Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ccf05cd-adcb-3b41-af31-8b8c13480207.roa
File: 1ccf05cd-adcb-3b41-af31-8b8c13480207.roa (raw, json)
Hash identifier: kSfjJvefRcb4Vkin2BD63KdIjXh53YQJy1oe3V1tdK0=
Subject key identifier: 2A:8B:5A:0D:F5:E4:6D:7D:8F:B9:BB:61:89:96:FC:02:D0:34:B5:D9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242FBE343447C107E1AC100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ccf05cd-adcb-3b41-af31-8b8c13480207.roa
Signing time: Thu 19 Dec 2024 13:45:12 +0000
ROA not before: Thu 19 Dec 2024 13:45:12 +0000
ROA not after: Wed 19 Mar 2025 12:45:12 +0000
asID: 396584
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:fb:e3:43:44:7c:10:7e:1a:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:12 2024 GMT
Not After : Mar 19 12:45:12 2025 GMT
Subject: CN=c21fa650-6298-4b5e-b22a-7c2fd5f923f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:ac:c8:c2:c7:05:7e:8d:6d:a8:46:76:32:
53:32:e9:f5:60:eb:75:f7:1a:37:8c:00:f6:36:c2:
7c:9d:c8:e8:c3:ed:e6:a7:df:23:a5:e4:54:46:38:
44:69:41:1f:d7:80:fd:de:88:8c:18:44:f9:25:4f:
57:c9:b4:ee:bc:e7:8e:cc:9f:54:96:4e:4b:c8:7c:
bf:25:d6:05:d2:45:11:7b:dd:00:9e:12:4d:e6:8b:
27:51:0a:de:11:13:9c:5d:3b:b4:cb:fc:5d:6a:5b:
de:cf:68:08:7e:cf:6a:fb:55:85:af:c5:f4:1e:0e:
9b:fc:e6:b5:5e:80:e0:af:4b:85:04:f3:48:78:c5:
92:48:ca:b4:14:b0:ba:24:5a:ad:8d:24:c2:0b:09:
75:33:9a:84:67:72:bc:39:e6:55:27:fa:b6:9d:06:
bd:a8:c0:29:b6:fb:52:70:6a:f7:5b:6e:f6:cc:3f:
68:21:67:1f:12:06:83:b2:a1:9d:56:22:ae:65:b2:
3b:e7:56:66:19:1d:63:93:0e:49:ae:ea:e6:0a:c9:
c4:55:a3:56:b9:6c:ad:09:90:26:a1:df:e1:78:59:
ff:bb:3a:87:ba:50:4e:35:fa:64:94:2f:93:1e:9f:
df:cb:ac:e3:26:09:85:61:d5:85:81:76:02:0c:be:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8B:5A:0D:F5:E4:6D:7D:8F:B9:BB:61:89:96:FC:02:D0:34:B5:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ccf05cd-adcb-3b41-af31-8b8c13480207.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:2f:02:d4:29:5b:78:b9:97:1f:61:2a:fd:90:79:c7:dc:ac:
99:53:9f:79:b5:c5:d6:ef:c6:51:1a:f3:01:80:16:11:49:46:
54:91:41:9a:37:84:e3:bc:80:86:15:56:5e:1d:7e:67:30:3e:
fd:3c:51:b0:55:b9:bd:44:57:45:f7:09:50:2b:ee:d9:97:34:
95:fa:df:66:32:d4:0b:d0:a1:31:e5:c4:47:0f:e0:a5:94:0b:
d9:cb:f2:7f:89:fa:9a:b6:23:0e:d9:c0:ff:85:61:35:e9:4d:
64:e4:00:78:00:7c:85:2f:c5:3d:28:dd:c5:21:f5:ca:a7:c4:
1b:5d:29:f5:30:c9:e1:26:ad:d4:bd:66:6b:7f:86:5d:a9:82:
62:b1:a9:51:ce:bd:33:ad:61:ec:86:8e:42:b4:b9:59:65:05:
ae:68:f5:a1:34:74:c5:3b:73:c5:02:f2:ec:76:02:4a:b4:de:
25:2b:7a:90:b3:1c:38:32:95:14:5f:a4:97:f4:d8:a1:6c:ee:
98:2e:9b:7c:e0:99:b1:59:b3:2b:03:ce:fb:d7:95:b9:42:ff:
94:c3:2e:7d:4c:0a:a8:4d:ab:42:d0:46:c5:9c:fa:0f:f1:1a:
66:e3:a3:a9:16:eb:4a:24:d7:cd:73:cd:95:cd:af:d3:d0:f9:
b0:92:57:a6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhCQvvjQ0R8EH4awQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUxMloXDTI1MDMxOTEyNDUxMlowLzEtMCsGA1UEAxMk
YzIxZmE2NTAtNjI5OC00YjVlLWIyMmEtN2MyZmQ1ZjkyM2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY6syMLHBX6NbahGdjJTMun1YOt19xo3jAD2
NsJ8ncjow+3mp98jpeRURjhEaUEf14D93oiMGET5JU9XybTuvOeOzJ9Ulk5LyHy/
JdYF0kURe90AnhJN5osnUQreEROcXTu0y/xdalvez2gIfs9q+1WFr8X0Hg6b/Oa1
XoDgr0uFBPNIeMWSSMq0FLC6JFqtjSTCCwl1M5qEZ3K8OeZVJ/q2nQa9qMAptvtS
cGr3W272zD9oIWcfEgaDsqGdViKuZbI751ZmGR1jkw5JrurmCsnEVaNWuWytCZAm
od/heFn/uzqHulBONfpklC+THp/fy6zjJgmFYdWFgXYCDL5wvwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCqLWg315G19j7m7YYmW/ALQNLXZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWNjZjA1Y2QtYWRjYi0z
YjQxLWFmMzEtOGI4YzEzNDgwMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCfLwLUKVt4uZcfYSr9kHnH3KyZU595tcXW78ZRGvMBgBYRSUZUkUGa
N4TjvICGFVZeHX5nMD79PFGwVbm9RFdF9wlQK+7ZlzSV+t9mMtQL0KEx5cRHD+Cl
lAvZy/J/ifqatiMO2cD/hWE16U1k5AB4AHyFL8U9KN3FIfXKp8QbXSn1MMnhJq3U
vWZrf4ZdqYJisalRzr0zrWHsho5CtLlZZQWuaPWhNHTFO3PFAvLsdgJKtN4lK3qQ
sxw4MpUUX6SX9NihbO6YLpt84JmxWbMrA87715W5Qv+Uwy59TAqoTatC0EbFnPoP
8Rpm46OpFutKJNfNc82Vza/T0Pmwklem
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:04 2025 by rpki-client