Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c707694f-a42c-31b8-800d-5e36cc4b0fa1.roa
File: c707694f-a42c-31b8-800d-5e36cc4b0fa1.roa (raw, json)
Hash identifier: Z1SfetHFnYVyRKD6fxv9JUBxYaxY4AUoIdUPj7QiKIc=
Subject key identifier: 88:C3:1A:83:BC:E0:A0:EA:77:5C:CC:E7:6A:FE:F1:AF:A2:6F:F5:33
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B28FF1755436C0849CE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c707694f-a42c-31b8-800d-5e36cc4b0fa1.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 20431
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:28:ff:17:55:43:6c:08:49:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=1521eeda-a559-42a6-9f35-e5743ebcde76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:a6:61:d2:47:bf:d2:93:ba:46:83:b8:3d:
cb:e8:a6:c3:34:58:a9:8d:cc:db:2b:ee:74:fc:e7:
a5:12:fe:b0:34:7d:87:88:f1:62:52:4c:43:1e:da:
59:58:ba:72:90:6d:6e:12:f7:7e:fa:96:d9:7a:c8:
5b:cc:83:dc:b8:b4:2e:e5:21:5a:7f:57:d7:f3:64:
42:de:d3:fb:e0:66:cb:ce:48:8a:72:29:4a:c8:52:
d9:96:1c:45:16:b5:d6:87:b2:61:90:0d:69:03:aa:
54:d1:b5:f2:cc:48:b1:4b:92:64:56:97:d7:e6:ad:
ca:ea:b6:83:44:cc:ed:20:8c:86:f2:cc:ac:95:79:
47:e4:de:42:4d:7c:5e:a2:bd:3d:0b:52:20:34:fc:
c1:5e:dc:93:63:86:41:98:ee:ca:3a:50:9f:16:87:
7e:e3:ac:7d:ed:51:f2:ea:db:94:f4:64:30:e3:dc:
80:92:56:92:3b:99:73:71:70:38:95:ce:7e:e7:73:
58:bf:fc:3f:26:1a:0f:9d:13:1e:1d:8f:bb:4e:36:
4c:43:7d:fe:d2:e4:ab:a1:eb:6d:2a:99:1d:1a:2a:
64:61:cd:67:65:28:0d:61:79:9a:bb:37:b4:05:44:
cd:38:0a:d0:c0:74:e9:a2:00:fe:d6:ec:be:bf:75:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:1A:83:BC:E0:A0:EA:77:5C:CC:E7:6A:FE:F1:AF:A2:6F:F5:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c707694f-a42c-31b8-800d-5e36cc4b0fa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:d6:6d:1e:74:95:04:d7:5b:8b:a8:fc:e7:da:18:5d:2e:0a:
65:71:a7:39:ba:a6:5d:87:e9:4d:52:bb:13:2d:c5:86:5f:0c:
77:4d:a0:f0:be:ef:87:9f:2b:9d:6b:cd:94:08:40:d4:13:d6:
e0:72:49:39:15:e4:04:05:5a:b4:b6:1d:18:8a:07:d2:f8:53:
f2:cf:26:a3:ec:25:1f:63:96:50:c1:03:be:c9:2f:63:ee:85:
d8:13:5f:17:7d:bb:59:07:ac:49:f1:82:77:8b:ea:51:f7:c2:
f3:45:ed:d2:1a:1f:2c:13:18:12:18:5c:53:84:08:56:df:50:
be:36:0c:74:8a:55:2f:54:0f:6b:b5:e6:dd:38:8c:89:2d:5d:
95:f0:ae:67:7c:7b:fb:cb:7e:64:71:98:fe:85:5d:89:d7:5c:
ea:8b:f3:96:06:db:8e:57:ce:31:6c:79:e7:f4:f0:00:47:98:
6b:12:f4:18:7b:a1:0f:65:3c:ed:b0:4f:29:70:e4:98:a2:e4:
44:f3:a0:04:78:e7:20:fb:59:e4:67:d4:e9:e9:c0:8d:6b:25:
bc:11:e5:7e:5e:79:fb:5d:85:c1:2d:b2:e3:95:bb:dd:d3:d0:
df:37:5e:1e:ff:70:33:16:86:55:47:d6:00:19:6f:90:0c:bd:
5b:f4:da:b3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEh0iyj/F1VDbAhJzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
MTUyMWVlZGEtYTU1OS00MmE2LTlmMzUtZTU3NDNlYmNkZTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGOmYdJHv9KTukaDuD3L6KbDNFipjczbK+50
/OelEv6wNH2HiPFiUkxDHtpZWLpykG1uEvd++pbZeshbzIPcuLQu5SFaf1fX82RC
3tP74GbLzkiKcilKyFLZlhxFFrXWh7JhkA1pA6pU0bXyzEixS5JkVpfX5q3K6raD
RMztIIyG8syslXlH5N5CTXxeor09C1IgNPzBXtyTY4ZBmO7KOlCfFod+46x97VHy
6tuU9GQw49yAklaSO5lzcXA4lc5+53NYv/w/JhoPnRMeHY+7TjZMQ33+0uSroett
KpkdGipkYc1nZSgNYXmauze0BUTNOArQwHTpogD+1uy+v3XJVQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIjDGoO84KDqd1zM52r+8a+ib/UzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzcwNzY5NGYtYTQyYy0z
MWI4LTgwMGQtNWUzNmNjNGIwZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCT1m0edJUE11uLqPzn2hhdLgplcac5uqZdh+lNUrsTLcWGXwx3TaDw
vu+Hnyuda82UCEDUE9bgckk5FeQEBVq0th0YigfS+FPyzyaj7CUfY5ZQwQO+yS9j
7oXYE18XfbtZB6xJ8YJ3i+pR98LzRe3SGh8sExgSGFxThAhW31C+Ngx0ilUvVA9r
tebdOIyJLV2V8K5nfHv7y35kcZj+hV2J11zqi/OWBtuOV84xbHnn9PAAR5hrEvQY
e6EPZTztsE8pcOSYouRE86AEeOcg+1nkZ9Tp6cCNayW8EeV+Xnn7XYXBLbLjlbvd
09DfN14e/3AzFoZVR9YAGW+QDL1b9Nqz
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:00:53 2025 by rpki-client