Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/668e6eea-63f3-3c1c-bf10-4c3c6e3aeb3d.roa
File: 668e6eea-63f3-3c1c-bf10-4c3c6e3aeb3d.roa (raw, json)
Hash identifier: Ka7xwTtoajrqial86+j1P1vdCsZJT0UcDBdfrH9qSCA=
Subject key identifier: D8:82:C9:98:9E:F0:86:52:48:C6:63:61:49:E5:9A:C7:2A:25:FE:CA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5D861C0B6392673250F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/668e6eea-63f3-3c1c-bf10-4c3c6e3aeb3d.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 36619
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:d8:61:c0:b6:39:26:73:25:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=d23cb125-d66a-4b83-acfb-f0bb96fddf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:d8:3b:a2:d0:25:db:e6:6a:61:a8:ea:52:
c2:9e:0d:7e:a9:a1:8d:32:c1:83:20:24:f8:00:f3:
8b:a5:44:a5:bb:34:db:33:cb:3d:dd:08:49:39:d8:
8a:5c:a7:aa:84:f0:54:0f:43:57:55:59:ff:f6:e8:
46:db:d1:9b:c2:5b:09:05:32:68:4e:52:f6:c8:d9:
93:6e:08:1b:f8:6c:42:41:c3:a9:3d:3f:50:a5:cc:
75:7e:43:c0:00:ce:06:2b:08:17:cd:2c:9d:df:41:
e9:4e:01:bd:d3:99:fd:f3:bb:8e:1a:71:25:aa:ec:
4a:e6:29:00:34:1f:7f:7f:a7:12:f3:92:af:4e:a3:
75:d7:0a:06:46:e2:24:c0:ce:80:bd:0a:df:02:22:
ad:d6:7e:4f:9a:55:90:e9:cb:57:3d:b5:79:09:c8:
f1:62:01:28:e0:d2:b1:95:6f:29:ad:c5:b9:89:b9:
64:01:1c:e9:3c:7b:67:67:a8:98:5c:96:17:aa:1c:
fd:13:ea:e2:dd:fd:75:bf:e6:4b:95:24:b4:4d:6e:
eb:ba:e3:51:33:68:77:06:99:8d:7b:0b:1f:7a:07:
41:8b:36:fe:ca:06:3c:86:73:e9:43:88:5f:4b:32:
40:6a:8d:fc:67:a6:72:5c:c1:43:d1:c2:9b:38:b9:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:C9:98:9E:F0:86:52:48:C6:63:61:49:E5:9A:C7:2A:25:FE:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/668e6eea-63f3-3c1c-bf10-4c3c6e3aeb3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:23:20:e4:82:b6:a0:d3:29:6b:6a:e8:93:aa:7e:f7:c6:ac:
50:97:89:d5:35:1c:78:ec:30:e2:1f:e6:09:65:18:5c:f1:d6:
56:f4:98:f7:60:cd:46:b6:25:55:c8:50:8a:e7:a9:cd:ac:a9:
63:0c:9a:ff:cb:a7:9e:0a:33:54:f7:9c:4e:de:88:aa:0e:94:
1d:37:f1:6a:ca:16:55:20:ca:fb:e3:2e:d4:d1:6b:a3:df:10:
fe:f8:bc:47:7d:ca:e6:f9:02:71:15:80:cb:7f:8d:f5:f8:6c:
3e:cb:f1:cb:c2:a6:5d:55:24:7d:07:44:63:63:de:21:eb:d5:
aa:83:b1:bb:93:2e:e0:17:01:41:88:f8:9d:7d:d4:11:fe:30:
21:e3:ff:da:39:84:1c:12:63:8f:49:01:52:94:90:ab:d4:8a:
45:5f:30:9f:09:fc:04:98:c9:b0:95:f7:41:48:64:1c:13:92:
d6:6e:f8:32:48:36:7e:95:2e:a3:65:7a:aa:3d:5d:e0:ce:b9:
0c:c0:eb:6f:03:f4:c5:d7:d3:2f:1c:09:dd:ba:4c:4e:b6:90:
60:f2:55:6b:e2:74:8f:3d:0a:01:bc:da:87:91:c9:3a:a1:49:
23:62:f3:b3:ff:45:ea:6b:d0:44:b8:37:6d:54:d0:93:17:2f:
89:1c:b8:ea
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiUpdhhwLY5JnMlDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
ZDIzY2IxMjUtZDY2YS00YjgzLWFjZmItZjBiYjk2ZmRkZjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUnYO6LQJdvmamGo6lLCng1+qaGNMsGDICT4
APOLpUSluzTbM8s93QhJOdiKXKeqhPBUD0NXVVn/9uhG29GbwlsJBTJoTlL2yNmT
bggb+GxCQcOpPT9Qpcx1fkPAAM4GKwgXzSyd30HpTgG905n987uOGnElquxK5ikA
NB9/f6cS85KvTqN11woGRuIkwM6AvQrfAiKt1n5PmlWQ6ctXPbV5CcjxYgEo4NKx
lW8prcW5iblkARzpPHtnZ6iYXJYXqhz9E+ri3f11v+ZLlSS0TW7ruuNRM2h3BpmN
ewsfegdBizb+ygY8hnPpQ4hfSzJAao38Z6ZyXMFD0cKbOLkNQQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNiCyZie8IZSSMZjYUnlmscqJf7KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjY4ZTZlZWEtNjNmMy0z
YzFjLWJmMTAtNGMzYzZlM2FlYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAZIyDkgrag0ylrauiTqn73xqxQl4nVNRx47DDiH+YJZRhc8dZW9Jj3
YM1GtiVVyFCK56nNrKljDJr/y6eeCjNU95xO3oiqDpQdN/FqyhZVIMr74y7U0Wuj
3xD++LxHfcrm+QJxFYDLf431+Gw+y/HLwqZdVSR9B0RjY94h69Wqg7G7ky7gFwFB
iPidfdQR/jAh4//aOYQcEmOPSQFSlJCr1IpFXzCfCfwEmMmwlfdBSGQcE5LWbvgy
SDZ+lS6jZXqqPV3gzrkMwOtvA/TF19MvHAndukxOtpBg8lVr4nSPPQoBvNqHkck6
oUkjYvOz/0Xqa9BEuDdtVNCTFy+JHLjq
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:52 2025 by rpki-client