Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcf2ce74-7820-368c-b0fd-c7e6bb266e8b.roa
File: fcf2ce74-7820-368c-b0fd-c7e6bb266e8b.roa (raw, json)
Hash identifier: trJfg+8bXqefwjD6l+ONDEseOFR6dqhVEIsB4HOrPbA=
Subject key identifier: E2:ED:2B:7A:DE:57:36:DC:84:0A:05:45:D0:77:3C:AA:82:09:0B:14
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0EDD49D8C71FF262F1CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcf2ce74-7820-368c-b0fd-c7e6bb266e8b.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 22547
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ed:d4:9d:8c:71:ff:26:2f:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=9fc0723e-35e1-4d59-adfa-14073f257cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:bb:40:b2:d4:92:93:05:da:a3:23:74:8a:
ed:1a:a4:90:48:8c:97:01:ec:17:69:55:c1:df:11:
b7:17:8b:d8:08:2b:59:75:fe:db:64:5e:77:d1:c0:
c9:c6:88:5c:ef:d1:c1:f4:69:4e:a5:05:9e:9f:a1:
20:12:e3:4e:98:71:1b:1b:2f:aa:3a:0f:c6:74:71:
cf:c7:9c:41:be:17:ce:d4:8a:eb:0f:55:28:74:13:
5a:82:20:f1:ac:85:76:52:55:74:92:83:9f:6a:10:
85:f9:a5:cd:b3:43:b0:c7:dd:84:8e:6d:47:65:ae:
e6:34:2b:42:3c:48:d5:9e:90:75:18:26:96:91:25:
06:77:97:d4:03:3f:55:de:15:36:4a:4f:62:dc:2a:
0e:49:f1:2d:ce:07:df:6c:04:7c:30:23:30:4d:7c:
8c:76:b4:b9:3b:0d:f7:b2:58:cd:eb:46:d1:96:5a:
76:8a:33:96:25:12:2c:5a:65:ea:2d:b2:f6:ea:dd:
5f:bb:3a:52:aa:c9:51:80:f1:3f:c6:94:94:05:d2:
82:ab:43:dc:2b:4d:34:a2:13:7f:88:b9:08:72:f8:
89:f5:9d:86:a0:8e:48:c1:e8:bc:cd:28:11:c9:63:
f2:ad:f3:b7:e7:93:e4:85:8e:81:bf:13:c0:ab:95:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:ED:2B:7A:DE:57:36:DC:84:0A:05:45:D0:77:3C:AA:82:09:0B:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcf2ce74-7820-368c-b0fd-c7e6bb266e8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ae:b8:13:5d:97:ee:a9:4c:de:d6:46:63:41:97:38:ad:e4:
e0:65:e3:54:74:9e:d8:a4:0e:ac:7f:68:e7:e0:de:f6:b3:a1:
a2:a5:36:36:7c:b6:b9:1e:eb:6b:af:5e:65:ec:83:50:6c:68:
4b:0a:8e:87:8a:a8:9c:be:9b:38:28:b4:3a:ad:24:f9:75:de:
01:86:e5:1b:0b:eb:5d:d5:ca:ca:21:02:54:c6:09:ba:ba:c5:
0f:b4:1f:ed:f4:ee:13:c5:40:51:ab:76:9c:6e:3b:9e:93:f5:
78:6b:2f:08:b5:4b:72:d2:05:60:b8:60:a5:80:17:4c:27:d4:
43:9a:c3:fb:86:9e:cb:fc:30:e1:f5:50:06:52:e9:cc:72:75:
99:c1:f0:ea:93:93:b4:73:d5:b1:4c:0d:ae:41:4d:04:93:d9:
55:59:62:4f:c8:31:5f:fc:7b:01:be:01:ca:9b:9d:28:f5:1b:
1c:70:06:d4:54:f6:19:4d:69:88:a3:c8:9c:a8:fe:9c:18:da:
a4:81:c7:6d:70:bd:6a:4c:49:4b:26:0a:fe:1b:90:da:7f:74:
62:00:0d:20:b6:77:7d:8c:5a:d0:e4:2c:cc:3d:68:b3:40:76:
03:22:e1:ad:d0:70:50:cc:f2:4c:6c:e3:87:a3:99:f1:74:08:
28:6c:bb:e1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wO3UnYxx/yYvHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
OWZjMDcyM2UtMzVlMS00ZDU5LWFkZmEtMTQwNzNmMjU3Y2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD+7QLLUkpMF2qMjdIrtGqSQSIyXAewXaVXB
3xG3F4vYCCtZdf7bZF530cDJxohc79HB9GlOpQWen6EgEuNOmHEbGy+qOg/GdHHP
x5xBvhfO1IrrD1UodBNagiDxrIV2UlV0koOfahCF+aXNs0Owx92Ejm1HZa7mNCtC
PEjVnpB1GCaWkSUGd5fUAz9V3hU2Sk9i3CoOSfEtzgffbAR8MCMwTXyMdrS5Ow33
sljN60bRllp2ijOWJRIsWmXqLbL26t1fuzpSqslRgPE/xpSUBdKCq0PcK000ohN/
iLkIcviJ9Z2GoI5Iwei8zSgRyWPyrfO355PkhY6BvxPAq5XPKQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOLtK3reVzbchAoFRdB3PKqCCQsUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmNmMmNlNzQtNzgyMC0z
NjhjLWIwZmQtYzdlNmJiMjY2ZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAzrrgTXZfuqUze1kZjQZc4reTgZeNUdJ7YpA6sf2jn4N72s6GipTY2
fLa5Hutrr15l7INQbGhLCo6Hiqicvps4KLQ6rST5dd4BhuUbC+td1crKIQJUxgm6
usUPtB/t9O4TxUBRq3acbjuek/V4ay8ItUty0gVguGClgBdMJ9RDmsP7hp7L/DDh
9VAGUunMcnWZwfDqk5O0c9WxTA2uQU0Ek9lVWWJPyDFf/HsBvgHKm50o9RsccAbU
VPYZTWmIo8icqP6cGNqkgcdtcL1qTElLJgr+G5Daf3RiAA0gtnd9jFrQ5CzMPWiz
QHYDIuGt0HBQzPJMbOOHo5nxdAgobLvh
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:28 2025 by rpki-client