Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bc4969c-e3c3-3eae-9f5c-d6e1e8505459.roa
File: 9bc4969c-e3c3-3eae-9f5c-d6e1e8505459.roa (raw, json)
Hash identifier: sBKsbd1nUWsaXLY0VNRe8vZzsl7Zid3KXljRb+/Gvdo=
Subject key identifier: 46:EC:50:D1:E3:06:4F:B5:F7:EE:40:A7:1B:E1:37:22:44:CD:0B:83
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484D759DE5D371959DB94D0B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bc4969c-e3c3-3eae-9f5c-d6e1e8505459.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 396577
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:9d:e5:d3:71:95:9d:b9:4d:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=96f52058-c21d-410e-b110-81c6e57be6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:13:e9:9d:c8:3a:3f:8e:35:83:a4:67:36:
a1:ba:57:4a:dc:12:3d:d1:02:c3:4d:3f:68:4b:b1:
ef:d4:04:c5:5e:35:4d:af:ff:96:64:52:5b:d3:f9:
be:36:fb:4c:7d:b9:c6:29:32:fd:29:18:bf:69:6b:
6b:86:5e:e7:cb:0b:21:fd:66:da:cc:45:0c:ca:56:
9b:2b:58:cc:8b:a1:b6:d2:f2:dd:fb:f3:a7:26:95:
ef:e9:f5:c0:49:8c:6c:48:2e:91:05:3d:23:fc:15:
a5:22:e4:d1:02:14:c0:4a:3b:1b:69:80:32:1c:5a:
81:b2:3c:26:ee:cd:11:59:4c:8d:63:f4:ba:8e:7a:
11:48:82:6f:91:24:cf:73:5f:a6:f0:bc:87:a0:ef:
16:40:0a:fd:dd:dd:1a:d2:95:0a:47:1d:34:b8:78:
5d:f2:39:a7:58:a1:67:38:bf:7f:9e:b0:da:4a:ab:
e9:61:1e:0d:f4:e0:ac:6a:74:c1:a9:2f:3d:f4:f8:
ea:d3:d5:bb:fc:70:d1:0b:2b:24:47:ce:d6:93:9c:
49:48:1e:28:5c:95:3e:8a:df:02:ea:ba:a4:92:02:
06:22:37:96:dd:a4:51:d2:f3:8d:57:38:70:90:f7:
e7:9f:de:05:75:a9:c4:a1:c1:26:20:b6:24:0e:6a:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EC:50:D1:E3:06:4F:B5:F7:EE:40:A7:1B:E1:37:22:44:CD:0B:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bc4969c-e3c3-3eae-9f5c-d6e1e8505459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:28:01:71:da:0d:72:cd:36:15:37:ae:e4:bc:41:2f:9a:92:
ed:df:46:a5:4c:dd:da:21:f6:dd:d0:10:a9:fd:14:7a:81:a0:
60:70:3c:b6:6d:61:3f:7f:0c:d8:5e:df:18:4b:5f:ae:47:d2:
0d:da:b1:95:f1:f2:ee:79:a6:80:5a:de:ef:e1:36:cb:5e:97:
49:b9:1c:fb:d0:d0:b7:6d:da:1d:35:94:6d:d3:71:dd:df:3c:
ac:a2:eb:ec:fc:7c:42:49:4b:57:46:c3:ed:4b:af:69:d9:41:
ab:32:67:8f:67:cb:c8:43:0a:f4:0e:44:87:90:ca:15:32:bb:
02:fd:18:25:34:f3:9b:55:f3:7f:4c:13:52:8a:b5:02:f8:23:
64:48:03:f0:b7:cc:c3:1c:a0:c4:00:c3:59:13:1f:36:f0:17:
31:95:a7:10:8a:da:ca:a7:f9:63:93:13:fb:45:ee:e1:9d:3a:
e4:d4:e4:7b:d8:84:d2:27:7a:88:f1:00:9e:be:0a:00:66:68:
2b:d0:4a:98:4a:2f:a6:71:34:5b:de:31:06:c3:22:96:16:1b:
aa:a1:07:f8:56:03:1d:97:f9:81:47:08:9c:b5:de:23:aa:e0:
a6:9d:0f:73:3c:31:44:4c:5c:f3:d9:96:dd:00:76:cf:8f:36:
ca:c0:9e:62
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhNdZ3l03GVnblNC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
OTZmNTIwNTgtYzIxZC00MTBlLWIxMTAtODFjNmU1N2JlNmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI4T6Z3IOj+ONYOkZzahuldK3BI90QLDTT9o
S7Hv1ATFXjVNr/+WZFJb0/m+NvtMfbnGKTL9KRi/aWtrhl7nywsh/WbazEUMylab
K1jMi6G20vLd+/OnJpXv6fXASYxsSC6RBT0j/BWlIuTRAhTASjsbaYAyHFqBsjwm
7s0RWUyNY/S6jnoRSIJvkSTPc1+m8LyHoO8WQAr93d0a0pUKRx00uHhd8jmnWKFn
OL9/nrDaSqvpYR4N9OCsanTBqS899Pjq09W7/HDRCyskR87Wk5xJSB4oXJU+it8C
6rqkkgIGIjeW3aRR0vONVzhwkPfnn94FdanEocEmILYkDmru6wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEbsUNHjBk+19+5ApxvhNyJEzQuDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWJjNDk2OWMtZTNjMy0z
ZWFlLTlmNWMtZDZlMWU4NTA1NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA7KAFx2g1yzTYVN67kvEEvmpLt30alTN3aIfbd0BCp/RR6gaBgcDy2
bWE/fwzYXt8YS1+uR9IN2rGV8fLueaaAWt7v4TbLXpdJuRz70NC3bdodNZRt03Hd
3zysouvs/HxCSUtXRsPtS69p2UGrMmePZ8vIQwr0DkSHkMoVMrsC/RglNPObVfN/
TBNSirUC+CNkSAPwt8zDHKDEAMNZEx828BcxlacQitrKp/ljkxP7Re7hnTrk1OR7
2ITSJ3qI8QCevgoAZmgr0EqYSi+mcTRb3jEGwyKWFhuqoQf4VgMdl/mBRwictd4j
quCmnQ9zPDFETFzz2ZbdAHbPjzbKwJ5i
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:05 2025 by rpki-client