Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b8f345-02db-30db-a42e-5b42dbfb8c85.roa
File: 01b8f345-02db-30db-a42e-5b42dbfb8c85.roa (raw, json)
Hash identifier: SdNrHkbhkuxliqqNRTkhfuePc1zmtz2JGMDD0lIwqeg=
Subject key identifier: FF:97:2F:16:06:81:92:E6:E3:57:50:BC:E3:A6:FE:38:22:6C:66:4D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B388F1AC074482C069E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b8f345-02db-30db-a42e-5b42dbfb8c85.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396561
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:38:8f:1a:c0:74:48:2c:06:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=c2dea8bc-f597-46ca-abc8-64dafadfde78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:75:2e:73:03:d1:82:78:0d:7b:5e:26:c1:d4:
06:5c:d4:72:29:f6:3c:e9:f3:df:97:2b:ca:23:56:
62:e9:10:c9:15:02:29:2e:bc:df:41:b2:f4:43:e9:
4d:d2:6c:8a:fe:70:05:97:0b:cc:b1:35:de:7e:71:
ec:18:46:e9:29:3c:1d:e5:76:e6:13:1d:37:47:4e:
d6:fa:89:27:fc:5f:53:7b:ed:6f:5f:14:87:20:e5:
c1:3d:94:d9:ed:c1:27:43:53:90:aa:e9:fb:ee:0c:
c4:02:7d:bf:be:a8:72:94:e4:02:71:28:fa:a8:df:
2f:a2:b8:17:bc:57:9f:7f:1a:31:73:41:54:42:78:
c1:e0:8f:97:64:e2:64:30:03:4c:4d:3a:3e:bd:a6:
31:2e:29:ec:10:77:4c:8c:fc:0b:4a:95:df:d5:74:
f1:6b:97:ba:62:eb:62:73:bb:c6:6a:42:f6:7b:eb:
4d:87:78:bc:a2:4e:71:a2:1a:93:22:0d:54:08:fb:
7a:71:64:11:32:0f:31:fe:4e:21:c0:ef:ba:fc:94:
c9:64:89:2c:f1:02:7f:11:e4:56:85:31:10:9e:8d:
6a:00:11:99:7d:0d:5d:a2:a4:8a:bb:38:bb:6b:05:
68:8b:34:ac:a1:4e:56:c7:56:79:b4:af:43:65:4b:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:2F:16:06:81:92:E6:E3:57:50:BC:E3:A6:FE:38:22:6C:66:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b8f345-02db-30db-a42e-5b42dbfb8c85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:26:a9:ad:59:1c:f5:fb:c0:5d:23:fa:b0:70:f6:80:8b:41:
e1:4b:1a:70:3b:71:42:a8:58:95:f1:79:9b:35:51:7a:31:13:
cd:72:71:6f:8d:7a:14:8d:bf:4f:8d:2e:e3:ed:4d:8e:d3:d2:
f7:fb:e4:9c:e0:7c:ff:05:66:72:36:98:29:4c:0f:c9:48:af:
c6:81:8c:c1:fe:35:1d:2d:1a:6e:63:e0:75:e9:df:d7:b0:99:
96:4a:05:6c:11:a0:7d:ba:cd:32:35:4a:fa:d4:8f:27:a9:b5:
b1:9f:47:60:4c:86:dd:e6:bf:3d:32:ec:79:b8:cf:25:9a:66:
c1:91:66:36:92:ba:59:ab:15:c7:8e:7a:f9:9b:9d:a9:90:22:
1f:f3:d9:68:d5:15:e2:7a:dd:c0:a6:71:3d:62:37:c6:1c:e3:
de:e3:75:a5:e9:67:51:da:32:a6:6b:ad:e4:20:f9:85:71:c1:
c8:34:df:5f:7f:33:dc:17:21:8c:0a:dc:0e:81:38:d9:9e:44:
f4:7c:c1:38:4a:49:a3:83:19:00:94:b7:72:a6:98:a3:b7:bf:
7d:12:61:08:6b:de:98:96:96:bb:bb:d0:e5:7c:a5:32:86:40:
4a:91:fd:9c:eb:9c:8c:da:80:4b:7d:41:14:0c:6d:82:90:16:
ae:d9:e2:4d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiaOziPGsB0SCwGngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
YzJkZWE4YmMtZjU5Ny00NmNhLWFiYzgtNjRkYWZhZGZkZTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHUucwPRgngNe14mwdQGXNRyKfY86fPflyvK
I1Zi6RDJFQIpLrzfQbL0Q+lN0myK/nAFlwvMsTXefnHsGEbpKTwd5XbmEx03R07W
+okn/F9Te+1vXxSHIOXBPZTZ7cEnQ1OQqun77gzEAn2/vqhylOQCcSj6qN8vorgX
vFeffxoxc0FUQnjB4I+XZOJkMANMTTo+vaYxLinsEHdMjPwLSpXf1XTxa5e6Yuti
c7vGakL2e+tNh3i8ok5xohqTIg1UCPt6cWQRMg8x/k4hwO+6/JTJZIks8QJ/EeRW
hTEQno1qABGZfQ1doqSKuzi7awVoizSsoU5Wx1Z5tK9DZUsyDwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP+XLxYGgZLm41dQvOOm/jgibGZNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDFiOGYzNDUtMDJkYi0z
MGRiLWE0MmUtNWI0MmRiZmI4Yzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCRJqmtWRz1+8BdI/qwcPaAi0HhSxpwO3FCqFiV8XmbNVF6MRPNcnFv
jXoUjb9PjS7j7U2O09L3++Sc4Hz/BWZyNpgpTA/JSK/GgYzB/jUdLRpuY+B16d/X
sJmWSgVsEaB9us0yNUr61I8nqbWxn0dgTIbd5r89Mux5uM8lmmbBkWY2krpZqxXH
jnr5m52pkCIf89lo1RXiet3ApnE9YjfGHOPe43Wl6WdR2jKma63kIPmFccHINN9f
fzPcFyGMCtwOgTjZnkT0fME4SkmjgxkAlLdyppijt799EmEIa96Ylpa7u9DlfKUy
hkBKkf2c65yM2oBLfUEUDG2CkBau2eJN
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:55:23 2025 by rpki-client