Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa
File: f9676fd5-305e-3317-bd0d-99ca96cb0836.roa (raw, json)
Hash identifier: r+vqtNa5gg0pV1A7xbTg1lzjOwDZ6saQFtzjSV2Yj+4=
Subject key identifier: 3A:19:B9:F3:A9:4D:CF:F8:35:7E:B1:40:B1:9E:53:2D:B6:99:8A:0B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BF8F7BC2101DB3993DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 36628
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bf:8f:7b:c2:10:1d:b3:99:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=212271a8-795e-4fc1-8408-290812685916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:53:b5:a0:f8:d4:eb:d2:4a:5d:50:ac:cc:b9:
a4:67:ef:60:80:01:31:45:d9:6c:7e:14:ce:be:86:
db:43:9a:93:37:bf:4d:60:6d:d9:94:d7:f4:f2:84:
87:9a:8e:8b:31:3d:35:84:68:5d:6f:f1:52:f8:17:
1a:6c:6d:99:79:a3:53:8f:ef:f3:1f:16:38:ea:e7:
44:8e:dc:2c:4c:c0:fe:05:24:e3:20:78:2d:bc:48:
ca:67:6b:f8:ad:2f:e0:1d:b6:e9:34:88:33:8f:13:
31:a4:cb:6a:87:f1:14:fa:6c:f7:39:f4:da:8d:23:
0d:a4:43:6f:64:01:d0:3a:71:54:00:60:c0:65:0d:
0b:06:72:79:23:73:fa:92:ff:3c:df:5a:e9:02:18:
5b:74:92:c7:0b:57:e7:ba:a7:20:d7:c9:b3:4a:cc:
04:87:fe:30:c7:f0:f5:e4:74:db:c0:59:a3:93:06:
b1:b2:8f:4f:b5:d3:6a:9f:60:1e:6e:84:26:f6:16:
c5:a0:96:1b:a8:3f:0a:f1:ef:6d:fb:26:26:97:d5:
66:87:bb:cd:5d:b5:ae:39:18:85:bf:71:32:dc:db:
f0:d5:39:a2:cf:46:3d:fc:fe:8d:d3:b9:93:f6:9d:
d8:45:cc:d7:4c:e3:6c:fa:7e:3a:5b:e4:a9:3d:d2:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:19:B9:F3:A9:4D:CF:F8:35:7E:B1:40:B1:9E:53:2D:B6:99:8A:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:c3:32:38:9a:00:91:ba:e6:e7:a9:2d:ba:cd:a2:f6:f6:89:
28:61:8d:6b:75:6c:36:e6:98:5f:89:31:82:76:25:71:84:7b:
37:f8:62:72:31:45:6e:c1:8c:8c:20:66:b8:f3:65:d3:81:01:
be:db:dd:09:db:8e:9f:16:85:b1:06:c6:45:86:a4:01:b8:ec:
6f:68:95:b8:b5:3e:3f:a6:94:a2:24:0c:ec:b7:c6:f6:f1:f2:
93:0b:18:d3:aa:09:55:81:b8:4c:d5:dc:9b:1f:67:14:8d:5d:
f6:7b:41:aa:a8:3b:f0:57:ee:ea:2a:2c:b1:e9:c3:f6:07:06:
c2:d6:5e:f6:5d:40:d8:7b:b9:a4:6a:34:bc:78:f1:ff:a0:3b:
f0:d1:4f:9d:4a:21:5f:1d:a5:4a:6e:c5:39:9d:25:ac:44:dd:
97:32:b4:4d:12:15:7d:8c:e7:71:66:f9:a5:18:17:4c:d0:fc:
94:d1:f6:fe:14:6a:28:6e:12:4f:a0:89:8b:81:3d:ea:7a:2b:
cf:4a:79:80:38:06:a2:c4:34:b1:55:31:fe:cd:8f:db:6c:c4:
69:ad:73:d3:51:f5:72:27:20:c3:5e:f9:d6:98:86:ff:1e:c5:
db:9a:c1:0a:d4:20:db:13:1c:b4:1c:ec:93:48:f8:8b:6a:2c:
6a:0e:54:75
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioML+Pe8IQHbOZPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
MjEyMjcxYTgtNzk1ZS00ZmMxLTg0MDgtMjkwODEyNjg1OTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1O1oPjU69JKXVCszLmkZ+9ggAExRdlsfhTO
vobbQ5qTN79NYG3ZlNf08oSHmo6LMT01hGhdb/FS+BcabG2ZeaNTj+/zHxY46udE
jtwsTMD+BSTjIHgtvEjKZ2v4rS/gHbbpNIgzjxMxpMtqh/EU+mz3OfTajSMNpENv
ZAHQOnFUAGDAZQ0LBnJ5I3P6kv8831rpAhhbdJLHC1fnuqcg18mzSswEh/4wx/D1
5HTbwFmjkwaxso9PtdNqn2AeboQm9hbFoJYbqD8K8e9t+yYml9Vmh7vNXbWuORiF
v3Ey3Nvw1Tmiz0Y9/P6N07mT9p3YRczXTONs+n46W+SpPdLKxwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDoZufOpTc/4NX6xQLGeUy22mYoLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk2NzZmZDUtMzA1ZS0z
MzE3LWJkMGQtOTljYTk2Y2IwODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBIwzI4mgCRuubnqS26zaL29okoYY1rdWw25phfiTGCdiVxhHs3+GJy
MUVuwYyMIGa482XTgQG+290J246fFoWxBsZFhqQBuOxvaJW4tT4/ppSiJAzst8b2
8fKTCxjTqglVgbhM1dybH2cUjV32e0GqqDvwV+7qKiyx6cP2BwbC1l72XUDYe7mk
ajS8ePH/oDvw0U+dSiFfHaVKbsU5nSWsRN2XMrRNEhV9jOdxZvmlGBdM0PyU0fb+
FGoobhJPoImLgT3qeivPSnmAOAaixDSxVTH+zY/bbMRprXPTUfVyJyDDXvnWmIb/
HsXbmsEK1CDbExy0HOyTSPiLaixqDlR1
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:35 2025 by rpki-client