Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1302ecb-36d7-3d16-bd61-7811a4fceca9.roa
File: f1302ecb-36d7-3d16-bd61-7811a4fceca9.roa (raw, json)
Hash identifier: nDWLVMm0Y2JazdZHmlvqwJ021xBmfvOEQujSbO/flDI=
Subject key identifier: 2B:B9:84:A4:1E:FF:92:35:0A:42:98:41:65:2F:C3:AB:0B:50:93:78
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A246AA246EBAE71E1D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1302ecb-36d7-3d16-bd61-7811a4fceca9.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 19836
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a2:46:aa:24:6e:ba:e7:1e:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=a3c1eea4-88b5-4539-8a98-830f97d9fa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:dd:b5:86:1f:b2:e6:64:dd:d1:64:3d:31:
20:da:9f:02:d5:b8:fa:f6:f1:ac:7f:ac:ce:e9:3c:
5e:fb:4c:b7:f1:d8:0e:cf:c4:01:df:cf:6b:c7:08:
a6:f6:01:4a:7e:47:88:8e:e2:84:2b:7f:b4:80:00:
b0:0c:c9:f6:c3:ba:f9:db:05:b4:dc:90:3f:e5:7b:
73:43:80:30:ef:f0:a5:9e:70:77:21:e4:f2:0f:fa:
08:cb:2c:0e:23:ee:eb:56:1b:8f:f5:8c:78:af:84:
5e:04:93:6d:91:b2:87:e1:dc:18:49:10:98:42:f7:
19:ac:e7:65:b6:e7:ed:2e:4f:df:9a:6d:d1:14:b1:
09:d0:e3:01:b3:c6:20:96:23:10:8e:3e:cb:20:30:
19:d0:b9:9e:3c:1d:df:d5:57:3c:ce:25:a2:23:40:
c9:88:50:15:86:66:3c:28:ae:f8:85:c3:76:42:85:
96:65:ea:d6:97:0d:97:34:7b:5c:e6:d3:60:22:57:
e3:8f:f1:14:4f:af:2e:60:0d:fa:c3:ae:af:4e:43:
17:ee:6a:f4:cb:e4:14:05:a5:95:25:c2:3d:d6:78:
31:6e:d7:31:7e:39:3e:8c:3d:1f:2c:fb:cf:25:1f:
5b:73:a0:23:b6:51:e0:82:0c:81:e5:02:7d:68:26:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:84:A4:1E:FF:92:35:0A:42:98:41:65:2F:C3:AB:0B:50:93:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1302ecb-36d7-3d16-bd61-7811a4fceca9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:18:d3:e6:d5:26:fa:2e:40:2e:79:93:23:a7:dc:9f:fa:1e:
82:76:40:2d:4d:7d:68:87:16:4f:fb:9f:58:cf:29:08:b8:47:
17:31:24:30:79:17:92:aa:25:f1:a9:5f:ee:5f:e3:7b:ac:5e:
8f:b4:d8:37:f5:02:1c:7f:e0:91:e1:65:8e:79:56:b7:d2:90:
e4:32:32:94:04:65:fd:a6:c6:8e:08:96:d8:43:dc:59:14:b2:
4f:9c:fc:eb:09:e4:01:a4:57:4d:d0:2c:48:bb:c1:8d:06:71:
01:9a:8f:09:8e:08:92:1e:c2:ea:22:33:b2:96:b7:bd:c6:0d:
ea:53:24:fa:28:64:5e:65:3d:72:9b:f9:fd:6a:fe:ed:fa:d9:
f1:54:71:50:97:34:a4:68:4d:9b:1f:5e:4f:f2:66:89:90:97:
7f:a0:1c:f4:16:92:85:23:89:2a:fd:01:c4:f1:73:e0:93:18:
09:a9:4e:a6:3b:75:5c:66:9a:b2:0c:a6:e9:40:95:0c:8c:75:
27:28:f1:2b:e9:84:aa:3c:69:af:2d:4d:aa:74:c1:d0:4c:c9:
67:0e:b6:6f:33:fc:c5:73:61:a7:6d:8d:63:24:04:76:a9:c6:
cf:8c:f9:d3:5a:2b:f7:95:17:43:e6:eb:9d:54:a5:33:89:c5:
1e:0b:5e:9c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEheNaJGqiRuuuceHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
YTNjMWVlYTQtODhiNS00NTM5LThhOTgtODMwZjk3ZDlmYTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkzdtYYfsuZk3dFkPTEg2p8C1bj69vGsf6zO
6Txe+0y38dgOz8QB389rxwim9gFKfkeIjuKEK3+0gACwDMn2w7r52wW03JA/5Xtz
Q4Aw7/ClnnB3IeTyD/oIyywOI+7rVhuP9Yx4r4ReBJNtkbKH4dwYSRCYQvcZrOdl
tuftLk/fmm3RFLEJ0OMBs8YgliMQjj7LIDAZ0LmePB3f1Vc8ziWiI0DJiFAVhmY8
KK74hcN2QoWWZerWlw2XNHtc5tNgIlfjj/EUT68uYA36w66vTkMX7mr0y+QUBaWV
JcI91ngxbtcxfjk+jD0fLPvPJR9bc6AjtlHgggyB5QJ9aCZQRQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCu5hKQe/5I1CkKYQWUvw6sLUJN4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjEzMDJlY2ItMzZkNy0z
ZDE2LWJkNjEtNzgxMWE0ZmNlY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBZGNPm1Sb6LkAueZMjp9yf+h6CdkAtTX1ohxZP+59YzykIuEcXMSQw
eReSqiXxqV/uX+N7rF6PtNg39QIcf+CR4WWOeVa30pDkMjKUBGX9psaOCJbYQ9xZ
FLJPnPzrCeQBpFdN0CxIu8GNBnEBmo8JjgiSHsLqIjOylre9xg3qUyT6KGReZT1y
m/n9av7t+tnxVHFQlzSkaE2bH15P8maJkJd/oBz0FpKFI4kq/QHE8XPgkxgJqU6m
O3VcZpqyDKbpQJUMjHUnKPEr6YSqPGmvLU2qdMHQTMlnDrZvM/zFc2GnbY1jJAR2
qcbPjPnTWiv3lRdD5uudVKUzicUeC16c
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:11 2025 by rpki-client