Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ec009-255c-3ee7-9e04-756afbad6161.roa
File: aa2ec009-255c-3ee7-9e04-756afbad6161.roa (raw, json)
Hash identifier: AsDvQ343iYnbZVnoXz+HQ/nCpx6dGN0jWVN4bWLVWWs=
Subject key identifier: F1:92:50:66:1B:F2:96:7B:D3:4A:CC:46:14:FA:54:F2:6D:F8:54:DC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242E781817F007FC83BF140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ec009-255c-3ee7-9e04-756afbad6161.roa
Signing time: Thu 19 Dec 2024 13:45:03 +0000
ROA not before: Thu 19 Dec 2024 13:45:03 +0000
ROA not after: Wed 19 Mar 2025 12:45:03 +0000
asID: 36616
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:e7:81:81:7f:00:7f:c8:3b:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:03 2024 GMT
Not After : Mar 19 12:45:03 2025 GMT
Subject: CN=3a73fb1a-fdb1-4cb0-a9ed-67511e4efac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:fa:ea:ad:8c:b5:ec:38:78:da:42:ab:02:
fc:17:0d:f4:e4:a3:8e:2d:01:9c:a7:d9:ea:db:88:
6f:69:63:f8:08:05:9c:cb:eb:d9:a2:6b:80:34:76:
81:fc:ec:f3:3d:9c:ba:bd:94:32:8e:5d:a5:f8:a2:
60:99:dd:56:a4:5e:4d:8e:8f:15:09:ca:89:bb:fd:
2d:cd:5f:e1:ce:bb:4b:d4:c0:fe:64:f7:55:72:6c:
e7:34:c8:e0:cb:ee:e5:88:d0:b8:d6:a5:f1:8a:6d:
35:b5:ff:03:7a:a4:8b:e8:6f:d0:90:28:80:53:fb:
6f:d3:c7:81:36:c0:a8:25:aa:d2:c9:e5:64:e4:2b:
1e:17:9a:6d:b1:70:fb:95:87:05:16:0e:ba:0d:97:
bc:56:16:8b:7b:d1:01:40:ac:84:fc:16:4e:22:8d:
b3:30:f4:72:bc:44:e6:86:84:79:65:36:61:46:ca:
c9:a7:18:97:33:06:a4:ef:af:02:25:5e:e2:f9:4e:
3f:f6:9f:96:5f:6f:e4:e8:dc:fe:5a:39:fd:5d:44:
e5:76:4c:0b:bb:a5:72:7f:0f:3d:1e:7e:78:c6:86:
a6:31:93:af:89:79:c1:76:96:70:aa:33:a1:ef:06:
3d:b2:23:5f:dc:29:3c:6e:49:08:7c:1d:7b:f4:d2:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:50:66:1B:F2:96:7B:D3:4A:CC:46:14:FA:54:F2:6D:F8:54:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ec009-255c-3ee7-9e04-756afbad6161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:f7:97:ae:be:5d:2a:7f:82:58:a6:ff:b2:45:38:a3:27:48:
0b:24:50:53:1e:13:fa:4b:57:58:ae:48:89:00:b4:09:95:b8:
b4:88:43:03:d1:e1:d9:64:4c:74:c6:13:3d:a2:c9:5e:9a:ba:
a2:42:56:18:ca:8d:93:47:97:33:6d:2c:2c:d8:5b:74:50:b4:
c4:3e:40:88:a2:59:ea:67:05:45:0c:8a:21:83:60:ba:df:f5:
b0:32:da:0b:28:f8:3c:28:af:97:b9:5d:5e:44:47:77:2e:7e:
d9:9f:63:38:d7:db:cd:f4:07:8f:2e:cd:f2:60:1f:25:5c:d3:
f7:96:4f:41:57:fb:cb:b7:6b:a4:d5:55:bf:43:13:9d:75:0c:
4b:30:56:6b:09:6f:d8:29:9c:b1:c2:6f:72:f6:c2:57:94:fd:
e8:00:b6:04:d4:f4:80:1f:5a:44:1c:5e:a9:65:96:7f:3c:c7:
13:35:d9:3a:55:c5:51:45:ae:c4:76:fa:fb:54:5e:a0:77:24:
d3:96:89:ae:fc:22:ed:57:d5:97:87:7b:02:8e:6d:d7:89:19:
ae:05:86:88:a0:ea:c9:97:be:04:c2:eb:96:01:77:ba:cd:c9:
35:fa:7d:7d:3d:7e:44:22:7a:09:e0:bc:b4:a0:10:6f:56:3a:
e0:1c:79:1f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhCQueBgX8Af8g78UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUwM1oXDTI1MDMxOTEyNDUwM1owLzEtMCsGA1UEAxMk
M2E3M2ZiMWEtZmRiMS00Y2IwLWE5ZWQtNjc1MTFlNGVmYWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUL66q2Mtew4eNpCqwL8Fw305KOOLQGcp9nq
24hvaWP4CAWcy+vZomuANHaB/OzzPZy6vZQyjl2l+KJgmd1WpF5Njo8VCcqJu/0t
zV/hzrtL1MD+ZPdVcmznNMjgy+7liNC41qXxim01tf8DeqSL6G/QkCiAU/tv08eB
NsCoJarSyeVk5CseF5ptsXD7lYcFFg66DZe8VhaLe9EBQKyE/BZOIo2zMPRyvETm
hoR5ZTZhRsrJpxiXMwak768CJV7i+U4/9p+WX2/k6Nz+Wjn9XUTldkwLu6Vyfw89
Hn54xoamMZOviXnBdpZwqjOh7wY9siNf3Ck8bkkIfB179NIbdQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPGSUGYb8pZ700rMRhT6VPJt+FTcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWEyZWMwMDktMjU1Yy0z
ZWU3LTllMDQtNzU2YWZiYWQ2MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB995euvl0qf4JYpv+yRTijJ0gLJFBTHhP6S1dYrkiJALQJlbi0iEMD
0eHZZEx0xhM9oslemrqiQlYYyo2TR5czbSws2Ft0ULTEPkCIolnqZwVFDIohg2C6
3/WwMtoLKPg8KK+XuV1eREd3Ln7Zn2M419vN9AePLs3yYB8lXNP3lk9BV/vLt2uk
1VW/QxOddQxLMFZrCW/YKZyxwm9y9sJXlP3oALYE1PSAH1pEHF6pZZZ/PMcTNdk6
VcVRRa7Edvr7VF6gdyTTlomu/CLtV9WXh3sCjm3XiRmuBYaIoOrJl74EwuuWAXe6
zck1+n19PX5EInoJ4Ly0oBBvVjrgHHkf
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:06 2025 by rpki-client