Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/962b8233-45d8-3ec9-b091-24f5678c9ea5.roa
File: 962b8233-45d8-3ec9-b091-24f5678c9ea5.roa (raw, json)
Hash identifier: mHrE75OzqGjNIcP4BSu4FMzZHRbLTYs+RlH60NmpG9A=
Subject key identifier: 34:BA:6A:27:F6:AA:DF:C0:A3:CF:C8:5F:19:59:27:E5:20:1A:60:2B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C4767189E51C2C3F07C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/962b8233-45d8-3ec9-b091-24f5678c9ea5.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396603
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c4:76:71:89:e5:1c:2c:3f:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=2d5e810e-fd60-4f41-b5ad-f00cea9ee514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:7e:4a:68:58:2d:1b:bd:4a:8c:ad:1d:60:
db:ea:8e:98:bc:ff:63:dc:8e:21:9b:03:35:fd:0c:
d0:fc:ed:6c:12:5a:51:47:20:c9:75:84:64:30:e9:
64:bd:21:94:ce:c5:54:3d:0d:f7:bb:b3:34:8b:89:
22:ce:e9:a3:78:9a:0c:8d:85:e0:d0:9b:1e:7d:4f:
ae:dd:07:79:3d:b1:e3:b1:c4:58:a6:93:80:35:41:
ae:0b:90:76:50:fd:7d:d7:0f:99:e1:70:4c:70:d9:
b0:46:69:db:14:4f:d5:94:d0:40:b2:d6:db:f1:b0:
1f:92:6b:d5:ef:88:c5:d8:ff:15:4c:18:2d:74:70:
bd:1c:58:ba:19:0c:5a:66:a0:b5:27:de:0f:32:e4:
0f:fe:e3:1c:a9:bd:6e:a1:7e:1a:f1:16:5d:8a:38:
8f:77:73:43:27:36:97:ea:55:ed:39:f1:f3:97:4f:
fb:20:d6:ec:a7:d2:00:11:67:6f:bb:dc:3e:7e:17:
0d:b2:16:2a:b5:8c:65:e5:11:95:ce:4b:68:1b:66:
10:5e:b4:df:c1:a6:28:fd:25:a0:3e:98:98:ed:01:
31:d1:44:b2:ff:2d:9a:1e:72:25:90:9b:e5:1e:c9:
de:33:c3:bb:c9:a2:30:aa:25:8b:5e:a3:02:9f:47:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:6A:27:F6:AA:DF:C0:A3:CF:C8:5F:19:59:27:E5:20:1A:60:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/962b8233-45d8-3ec9-b091-24f5678c9ea5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:79:ba:2a:9b:2a:84:a8:14:4d:11:a9:f3:ff:ca:c8:c5:3f:
5f:c7:3f:83:f0:ba:a5:32:2b:bf:1a:a5:da:4a:ce:7c:c0:dd:
c1:cc:76:ae:02:33:ac:57:7c:28:bd:af:b2:b8:eb:05:9a:68:
5a:5c:c2:47:60:3d:ae:94:18:94:1d:8f:14:bf:37:d3:72:00:
f1:08:0b:ce:b0:ca:f5:75:50:75:c0:14:7e:85:4d:22:06:64:
ac:d3:e1:9f:39:05:87:cc:8a:27:ab:19:1c:ee:f2:59:34:d4:
d7:d3:34:23:c8:6a:99:ca:e2:f2:94:7f:ac:5e:95:77:69:64:
83:bc:71:08:ee:70:aa:0b:c5:3d:16:5e:c7:96:ad:af:99:9b:
9a:fd:4d:ac:48:49:78:b0:10:fc:5e:5e:c6:4e:12:4b:d5:f8:
6a:85:7d:0f:e1:54:73:e3:41:70:87:b4:6d:5a:37:e4:1e:d4:
a0:3f:ae:74:07:4a:52:6a:1b:bf:55:89:66:59:d6:49:31:63:
f4:05:ca:bb:21:cd:89:cd:d5:3d:ab:4f:c6:02:f6:fb:90:d9:
e8:70:f6:d1:ed:f1:d1:99:17:c4:61:b8:be:cc:eb:1a:9f:3e:
40:25:3f:71:5d:5c:a5:9e:8e:14:86:c0:eb:93:ac:e4:6a:e5:
c3:b0:23:bd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMR2cYnlHCw/B8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
MmQ1ZTgxMGUtZmQ2MC00ZjQxLWI1YWQtZjAwY2VhOWVlNTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifZ+SmhYLRu9SoytHWDb6o6YvP9j3I4hmwM1
/QzQ/O1sElpRRyDJdYRkMOlkvSGUzsVUPQ33u7M0i4kizumjeJoMjYXg0JsefU+u
3Qd5PbHjscRYppOANUGuC5B2UP191w+Z4XBMcNmwRmnbFE/VlNBAstbb8bAfkmvV
74jF2P8VTBgtdHC9HFi6GQxaZqC1J94PMuQP/uMcqb1uoX4a8RZdijiPd3NDJzaX
6lXtOfHzl0/7INbsp9IAEWdvu9w+fhcNshYqtYxl5RGVzktoG2YQXrTfwaYo/SWg
PpiY7QEx0USy/y2aHnIlkJvlHsneM8O7yaIwqiWLXqMCn0f0CwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDS6aif2qt/Ao8/IXxlZJ+UgGmArMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTYyYjgyMzMtNDVkOC0z
ZWM5LWIwOTEtMjRmNTY3OGM5ZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCXeboqmyqEqBRNEanz/8rIxT9fxz+D8LqlMiu/GqXaSs58wN3BzHau
AjOsV3wova+yuOsFmmhaXMJHYD2ulBiUHY8UvzfTcgDxCAvOsMr1dVB1wBR+hU0i
BmSs0+GfOQWHzIonqxkc7vJZNNTX0zQjyGqZyuLylH+sXpV3aWSDvHEI7nCqC8U9
Fl7Hlq2vmZua/U2sSEl4sBD8Xl7GThJL1fhqhX0P4VRz40Fwh7RtWjfkHtSgP650
B0pSahu/VYlmWdZJMWP0Bcq7Ic2JzdU9q0/GAvb7kNnocPbR7fHRmRfEYbi+zOsa
nz5AJT9xXVylno4UhsDrk6zkauXDsCO9
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:45 2025 by rpki-client