Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36bf3d65-db56-3929-be4d-8bcfbac78e15.roa
File: 36bf3d65-db56-3929-be4d-8bcfbac78e15.roa (raw, json)
Hash identifier: Ef/HIOl9jCxVqZmH0RJah0J1DJk0ld2/Go9S+4Grcgg=
Subject key identifier: 4F:43:8D:41:DB:22:61:8D:A8:A5:02:AE:63:69:1D:A8:D4:E9:5E:57
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DD8FB3F3694192CE5DA8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36bf3d65-db56-3929-be4d-8bcfbac78e15.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396827
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:dd:8f:b3:f3:69:41:92:ce:5d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=2ad3ee58-eb05-4f8b-b447-e36d57b28afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:24:ec:f5:7b:8b:3d:37:34:f5:c1:a4:b7:
10:ec:2b:65:3b:db:9c:db:72:f8:11:65:17:1c:8d:
0b:df:24:ee:88:69:49:35:6d:75:3a:6c:27:e6:bc:
f7:85:10:e1:3a:ca:ca:11:11:19:44:5c:e9:13:7b:
91:cd:79:ad:90:0e:c0:ae:ef:17:2a:cb:8b:bd:08:
1d:b4:f4:4d:73:33:69:72:17:f7:9d:dc:60:18:9f:
91:87:cb:60:27:8a:74:ca:1a:30:38:af:4a:73:64:
91:34:25:16:af:a5:1e:48:0a:1f:5a:c0:26:1e:31:
8e:da:ee:6c:c2:50:2b:c6:cf:8b:68:f7:55:dc:42:
59:11:ff:b2:60:11:05:40:e3:b6:50:c1:2d:00:d3:
4d:6d:c7:cc:66:34:86:b5:3c:42:6f:f6:16:97:e1:
d3:95:73:dd:da:a9:09:eb:6e:ec:33:8c:e9:a1:69:
bd:97:9f:ec:ae:2a:e9:83:6b:c8:87:c0:d1:1e:e1:
d9:e8:f3:36:fe:10:1a:b8:6d:eb:24:ee:4b:aa:98:
6c:42:3c:88:91:f5:40:d8:5e:51:d9:15:c2:b9:7d:
9e:36:f6:36:87:75:91:f2:94:eb:2d:d6:6d:69:fa:
06:bb:f4:fd:74:9c:8f:47:5e:d9:71:b3:d2:83:59:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:43:8D:41:DB:22:61:8D:A8:A5:02:AE:63:69:1D:A8:D4:E9:5E:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36bf3d65-db56-3929-be4d-8bcfbac78e15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d7:f7:3e:6f:fe:dc:8f:3f:fe:d5:e6:69:2c:7f:4d:24:e4:
27:81:8c:93:18:35:27:a3:f5:e3:d3:ea:8d:37:d8:cb:3a:2c:
fb:7a:20:a7:44:02:3e:75:e6:fd:b3:95:46:14:1f:24:77:90:
c1:cc:7b:20:4a:63:f7:94:2b:3a:59:c7:24:02:08:f9:c6:5b:
04:b8:4d:b0:1c:48:fd:31:f5:ef:d5:84:1f:e7:f5:e3:0f:a6:
62:ae:11:28:3c:ac:bb:33:30:ec:84:02:18:b5:5a:72:63:ea:
f2:0a:c8:e4:cd:89:a0:51:45:a0:aa:b5:cc:42:27:ca:09:12:
76:50:ed:0d:8b:83:92:9a:99:1e:1f:b7:ca:81:a0:41:4c:4b:
88:01:7b:8f:6a:18:4f:52:f3:01:8f:0f:5a:93:50:53:46:2f:
ea:69:79:7d:4c:3c:b6:83:c4:9d:17:49:8c:ee:2b:ea:57:a6:
e0:c5:21:45:cc:f6:49:39:71:57:07:39:73:61:fd:4d:6b:5a:
ae:87:70:56:87:0c:a4:d3:4c:bc:37:bd:15:ee:a5:2a:31:1c:
82:18:65:51:98:2b:5c:ed:19:21:29:db:41:7b:20:c4:35:e5:
36:7c:0d:ed:f3:04:89:83:b2:7b:52:84:5d:bb:0b:52:0b:77:
d9:0b:5d:43
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiUpd2Ps/NpQZLOXagwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
MmFkM2VlNTgtZWIwNS00ZjhiLWI0NDctZTM2ZDU3YjI4YWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSIk7PV7iz03NPXBpLcQ7CtlO9uc23L4EWUX
HI0L3yTuiGlJNW11Omwn5rz3hRDhOsrKEREZRFzpE3uRzXmtkA7Aru8XKsuLvQgd
tPRNczNpchf3ndxgGJ+Rh8tgJ4p0yhowOK9Kc2SRNCUWr6UeSAofWsAmHjGO2u5s
wlArxs+LaPdV3EJZEf+yYBEFQOO2UMEtANNNbcfMZjSGtTxCb/YWl+HTlXPd2qkJ
627sM4zpoWm9l5/srirpg2vIh8DRHuHZ6PM2/hAauG3rJO5LqphsQjyIkfVA2F5R
2RXCuX2eNvY2h3WR8pTrLdZtafoGu/T9dJyPR17ZcbPSg1nQXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFE9DjUHbImGNqKUCrmNpHajU6V5XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzZiZjNkNjUtZGI1Ni0z
OTI5LWJlNGQtOGJjZmJhYzc4ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAb1/c+b/7cjz/+1eZpLH9NJOQngYyTGDUno/Xj0+qNN9jLOiz7eiCn
RAI+deb9s5VGFB8kd5DBzHsgSmP3lCs6WcckAgj5xlsEuE2wHEj9MfXv1YQf5/Xj
D6ZirhEoPKy7MzDshAIYtVpyY+ryCsjkzYmgUUWgqrXMQifKCRJ2UO0Ni4OSmpke
H7fKgaBBTEuIAXuPahhPUvMBjw9ak1BTRi/qaXl9TDy2g8SdF0mM7ivqV6bgxSFF
zPZJOXFXBzlzYf1Na1quh3BWhwyk00y8N70V7qUqMRyCGGVRmCtc7RkhKdtBeyDE
NeU2fA3t8wSJg7J7UoRduwtSC3fZC11D
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:05:25 2025 by rpki-client