Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89f23f07-abdb-38d3-ab38-301c241dd221.roa
File: 89f23f07-abdb-38d3-ab38-301c241dd221.roa (raw, json)
Hash identifier: owjOjhItbS8jfPywdF1M2+ae8W0OXYfmYAPZpsxhEA0=
Subject key identifier: 39:59:A9:3B:57:68:A4:C9:71:03:78:1B:3F:B2:70:3F:BB:9D:E5:BF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F0A64991046019F7D0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89f23f07-abdb-38d3-ab38-301c241dd221.roa
Signing time: Thu 19 Dec 2024 13:45:07 +0000
ROA not before: Thu 19 Dec 2024 13:45:07 +0000
ROA not after: Wed 19 Mar 2025 12:45:07 +0000
asID: 396551
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f0:a6:49:91:04:60:19:f7:d0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:07 2024 GMT
Not After : Mar 19 12:45:07 2025 GMT
Subject: CN=a1fa53c3-0143-44a3-ad48-625d10611dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:a4:b5:c5:12:56:13:22:0d:3a:aa:8a:ac:
69:51:19:82:6c:fa:da:1f:bc:60:f8:24:45:47:5b:
3a:3e:75:8a:b8:6f:89:ff:54:25:bd:85:ed:51:75:
1e:05:af:05:68:fe:ce:07:21:d3:62:58:43:5c:70:
68:78:55:f5:b5:41:69:e7:8d:c4:14:21:f8:42:db:
59:93:72:09:39:8d:13:b2:6e:ac:4d:25:f0:49:dd:
02:de:44:64:06:16:b1:7e:01:3a:93:a6:63:82:d3:
c4:e5:15:2d:13:cd:07:ec:c3:1c:93:0a:f0:4d:53:
5d:c2:eb:2c:7c:85:00:0f:21:b7:21:f2:4e:f6:c7:
f9:a5:53:a4:6e:ae:bc:d5:6c:d7:1d:0c:04:d9:2a:
08:94:5b:c4:a8:af:98:f4:ed:7f:00:22:c4:af:e0:
92:cd:db:0c:c8:ab:f7:09:66:f4:7c:14:a3:ba:6d:
ee:d0:62:6e:4d:5d:ae:94:63:42:2c:40:d0:60:7f:
3a:2f:62:ef:9d:96:aa:b9:17:b6:78:00:b2:fa:0d:
bc:79:da:53:59:5d:d4:15:c1:ba:4c:2f:26:47:15:
28:13:4a:1a:62:31:d3:17:56:96:f3:98:14:bd:cd:
29:85:ec:07:2b:3e:fe:35:28:37:0c:3b:90:92:10:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:59:A9:3B:57:68:A4:C9:71:03:78:1B:3F:B2:70:3F:BB:9D:E5:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89f23f07-abdb-38d3-ab38-301c241dd221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:e5:68:3f:9e:cd:3e:a4:f4:74:33:7c:d0:5c:8d:22:57:17:
79:89:e2:a4:3a:9b:e6:0e:e6:a7:b9:52:b6:ab:e9:85:cc:0a:
d7:77:0f:ab:cd:ed:30:b5:5e:7e:b2:bb:88:72:fc:d4:35:1e:
04:52:4c:c6:28:8b:d0:d7:b7:7c:16:ad:b1:9a:a7:cf:d3:cb:
e5:bd:83:23:81:bb:9f:97:8a:68:9d:20:ed:9b:2f:66:c6:ef:
55:fc:c1:8a:7d:5f:55:39:3a:b8:a1:c5:4d:09:c4:3a:2c:ab:
1c:ff:0c:e8:4c:53:d5:fa:b9:74:c0:33:d5:9a:5c:2c:b5:5a:
ee:bb:61:0a:1b:04:0c:c2:7b:75:7c:74:97:5a:02:4c:e9:04:
41:cb:1e:a1:98:6f:97:aa:8d:84:45:20:ee:d4:c9:52:a7:6c:
d4:c2:2d:65:73:6d:8d:c5:63:15:ae:b7:ef:52:cc:f5:cd:fd:
ac:38:41:05:be:6b:74:2d:25:7f:8d:ad:65:92:8d:e1:2e:17:
6c:cc:86:e0:86:72:10:9b:2e:62:0f:36:48:5e:d5:17:7c:57:
e0:7b:0a:1b:42:89:db:c9:d4:9f:e3:4a:81:6f:96:75:6d:28:
b4:43:0c:18:11:14:d1:c5:1b:6e:22:ec:d7:fe:82:18:3b:55:
db:2d:38:28
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhCQvCmSZEEYBn30MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUwN1oXDTI1MDMxOTEyNDUwN1owLzEtMCsGA1UEAxMk
YTFmYTUzYzMtMDE0My00NGEzLWFkNDgtNjI1ZDEwNjExZGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnSktcUSVhMiDTqqiqxpURmCbPraH7xg+CRF
R1s6PnWKuG+J/1QlvYXtUXUeBa8FaP7OByHTYlhDXHBoeFX1tUFp543EFCH4QttZ
k3IJOY0Tsm6sTSXwSd0C3kRkBhaxfgE6k6ZjgtPE5RUtE80H7MMckwrwTVNdwuss
fIUADyG3IfJO9sf5pVOkbq681WzXHQwE2SoIlFvEqK+Y9O1/ACLEr+CSzdsMyKv3
CWb0fBSjum3u0GJuTV2ulGNCLEDQYH86L2LvnZaquRe2eACy+g28edpTWV3UFcG6
TC8mRxUoE0oaYjHTF1aW85gUvc0phewHKz7+NSg3DDuQkhCJeQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDlZqTtXaKTJcQN4Gz+ycD+7neW/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODlmMjNmMDctYWJkYi0z
OGQzLWFiMzgtMzAxYzI0MWRkMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAH5Wg/ns0+pPR0M3zQXI0iVxd5ieKkOpvmDuanuVK2q+mFzArXdw+r
ze0wtV5+sruIcvzUNR4EUkzGKIvQ17d8Fq2xmqfP08vlvYMjgbufl4ponSDtmy9m
xu9V/MGKfV9VOTq4ocVNCcQ6LKsc/wzoTFPV+rl0wDPVmlwstVruu2EKGwQMwnt1
fHSXWgJM6QRByx6hmG+Xqo2ERSDu1MlSp2zUwi1lc22NxWMVrrfvUsz1zf2sOEEF
vmt0LSV/ja1lko3hLhdszIbghnIQmy5iDzZIXtUXfFfgewobQonbydSf40qBb5Z1
bSi0QwwYERTRxRtuIuzX/oIYO1XbLTgo
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:04 2025 by rpki-client