:d6:31:da:82:f7:
bf:34:7f:a9:31:7e:b8:2e:53:81:4c:f8:c7:84:15:d2:d8:d3:
e9:e3:88:81:fe:b9:32:51:4a:f3:be:a0:2c:61:b4:3f:00:ed:
55:a1:f9:a5:9a:2e:9b:c7:e8:c1:be:55:cc:5d:df:7b:e5:5a:
39:24:8e:79:00:b0:31:95:d9:0f:8a:68:52:08:ad:5c:23:94:
fe:52:c9:36:11:59:69:8c:32:21:c4:e1:6f:82:66:b4:d9:f6:
ca:33:9d:74:05:4a:7e:70:85:84:ad:83:f7:fe:d5:f7:4e:66:
7d:3c:dc:ba:f5:e8:5c:28:5b:d7:80:ae:25:76:dd:15:ff:61:
2b:e6:8b:4d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjLCKEfSRqrlXSxsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwNjEzMzMyMloXDTI1MDUwNzEyMzMyMlowLzEtMCsGA1UEAxMk
OGM4YjhjZjMtMDFmMC00MjM5LTk0ZTUtMDM5NTRmYThlODU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv88GDoSJa9Gt+NSV1WDyDAlC1cdWhzM9mac
QDCf+nrT1f9EEyvvyutDbmU6Kr7kLez0qJ+kiF2Wu9hXQh8oULmK8QvavGrv/rt5
A7FxMWKg4uj63ng3Kt4jKB87NhGQLq+JlgcerL25wIrjAGQ94mMujr/h1dkyePXd
JKJzl3UJ07xStzUTRw83PDwhexic6Q7cQDQAVW81RJgUWIssdlkQR+yvtq2N54/h
CrkrHjQudbNEWXGk75ek4XKy0J7GsLSIJfGM/42YkANEVxiSrZy1rGhzUH1B1U7s
LMFmPtAkOtZtxy5gUd6ud/2R4XTAqEmJ7SreLWqxgXscnPN/rQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLiEADKa0NGlJG64MFiQL+j72TRJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTEyNjUyN2UtZTZlNy0z
YjIxLTk0NzUtOTllMjdiMDNkYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC3BX6/LbMUNJPZ0y6Pl7cgABYrtHuVHqDRXVF4Kvt7YaejOyFHN0yN
atkKQavKZAHJrOfE/C/XwZzWBW/ScQRC0K+rswaD/N1yq9GPimDmddToRn+1ZWCI
s5Lz/z7HARnkxVlvkyK5SRIJsZEX9GYInsOqRCfT1TCU1jHagve/NH+pMX64LlOB
TPjHhBXS2NPp44iB/rkyUUrzvqAsYbQ/AO1Vofmlmi6bx+jBvlXMXd975Vo5JI55
ALAxldkPimhSCK1cI5T+Usk2EVlpjDIhxOFvgma02fbKM510BUp+cIWErYP3/tX3
TmZ9PNy69ehcKFvXgK4ldt0V/2Er5otN
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:35 2025 by rpki-client