Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3dd8a3-4198-37c0-b897-32fc163ae258.roa
File: cc3dd8a3-4198-37c0-b897-32fc163ae258.roa (raw, json)
Hash identifier: s1UhKTmdj1OsVHwICZEkxDLBL6YAZjbUKtmrvk9n+x0=
Subject key identifier: 74:5B:FD:22:C7:17:7F:AA:37:4C:81:07:63:A0:1A:9C:1B:96:DA:9D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424307354EEAFB312BE20B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3dd8a3-4198-37c0-b897-32fc163ae258.roa
Signing time: Thu 19 Dec 2024 13:45:17 +0000
ROA not before: Thu 19 Dec 2024 13:45:17 +0000
ROA not after: Wed 19 Mar 2025 12:45:17 +0000
asID: 396562
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:07:35:4e:ea:fb:31:2b:e2:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:17 2024 GMT
Not After : Mar 19 12:45:17 2025 GMT
Subject: CN=8baff3ce-897a-4567-8616-1764016df409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:57:f9:63:42:88:f4:99:d0:58:32:14:5d:
bf:1a:e9:3f:a0:18:99:e3:02:54:74:14:71:2b:01:
89:8b:7e:4a:74:fb:64:fc:c3:58:4c:eb:9e:9e:a4:
07:65:ed:10:bb:56:60:7e:42:f6:d7:2c:1f:9d:fd:
5d:84:d1:99:42:ae:e9:64:03:af:31:17:d2:b8:a5:
29:28:c1:4d:bb:0a:48:4c:d2:9f:30:99:92:c6:07:
c5:37:fb:28:12:75:ce:0b:73:2c:05:1a:9a:8f:68:
54:ae:3e:41:80:6e:0b:8f:23:13:fa:df:05:05:68:
c6:da:4e:9a:d7:75:38:a2:5a:69:4f:8d:b2:3d:50:
05:d2:5f:c0:b3:f8:ef:f1:6e:45:e7:66:81:17:0a:
8a:34:82:94:96:01:dd:22:37:1a:1e:0b:7a:b5:28:
26:3d:d2:ba:f9:50:77:66:69:97:9d:74:0d:78:c3:
bf:4e:f2:aa:73:b6:23:9b:13:b9:17:10:75:67:ca:
73:8d:30:e5:bb:53:91:ec:93:4d:bf:97:fd:37:96:
83:8d:75:ea:8d:5c:1a:c0:2b:b4:a6:4c:5d:fa:4f:
be:3d:96:23:f3:eb:3c:6a:82:27:aa:d2:d0:cc:ec:
60:3b:02:35:99:fc:49:1e:14:79:c6:58:8d:e6:79:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:FD:22:C7:17:7F:AA:37:4C:81:07:63:A0:1A:9C:1B:96:DA:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3dd8a3-4198-37c0-b897-32fc163ae258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:ec:9e:36:21:62:f0:1f:9b:bd:bb:da:bb:21:e9:a3:74:4e:
51:fa:d9:f3:76:cc:86:85:81:17:48:c2:07:65:5e:4d:99:0e:
03:3b:1c:68:87:f5:5f:0b:27:34:be:81:99:78:80:ef:a8:25:
11:f9:12:36:23:d9:bd:63:a8:44:41:92:63:f6:8d:8c:e4:21:
17:38:2f:25:ed:13:52:3a:a0:9a:8e:35:7e:b2:7a:ef:c7:09:
fb:7a:78:90:19:8b:cf:99:a9:31:ba:c7:a9:2c:e7:72:42:39:
98:c9:c3:09:79:b4:4c:a7:8e:c8:bd:76:fe:ab:2d:7d:34:0a:
fd:f7:54:35:f3:be:b4:f1:0e:98:0d:67:b3:fd:7d:e8:41:45:
23:74:5f:68:7f:6f:15:3d:c2:ee:12:25:c4:99:36:9f:49:8b:
4f:cf:dd:91:1c:e4:ed:7c:07:c8:fd:1a:02:9b:79:b4:71:37:
87:54:99:8f:0e:89:b7:58:b0:41:b9:1f:7f:79:dc:47:f2:50:
f5:61:2e:97:f6:17:e2:c2:e2:83:0a:e8:d3:e4:71:eb:e7:97:
ed:96:e8:c2:01:4a:e4:00:9a:8e:bd:bc:e8:45:7f:b1:c6:3b:
67:3f:e3:68:43:0a:fb:c5:52:f8:71:a0:92:ab:1a:e8:c9:22:
0b:ff:68:24
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhCQwc1Tur7MSviC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUxN1oXDTI1MDMxOTEyNDUxN1owLzEtMCsGA1UEAxMk
OGJhZmYzY2UtODk3YS00NTY3LTg2MTYtMTc2NDAxNmRmNDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAlX+WNCiPSZ0FgyFF2/Guk/oBiZ4wJUdBRx
KwGJi35KdPtk/MNYTOuenqQHZe0Qu1ZgfkL21ywfnf1dhNGZQq7pZAOvMRfSuKUp
KMFNuwpITNKfMJmSxgfFN/soEnXOC3MsBRqaj2hUrj5BgG4LjyMT+t8FBWjG2k6a
13U4olppT42yPVAF0l/As/jv8W5F52aBFwqKNIKUlgHdIjcaHgt6tSgmPdK6+VB3
ZmmXnXQNeMO/TvKqc7YjmxO5FxB1Z8pzjTDlu1OR7JNNv5f9N5aDjXXqjVwawCu0
pkxd+k++PZYj8+s8aoInqtLQzOxgOwI1mfxJHhR5xliN5nkvqQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHRb/SLHF3+qN0yBB2OgGpwbltqdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2MzZGQ4YTMtNDE5OC0z
N2MwLWI4OTctMzJmYzE2M2FlMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBS7J42IWLwH5u9u9q7IemjdE5R+tnzdsyGhYEXSMIHZV5NmQ4DOxxo
h/VfCyc0voGZeIDvqCUR+RI2I9m9Y6hEQZJj9o2M5CEXOC8l7RNSOqCajjV+snrv
xwn7eniQGYvPmakxusepLOdyQjmYycMJebRMp47IvXb+qy19NAr991Q187608Q6Y
DWez/X3oQUUjdF9of28VPcLuEiXEmTafSYtPz92RHOTtfAfI/RoCm3m0cTeHVJmP
Dom3WLBBuR9/edxH8lD1YS6X9hfiwuKDCujT5HHr55ftlujCAUrkAJqOvbzoRX+x
xjtnP+NoQwr7xVL4caCSqxroySIL/2gk
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:16 2025 by rpki-client