Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f005c32-99c8-35f0-a7bb-20ff0b3b1e42.roa
File: 6f005c32-99c8-35f0-a7bb-20ff0b3b1e42.roa (raw, json)
Hash identifier: OCVbGs+bb7jQqf+9+omQUMf+CypyhMjTTyCMbQpj09w=
Subject key identifier: A7:90:99:02:41:DC:03:BB:94:C7:FE:CD:2B:2B:69:3D:BD:E2:AB:45
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A96D4FEFE2C2C5FB3840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f005c32-99c8-35f0-a7bb-20ff0b3b1e42.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 27544
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a9:6d:4f:ef:e2:c2:c5:fb:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=2fda609e-5e77-4181-8f0a-4e1334504fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:f0:b4:5e:eb:d6:06:bc:ed:c8:24:ca:f5:
7f:fd:e3:54:ea:8f:db:1a:97:53:49:73:7e:0f:ef:
a8:7d:7b:90:a0:cd:13:8f:9d:7d:88:02:bb:87:59:
b5:08:a8:d6:16:e5:23:e8:42:af:cd:a4:af:1b:8b:
90:5f:96:d0:28:d0:a1:4e:4f:5e:96:32:3b:81:8d:
b6:8b:a4:63:a0:c8:3c:15:36:ac:77:9f:d2:02:94:
58:ca:67:bb:ae:4f:2c:8d:1a:0b:f4:9f:23:17:47:
7e:36:16:4d:36:31:97:92:a9:ac:cd:96:01:13:dd:
37:75:1c:c3:4d:af:16:9a:68:77:93:0b:e6:84:10:
ca:98:5a:ec:bd:68:01:4e:f8:95:8a:d1:79:1f:b4:
b8:78:d6:6b:27:6e:c7:d5:c6:bd:6e:1e:0d:bc:12:
a5:57:5e:3e:86:33:21:24:60:d5:e6:f8:ce:e7:a4:
85:eb:c0:5c:3b:f1:a5:05:50:d1:c4:7b:c1:4e:33:
68:6e:9f:33:db:5f:1f:16:76:1d:7f:52:31:2e:13:
a6:9b:3e:89:d6:25:b2:3e:52:af:5f:ea:9f:c8:6a:
4b:49:fd:21:0b:6f:06:a3:ff:96:80:a8:8a:5a:98:
72:7e:dd:77:9d:5e:c7:99:37:89:69:d1:e9:e9:d7:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:99:02:41:DC:03:BB:94:C7:FE:CD:2B:2B:69:3D:BD:E2:AB:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f005c32-99c8-35f0-a7bb-20ff0b3b1e42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:22:65:25:36:d3:88:f3:6b:00:f1:1e:f4:4f:b2:47:0a:5e:
77:5e:33:be:72:d5:c3:f5:83:98:d1:c9:e4:d8:22:01:1a:a4:
fd:f9:d2:2f:8b:b6:eb:a9:65:aa:31:52:8b:45:83:bf:9f:92:
96:02:a2:22:a5:54:e4:46:34:fa:b9:b9:3b:f0:ba:05:26:fe:
99:95:e5:b1:59:11:2f:59:c4:40:bd:0b:50:4d:a4:28:74:a1:
c5:26:44:83:c0:9d:a8:e6:e6:a5:a2:5c:67:6a:df:2a:b6:06:
d3:b9:37:c7:65:4b:c9:a8:65:0b:5b:d3:3b:b0:2d:2a:cf:68:
3d:5f:28:23:70:d0:5a:9b:31:24:d5:ff:cc:21:99:e6:63:d0:
72:9a:94:0e:0c:86:de:b8:99:3b:ee:86:c9:a9:24:db:14:ae:
a7:81:de:64:99:4d:5e:7e:a5:34:a0:9e:32:df:00:04:8c:35:
67:1e:ba:10:ee:9c:21:43:4c:73:f7:26:64:20:3a:a0:32:2b:
c8:54:14:9a:15:16:a5:91:ef:c5:05:ee:46:9f:6b:73:63:41:
a9:0a:f1:82:86:e0:f5:a8:0a:a8:84:ab:f6:fc:40:21:fa:05:
e6:26:55:29:93:8d:ae:8f:3f:d6:8c:87:0e:e3:30:18:f0:1e:
73:7c:5c:6c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEheNaltT+/iwsX7OEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
MmZkYTYwOWUtNWU3Ny00MTgxLThmMGEtNGUxMzM0NTA0ZmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9bwtF7r1ga87cgkyvV//eNU6o/bGpdTSXN+
D++ofXuQoM0Tj519iAK7h1m1CKjWFuUj6EKvzaSvG4uQX5bQKNChTk9eljI7gY22
i6RjoMg8FTasd5/SApRYyme7rk8sjRoL9J8jF0d+NhZNNjGXkqmszZYBE903dRzD
Ta8Wmmh3kwvmhBDKmFrsvWgBTviVitF5H7S4eNZrJ27H1ca9bh4NvBKlV14+hjMh
JGDV5vjO56SF68BcO/GlBVDRxHvBTjNobp8z218fFnYdf1IxLhOmmz6J1iWyPlKv
X+qfyGpLSf0hC28Go/+WgKiKWphyft13nV7HmTeJadHp6ddZXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKeQmQJB3AO7lMf+zSsraT294qtFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmYwMDVjMzItOTljOC0z
NWYwLWE3YmItMjBmZjBiM2IxZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB/ImUlNtOI82sA8R70T7JHCl53XjO+ctXD9YOY0cnk2CIBGqT9+dIv
i7brqWWqMVKLRYO/n5KWAqIipVTkRjT6ubk78LoFJv6ZleWxWREvWcRAvQtQTaQo
dKHFJkSDwJ2o5ualolxnat8qtgbTuTfHZUvJqGULW9M7sC0qz2g9XygjcNBamzEk
1f/MIZnmY9BympQODIbeuJk77obJqSTbFK6ngd5kmU1efqU0oJ4y3wAEjDVnHroQ
7pwhQ0xz9yZkIDqgMivIVBSaFRalke/FBe5Gn2tzY0GpCvGChuD1qAqohKv2/EAh
+gXmJlUpk42ujz/WjIcO4zAY8B5zfFxs
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:13:35 2025 by rpki-client