Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/801b684e-2685-3f12-890e-0956a7a372fa.roa
File: 801b684e-2685-3f12-890e-0956a7a372fa.roa (raw, json)
Hash identifier: 5zxQtn8K3hZK7VTKqy2UngulzWonrUPEzAXWHzSE5gU=
Subject key identifier: CD:8E:EB:89:73:76:18:47:9E:66:DA:4D:8D:FD:67:49:EB:57:32:04
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DF38B791E39765497660
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/801b684e-2685-3f12-890e-0956a7a372fa.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396617
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:df:38:b7:91:e3:97:65:49:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=46e643e6-d517-456b-8afd-6fe25acf05e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:ef:22:a8:a7:17:31:00:78:60:88:24:8b:
d7:4e:be:11:ff:54:60:c4:09:5a:31:40:93:6e:d2:
2c:2f:47:d2:75:01:a0:13:ae:1a:ea:1b:29:44:e8:
f1:e3:b7:84:d9:d2:8e:30:4a:4e:3f:dd:86:ba:04:
b7:34:59:7b:86:da:68:2c:ad:50:3c:68:e9:81:69:
19:fb:15:41:2e:b5:d2:6c:d8:61:28:95:4c:90:c7:
41:02:63:24:ac:82:c5:3f:71:7e:3c:ba:aa:ca:08:
b5:2e:68:2f:46:9f:4c:60:d0:99:55:40:22:bd:1b:
0d:f5:ff:bf:d6:73:72:b8:d3:0f:0c:c1:68:98:76:
7e:99:f7:d6:8d:a4:04:3d:0a:d1:11:ac:96:25:d2:
c8:94:35:28:89:10:a2:9e:45:d5:57:fc:55:65:ef:
f6:55:f1:f3:8e:6f:7f:40:be:cc:c5:c9:a4:47:67:
b3:83:bd:a3:d3:4e:27:ad:ce:e1:8d:1f:d0:52:a2:
b4:77:01:5c:cf:9e:d2:a9:17:b0:9f:d7:98:41:fe:
02:9b:a6:c7:34:66:53:b5:61:07:2d:0f:83:6c:43:
d6:c0:5f:10:75:23:9a:54:02:ec:e6:6c:2a:47:03:
6d:8a:ad:18:c8:e5:24:e5:0f:f0:c3:8b:cf:2b:98:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8E:EB:89:73:76:18:47:9E:66:DA:4D:8D:FD:67:49:EB:57:32:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/801b684e-2685-3f12-890e-0956a7a372fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:bf:c8:d0:81:82:3a:48:3c:39:9f:c1:de:eb:c2:04:20:55:
2b:71:5c:fa:e8:c1:42:e4:c9:08:14:48:73:a1:41:34:46:b8:
e8:c0:6e:72:5a:97:ec:5f:88:b1:56:a8:0a:ed:e3:3b:45:6e:
9a:91:5d:68:fe:27:54:af:9c:be:75:75:6d:a7:8f:e3:86:8b:
32:1b:4d:3d:29:30:86:be:0a:f8:f7:b7:c0:06:0f:e1:f8:df:
d3:72:8b:87:cb:fb:50:68:86:ae:06:e2:39:21:3a:ff:d7:dc:
ce:ab:e1:63:1c:4a:c4:49:84:6a:43:33:83:aa:b1:a5:24:dc:
06:8e:7e:94:b3:5b:b2:31:20:04:97:75:b5:67:10:93:96:ff:
01:03:88:dc:ea:5d:ab:e5:8a:a9:1d:5e:ed:2e:02:71:0c:86:
87:90:d7:55:77:45:67:2c:1f:31:6f:85:bc:da:f9:1b:79:8b:
f5:d8:0a:65:65:e8:06:c3:97:28:db:d1:9e:b6:50:4f:0c:50:
ad:30:b8:1d:6a:12:50:2b:d1:f6:92:5f:25:24:b8:ea:00:a1:
7a:66:92:b6:62:28:28:6e:20:de:40:63:09:dc:03:ad:c8:81:
34:92:23:b7:b9:0e:60:fb:f0:a1:2c:d6:1a:f5:1e:3a:e9:be:
61:16:1a:ea
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiUpd84t5Hjl2VJdmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
NDZlNjQzZTYtZDUxNy00NTZiLThhZmQtNmZlMjVhY2YwNWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4vvIqinFzEAeGCIJIvXTr4R/1RgxAlaMUCT
btIsL0fSdQGgE64a6hspROjx47eE2dKOMEpOP92GugS3NFl7htpoLK1QPGjpgWkZ
+xVBLrXSbNhhKJVMkMdBAmMkrILFP3F+PLqqygi1LmgvRp9MYNCZVUAivRsN9f+/
1nNyuNMPDMFomHZ+mffWjaQEPQrREayWJdLIlDUoiRCinkXVV/xVZe/2VfHzjm9/
QL7MxcmkR2ezg72j004nrc7hjR/QUqK0dwFcz57SqRewn9eYQf4Cm6bHNGZTtWEH
LQ+DbEPWwF8QdSOaVALs5mwqRwNtiq0YyOUk5Q/ww4vPK5irTQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM2O64lzdhhHnmbaTY39Z0nrVzIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODAxYjY4NGUtMjY4NS0z
ZjEyLTg5MGUtMDk1NmE3YTM3MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA6v8jQgYI6SDw5n8He68IEIFUrcVz66MFC5MkIFEhzoUE0RrjowG5y
WpfsX4ixVqgK7eM7RW6akV1o/idUr5y+dXVtp4/jhosyG009KTCGvgr497fABg/h
+N/TcouHy/tQaIauBuI5ITr/19zOq+FjHErESYRqQzODqrGlJNwGjn6Us1uyMSAE
l3W1ZxCTlv8BA4jc6l2r5YqpHV7tLgJxDIaHkNdVd0VnLB8xb4W82vkbeYv12Apl
ZegGw5co29GetlBPDFCtMLgdahJQK9H2kl8lJLjqAKF6ZpK2YigobiDeQGMJ3AOt
yIE0kiO3uQ5g+/ChLNYa9R466b5hFhrq
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:51 2025 by rpki-client