Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d06aeca5-d1b7-3294-9009-61b0a4ae8e1f.roa
File: d06aeca5-d1b7-3294-9009-61b0a4ae8e1f.roa (raw, json)
Hash identifier: wf0MH4l4dlXUIzA8PH0TeI1YmfmKgzCNYl+cwekRBTA=
Subject key identifier: 64:DA:6E:9D:FF:5F:1C:1C:0A:09:41:52:2C:0D:36:5E:05:33:4D:24
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B37E4DC5C4C0106829CA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d06aeca5-d1b7-3294-9009-61b0a4ae8e1f.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 36626
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:37:e4:dc:5c:4c:01:06:82:9c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=8274e655-f604-4c41-9870-2e6a0ff2c98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:4c:9c:18:b5:d6:95:ab:f8:d4:af:d6:a0:
05:62:55:f3:37:c6:86:ff:34:c8:c3:57:ef:e2:9a:
ec:ca:ae:9f:76:dd:82:d5:a8:dd:e7:1d:fd:c2:07:
98:80:c9:06:c5:f9:d2:9d:a8:84:4a:dd:44:2e:47:
b9:3d:1b:00:cb:e5:69:25:11:f4:6b:91:0c:e0:b1:
78:c5:dc:b2:a7:cc:b0:5f:31:19:f1:b6:9d:01:e5:
7c:8f:f2:4d:cd:6d:fa:d6:e2:cf:41:c8:49:30:3d:
c7:77:1e:6f:5f:60:a6:a3:3a:e2:70:64:1a:2e:af:
67:00:8a:56:19:bd:74:42:09:7e:33:5a:51:42:a3:
aa:38:c9:46:e6:65:dc:7a:96:4d:7b:a0:5c:8f:7a:
59:68:ea:ca:50:a5:a1:60:ec:b3:4d:7e:74:fe:b1:
f5:04:39:2f:84:34:ed:1a:7a:f8:7f:70:98:0c:2c:
cd:42:05:b9:2a:e1:8a:b6:6a:f2:c0:33:59:b3:1a:
89:8e:39:8f:66:80:c6:55:3a:3c:f6:7f:ff:a0:0b:
75:a9:5d:12:54:0c:18:85:3e:ee:fb:ba:ff:91:d1:
da:5e:db:c2:fe:59:60:30:10:c2:71:ad:dc:59:e4:
61:06:cf:a5:09:f7:77:06:d3:ec:06:91:d2:0f:24:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:6E:9D:FF:5F:1C:1C:0A:09:41:52:2C:0D:36:5E:05:33:4D:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d06aeca5-d1b7-3294-9009-61b0a4ae8e1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:bf:59:46:84:54:80:f3:c2:2b:c9:80:12:3c:5e:41:3f:d6:
ee:c9:6f:54:e7:08:3c:bc:b0:c4:67:cc:27:81:ae:78:f7:2d:
ce:3a:28:bb:60:50:39:7e:ed:15:24:b0:0e:53:17:57:a7:88:
0b:2b:86:d4:6e:f2:15:0e:c1:26:1d:dc:8c:62:37:4f:87:a7:
51:79:fd:5e:71:44:22:ff:a2:ab:16:02:00:4c:26:10:10:3d:
a3:9d:c8:a3:7c:0e:71:6d:1a:56:43:f6:db:44:2f:38:ae:6c:
fa:59:bb:e6:c9:bb:60:50:ff:4b:2a:85:7c:3c:78:b0:01:49:
bb:41:1a:f3:71:45:67:d7:4e:06:09:4f:98:56:0d:7e:b6:57:
83:4c:88:ad:32:d2:90:2a:04:f2:c2:f7:f2:33:98:70:02:aa:
80:4b:b4:1d:d8:30:33:36:33:c4:b2:da:6e:ca:61:af:cf:b7:
29:c8:7f:a4:75:ba:38:f5:51:40:b2:ad:68:83:98:7c:f5:93:
f9:89:dc:ba:ea:97:be:64:f2:44:8a:8e:0b:73:57:ac:91:71:
9e:f4:02:9c:4a:f1:ec:14:40:23:e5:43:3a:98:0d:5f:e1:f2:
89:21:22:19:f2:3e:a2:3c:58:37:ac:54:67:64:11:52:10:72:
bc:22:b8:ca
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiaOzfk3FxMAQaCnKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ODI3NGU2NTUtZjYwNC00YzQxLTk4NzAtMmU2YTBmZjJjOThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYpMnBi11pWr+NSv1qAFYlXzN8aG/zTIw1fv
4prsyq6fdt2C1ajd5x39wgeYgMkGxfnSnaiESt1ELke5PRsAy+VpJRH0a5EM4LF4
xdyyp8ywXzEZ8badAeV8j/JNzW361uLPQchJMD3Hdx5vX2CmozricGQaLq9nAIpW
Gb10Qgl+M1pRQqOqOMlG5mXcepZNe6Bcj3pZaOrKUKWhYOyzTX50/rH1BDkvhDTt
Gnr4f3CYDCzNQgW5KuGKtmrywDNZsxqJjjmPZoDGVTo89n//oAt1qV0SVAwYhT7u
+7r/kdHaXtvC/llgMBDCca3cWeRhBs+lCfd3BtPsBpHSDyQ9TwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGTabp3/XxwcCglBUiwNNl4FM00kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDA2YWVjYTUtZDFiNy0z
Mjk0LTkwMDktNjFiMGE0YWU4ZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYv1lGhFSA88IryYASPF5BP9buyW9U5wg8vLDEZ8wnga549y3OOii7
YFA5fu0VJLAOUxdXp4gLK4bUbvIVDsEmHdyMYjdPh6dRef1ecUQi/6KrFgIATCYQ
ED2jncijfA5xbRpWQ/bbRC84rmz6WbvmybtgUP9LKoV8PHiwAUm7QRrzcUVn104G
CU+YVg1+tleDTIitMtKQKgTywvfyM5hwAqqAS7Qd2DAzNjPEstpuymGvz7cpyH+k
dbo49VFAsq1og5h89ZP5idy66pe+ZPJEio4Lc1eskXGe9AKcSvHsFEAj5UM6mA1f
4fKJISIZ8j6iPFg3rFRnZBFSEHK8IrjK
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:56:16 2025 by rpki-client