Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/302c036f-ad2f-34fb-bd7f-8520a7ad47e1.roa
File: 302c036f-ad2f-34fb-bd7f-8520a7ad47e1.roa (raw, json)
Hash identifier: 6wkm30r2mU3UvoCsEmgVNWj4qVgQDN3EjiK/4IL1hoU=
Subject key identifier: AC:CB:29:C8:31:DA:F4:2B:F5:CE:EF:5B:4C:EB:3D:C4:B0:91:D5:41
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B38EF9A3A3C1740DA5800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/302c036f-ad2f-34fb-bd7f-8520a7ad47e1.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396616
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:38:ef:9a:3a:3c:17:40:da:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=47765fa7-ef88-49cd-9f6a-afbe11bcbaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:72:dc:c0:47:a6:ef:b2:94:e0:a5:b8:92:
1b:24:64:cb:50:3b:45:fe:e6:79:5a:01:8d:10:e7:
04:3f:54:85:86:15:61:59:a5:5a:d0:59:83:d6:70:
0d:2d:97:1a:9f:dd:a0:cb:ac:2e:dc:0b:43:92:02:
01:26:d8:73:f1:5d:92:e5:af:15:35:c5:5a:d7:05:
1c:4b:9f:8d:3a:14:82:f6:0b:88:92:1c:11:71:ea:
6d:2d:1a:e8:94:4a:c6:51:7d:7d:d6:b5:4a:de:10:
a2:08:ee:ff:cf:e1:b8:29:ba:5c:4e:d7:7a:e1:a1:
13:18:54:28:ed:88:a7:0e:20:33:af:57:c1:a1:be:
4b:6d:6e:d7:de:36:52:d2:72:ab:57:ec:a9:71:0b:
d2:e8:18:38:ca:56:91:9e:64:ce:22:37:1e:c4:66:
a8:ab:e4:96:07:f8:0a:43:a2:f7:75:dc:63:2f:eb:
eb:dc:f1:90:2f:6a:05:9e:0c:ae:16:e9:46:08:ff:
05:a1:8b:1b:da:aa:09:32:77:57:19:ae:1d:fb:74:
59:06:9e:b3:ce:f5:70:21:8c:ef:99:83:e5:b2:4a:
63:d4:cd:3d:78:29:29:e8:0e:37:92:99:97:cb:cd:
6e:00:9f:77:5b:ea:f1:ad:ab:78:b5:94:63:09:cb:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CB:29:C8:31:DA:F4:2B:F5:CE:EF:5B:4C:EB:3D:C4:B0:91:D5:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/302c036f-ad2f-34fb-bd7f-8520a7ad47e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:37:12:90:09:58:14:31:d8:77:6e:65:e6:0c:9f:aa:81:91:
ac:02:9f:03:05:08:61:dc:47:6a:33:ca:38:fd:1f:0b:a2:cd:
bf:19:e6:de:44:c6:c1:46:fc:88:79:b4:20:a8:c1:2f:ea:94:
0a:c8:65:4c:4a:03:55:e4:e9:d8:24:d8:a1:f9:d0:85:ce:b6:
bd:0a:8f:d0:4a:6d:8b:72:87:fb:7c:1c:e4:af:fa:1a:6c:2f:
75:84:fd:cb:4e:44:6f:dd:fd:4e:05:ee:65:08:1e:f8:7c:3a:
7d:20:c8:7e:36:4c:c0:8b:f3:dd:ef:86:05:30:2f:ab:30:c9:
0b:e0:d4:23:a6:7a:d4:d7:c5:ee:c7:b2:b0:ae:6a:5b:25:16:
c5:e5:fe:20:3a:28:5d:96:bf:32:0a:a8:97:e2:d8:de:96:b1:
e9:84:82:8f:b1:7c:2f:f9:f8:f6:ea:f6:68:7c:f9:1f:b3:ed:
e1:11:f0:58:bd:94:7c:db:7d:7e:16:a7:f4:c5:56:3b:a0:f8:
f2:cd:c6:4b:45:37:ef:68:8a:13:32:95:c0:95:c9:bb:7b:3f:
42:52:9c:aa:9c:01:88:65:e0:b1:60:48:74:4e:46:72:bb:ba:
c7:14:2f:ac:8d:39:d7:18:c7:df:48:45:80:6c:c9:7e:88:f4:
e8:bb:c9:cc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiaOzjvmjo8F0DaWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
NDc3NjVmYTctZWY4OC00OWNkLTlmNmEtYWZiZTExYmNiYWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjdy3MBHpu+ylOCluJIbJGTLUDtF/uZ5WgGN
EOcEP1SFhhVhWaVa0FmD1nANLZcan92gy6wu3AtDkgIBJthz8V2S5a8VNcVa1wUc
S5+NOhSC9guIkhwRceptLRrolErGUX191rVK3hCiCO7/z+G4KbpcTtd64aETGFQo
7YinDiAzr1fBob5LbW7X3jZS0nKrV+ypcQvS6Bg4ylaRnmTOIjcexGaoq+SWB/gK
Q6L3ddxjL+vr3PGQL2oFngyuFulGCP8FoYsb2qoJMndXGa4d+3RZBp6zzvVwIYzv
mYPlskpj1M09eCkp6A43kpmXy81uAJ93W+rxrat4tZRjCcuWjQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKzLKcgx2vQr9c7vW0zrPcSwkdVBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzAyYzAzNmYtYWQyZi0z
NGZiLWJkN2YtODUyMGE3YWQ0N2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCzNxKQCVgUMdh3bmXmDJ+qgZGsAp8DBQhh3EdqM8o4/R8Los2/Gebe
RMbBRvyIebQgqMEv6pQKyGVMSgNV5OnYJNih+dCFzra9Co/QSm2Lcof7fBzkr/oa
bC91hP3LTkRv3f1OBe5lCB74fDp9IMh+NkzAi/Pd74YFMC+rMMkL4NQjpnrU18Xu
x7KwrmpbJRbF5f4gOihdlr8yCqiX4tjelrHphIKPsXwv+fj26vZofPkfs+3hEfBY
vZR8231+Fqf0xVY7oPjyzcZLRTfvaIoTMpXAlcm7ez9CUpyqnAGIZeCxYEh0TkZy
u7rHFC+sjTnXGMffSEWAbMl+iPTou8nM
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:07:33 2025 by rpki-client