Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff34420-7bc2-3ef4-851a-0ceb70f0b3e3.roa
File: bff34420-7bc2-3ef4-851a-0ceb70f0b3e3.roa (raw, json)
Hash identifier: 1MiV1a8nxIa4oxQ/pG7LXC7PXILl+gY/0ad1JAd1N4g=
Subject key identifier: AB:69:47:05:EE:BD:17:2A:EE:58:C9:92:66:7A:EC:97:CF:5D:18:1C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F4C7EC368B4D8D1365E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff34420-7bc2-3ef4-851a-0ceb70f0b3e3.roa
Signing time: Thu 19 Dec 2024 13:45:09 +0000
ROA not before: Thu 19 Dec 2024 13:45:09 +0000
ROA not after: Wed 19 Mar 2025 12:45:09 +0000
asID: 396614
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f4:c7:ec:36:8b:4d:8d:13:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:09 2024 GMT
Not After : Mar 19 12:45:09 2025 GMT
Subject: CN=fc76d286-eebb-4798-aa03-2d9289add2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6d:3a:2b:99:d8:21:33:a3:22:f7:68:4b:dc:
2a:d5:88:27:86:f7:69:16:91:ce:67:ee:36:af:f1:
e3:ea:5e:e7:09:fc:fa:bf:df:31:ab:2a:27:6e:1d:
6a:3f:e8:c9:a8:18:ea:dc:4c:21:46:99:4f:27:08:
60:c3:67:25:da:72:09:1c:27:9c:0d:f3:2a:97:13:
74:a0:cb:fc:28:e4:87:3f:0c:82:60:5f:22:5d:60:
01:48:0f:5a:4f:ab:0f:6c:a2:d3:92:c8:64:e8:f8:
bb:1a:e7:b0:ad:45:86:6e:da:b6:39:f1:ad:e8:c8:
98:f8:74:a8:54:f4:b5:ae:65:a6:a3:16:3f:16:92:
3b:39:a2:99:5e:09:8e:38:e5:c3:14:66:29:23:94:
62:61:f0:fa:a4:38:83:c5:3a:1e:2f:f7:dc:c7:af:
c3:cd:79:7e:be:33:a4:36:a0:8e:ec:37:b3:f7:2c:
95:c3:1d:a5:a6:db:09:93:30:bc:d9:4b:c2:29:ba:
78:95:fc:7e:a2:c8:b3:a4:0c:31:41:1f:b8:7b:b6:
d1:b0:c4:1e:45:cc:f9:ae:b9:64:f6:4f:ba:33:ca:
d6:26:86:ba:16:e0:2a:ae:11:81:e1:87:c1:a2:4a:
50:0a:05:e7:b1:da:f3:ea:f9:c3:b4:8e:af:59:5b:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:69:47:05:EE:BD:17:2A:EE:58:C9:92:66:7A:EC:97:CF:5D:18:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff34420-7bc2-3ef4-851a-0ceb70f0b3e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:7d:44:d5:74:9a:ab:de:a5:a5:46:1b:82:e3:a1:1a:b3:7a:
00:b0:ca:73:ca:42:cb:55:38:66:9d:89:78:ac:70:6c:2a:21:
6b:1f:32:bd:0b:84:13:28:68:98:50:eb:48:c4:00:13:2b:96:
6a:3a:66:e6:02:38:14:c2:79:74:b2:92:e4:83:47:0c:fc:c2:
0c:92:1f:e2:e7:2b:cd:e8:67:99:d5:96:32:bd:4d:39:86:87:
90:6f:91:a2:20:e5:db:17:2a:51:0d:4a:a0:1b:0d:97:af:23:
22:5f:97:e1:00:ec:64:db:e6:d0:0b:d0:c5:10:0e:81:fe:a4:
cc:c8:a5:dc:90:cb:2e:f0:a8:6b:e0:b6:b1:8e:be:aa:ed:bc:
01:4c:47:81:50:c6:f9:eb:df:fc:21:8a:59:d8:63:39:49:25:
bd:34:5b:e1:53:fa:3c:b0:09:85:21:9d:aa:8d:45:17:e3:12:
ec:ec:06:56:e5:78:80:4f:7d:2e:0e:a3:11:7b:20:2b:ee:33:
ab:b2:c8:96:46:70:72:be:a7:e4:5e:bd:e9:47:14:13:c2:84:
c2:9b:9a:78:1a:c0:cb:22:1d:d6:26:3f:a2:59:b4:ca:eb:24:
fa:d8:3c:70:a2:7a:52:e8:10:db:b2:08:72:8e:d0:a2:9d:cd:
50:de:fc:f8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhCQvTH7DaLTY0TZeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUwOVoXDTI1MDMxOTEyNDUwOVowLzEtMCsGA1UEAxMk
ZmM3NmQyODYtZWViYi00Nzk4LWFhMDMtMmQ5Mjg5YWRkMmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG06K5nYITOjIvdoS9wq1YgnhvdpFpHOZ+42
r/Hj6l7nCfz6v98xqyonbh1qP+jJqBjq3EwhRplPJwhgw2cl2nIJHCecDfMqlxN0
oMv8KOSHPwyCYF8iXWABSA9aT6sPbKLTkshk6Pi7GuewrUWGbtq2OfGt6MiY+HSo
VPS1rmWmoxY/FpI7OaKZXgmOOOXDFGYpI5RiYfD6pDiDxToeL/fcx6/DzXl+vjOk
NqCO7Dez9yyVwx2lptsJkzC82UvCKbp4lfx+osizpAwxQR+4e7bRsMQeRcz5rrlk
9k+6M8rWJoa6FuAqrhGB4YfBokpQCgXnsdrz6vnDtI6vWVsiqQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKtpRwXuvRcq7ljJkmZ67JfPXRgcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZmMzQ0MjAtN2JjMi0z
ZWY0LTg1MWEtMGNlYjcwZjBiM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYfUTVdJqr3qWlRhuC46Eas3oAsMpzykLLVThmnYl4rHBsKiFrHzK9
C4QTKGiYUOtIxAATK5ZqOmbmAjgUwnl0spLkg0cM/MIMkh/i5yvN6GeZ1ZYyvU05
hoeQb5GiIOXbFypRDUqgGw2XryMiX5fhAOxk2+bQC9DFEA6B/qTMyKXckMsu8Khr
4Laxjr6q7bwBTEeBUMb569/8IYpZ2GM5SSW9NFvhU/o8sAmFIZ2qjUUX4xLs7AZW
5XiAT30uDqMReyAr7jOrssiWRnByvqfkXr3pRxQTwoTCm5p4GsDLIh3WJj+iWbTK
6yT62DxwonpS6BDbsghyjtCinc1Q3vz4
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:23 2025 by rpki-client