Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa
File: 29b2130f-629d-3aed-8986-dcb239ea0420.roa (raw, json)
Hash identifier: MKxnidIivBNGVLzF905x+KCj2gCNIyClQZ7zW5+BKCM=
Subject key identifier: E0:A6:FD:46:B7:71:18:70:D6:77:7D:B5:98:17:88:B8:74:A8:C8:50
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584840E5C5397988457BFF3BB2B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 396592
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:c5:39:79:88:45:7b:ff:3b:b2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=36515113-044c-499e-9862-e7b3e821f0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:aa:de:8f:02:96:dc:f6:17:56:da:f0:3c:
80:0d:f4:28:0a:fc:c3:13:db:5e:44:7d:8b:68:e6:
a3:06:78:9d:9f:cf:16:90:98:22:f5:3f:df:49:80:
d7:3c:7a:9c:e6:03:f9:92:3e:94:21:9e:7a:7d:2b:
01:f6:dc:c9:e1:76:9e:a1:54:b5:53:e2:7a:a3:89:
5b:e6:ef:c8:ef:25:78:dd:b9:d1:f7:50:1f:c3:18:
03:a4:4c:84:7a:23:ad:64:2f:c0:a5:00:a5:78:bf:
c2:5e:43:90:d0:92:dd:19:2b:aa:82:86:9c:ba:d3:
2d:50:c4:7a:c3:96:4f:9b:b5:b8:83:ac:88:58:7a:
78:23:34:84:06:d3:58:44:54:a3:ea:ac:43:43:75:
64:73:23:9b:58:ec:69:2c:d6:41:8d:95:91:f6:32:
66:cf:ae:39:95:bf:35:1c:92:5c:68:31:3f:de:75:
ab:aa:b1:8b:01:77:21:b8:1f:fe:2c:e6:86:43:d6:
fd:38:32:a0:e4:f5:26:bb:8f:01:e8:3e:18:69:f5:
73:39:43:61:2c:61:cd:66:65:d9:9f:55:c5:31:97:
02:48:e9:7a:38:a7:d3:79:54:a3:d1:ef:8b:70:ae:
a6:96:7a:3c:13:5c:a7:87:7f:93:b3:88:3d:e3:b5:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A6:FD:46:B7:71:18:70:D6:77:7D:B5:98:17:88:B8:74:A8:C8:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:af:ee:98:c9:b0:dd:85:42:03:09:fe:8b:05:3a:6d:cd:27:
85:e0:cb:6c:74:2e:ad:d3:d1:0e:5b:fa:e5:af:b6:fa:c9:5b:
d1:00:a4:ef:d9:7d:b8:47:e7:db:7d:8c:9d:7e:1f:53:e9:90:
70:08:0d:ed:b1:e2:c1:ae:30:48:ab:22:95:5d:d1:c4:66:ad:
0d:4f:3c:68:b4:2f:1f:f4:0f:ec:3d:00:e1:01:0f:d4:c3:d2:
1a:a3:79:1f:02:95:f1:d8:10:5e:e9:e4:fe:f6:ae:ee:a8:bf:
ea:60:5d:4d:c5:87:6d:de:9f:e7:59:e3:5d:60:37:6f:9a:37:
e8:7a:61:1b:f3:64:54:b9:5d:9a:37:f9:72:59:8c:37:ff:bb:
60:7f:83:c4:66:04:d7:3f:0c:fc:8c:10:22:ee:1e:e3:b6:0f:
00:4a:f8:45:ba:1d:34:5d:b5:89:3a:00:17:b3:e8:16:da:5c:
45:5e:36:a4:96:a2:3a:fe:7e:d8:dd:e3:04:b8:ed:7a:8c:44:
8b:6b:5a:1d:4a:2d:31:47:0d:a2:a5:45:bc:61:98:9c:9c:7a:
4a:7b:c9:41:ee:ad:1f:d6:eb:32:c5:e9:f2:2b:81:db:ea:56:
7d:91:ba:58:97:83:e6:0e:07:ce:77:0c:e5:ec:2c:cd:f4:15:
74:2f:96:57
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhA5cU5eYhFe/87srAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
MzY1MTUxMTMtMDQ0Yy00OTllLTk4NjItZTdiM2U4MjFmMGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumeq3o8Cltz2F1ba8DyADfQoCvzDE9teRH2L
aOajBnidn88WkJgi9T/fSYDXPHqc5gP5kj6UIZ56fSsB9tzJ4XaeoVS1U+J6o4lb
5u/I7yV43bnR91AfwxgDpEyEeiOtZC/ApQCleL/CXkOQ0JLdGSuqgoacutMtUMR6
w5ZPm7W4g6yIWHp4IzSEBtNYRFSj6qxDQ3VkcyObWOxpLNZBjZWR9jJmz645lb81
HJJcaDE/3nWrqrGLAXchuB/+LOaGQ9b9ODKg5PUmu48B6D4YafVzOUNhLGHNZmXZ
n1XFMZcCSOl6OKfTeVSj0e+LcK6mlno8E1ynh3+Ts4g947Ub7wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOCm/Ua3cRhw1nd9tZgXiLh0qMhQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjliMjEzMGYtNjI5ZC0z
YWVkLTg5ODYtZGNiMjM5ZWEwNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCKr+6YybDdhUIDCf6LBTptzSeF4MtsdC6t09EOW/rlr7b6yVvRAKTv
2X24R+fbfYydfh9T6ZBwCA3tseLBrjBIqyKVXdHEZq0NTzxotC8f9A/sPQDhAQ/U
w9Iao3kfApXx2BBe6eT+9q7uqL/qYF1NxYdt3p/nWeNdYDdvmjfoemEb82RUuV2a
N/lyWYw3/7tgf4PEZgTXPwz8jBAi7h7jtg8ASvhFuh00XbWJOgAXs+gW2lxFXjak
lqI6/n7Y3eMEuO16jESLa1odSi0xRw2ipUW8YZicnHpKe8lB7q0f1usyxenyK4Hb
6lZ9kbpYl4PmDgfOdwzl7CzN9BV0L5ZX
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:14 2025 by rpki-client