Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f824264e-53be-3084-bff3-a1f87bd0ff03.roa
File: f824264e-53be-3084-bff3-a1f87bd0ff03.roa (raw, json)
Hash identifier: hievKs8qPtwxZ8Bw1HD0JHnXMF42f3XQ/B8SMzNC8c4=
Subject key identifier: BC:42:A0:9B:92:E8:DE:68:87:C8:7F:68:2E:06:D2:CF:44:7F:82:76
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BD82B610CFC5AFFB5B20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f824264e-53be-3084-bff3-a1f87bd0ff03.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 397211
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bd:82:b6:10:cf:c5:af:fb:5b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=b3b4b95f-5e39-4545-b36e-4cd1b4c22ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:17:34:bd:3c:e5:dd:5d:86:a9:64:2a:a0:
a9:6c:eb:6e:4e:d1:90:c9:7e:fe:62:d9:a7:32:5a:
1a:20:74:d4:88:b6:de:d5:1b:24:b4:4e:12:b7:5d:
5b:be:0a:32:fa:c8:65:9c:ce:79:f6:1e:0b:9f:14:
7a:b2:73:c5:e1:c8:b1:ba:4b:28:ed:c7:58:26:c8:
48:ee:bd:fd:18:90:2d:0a:44:32:10:8c:96:ab:9c:
fa:57:c8:1f:5a:c9:5c:ef:dd:ae:9e:8b:86:f1:24:
77:5c:bd:ed:48:81:a8:42:b5:63:02:2e:38:68:77:
92:18:e3:f6:30:5c:c5:fa:ee:19:c8:e8:22:49:eb:
0e:e6:34:b6:3d:9e:c2:2e:7f:52:6f:12:ef:4b:f7:
74:e6:60:76:dc:b3:56:ce:89:09:26:34:30:44:6a:
da:ab:c6:d0:c8:67:a7:af:9e:a9:cc:6a:4c:12:ff:
88:82:2c:65:4c:ea:8d:a2:1c:80:14:a6:64:56:17:
2c:23:98:ff:13:9f:25:94:1c:d1:f6:4d:25:31:37:
4e:02:cd:4e:22:39:c1:a2:56:9e:71:fc:3f:1b:ef:
e7:22:e8:eb:48:93:c5:a7:61:db:91:1e:f4:5a:26:
51:83:a9:f0:66:fe:48:0c:50:33:76:ba:04:86:55:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:A0:9B:92:E8:DE:68:87:C8:7F:68:2E:06:D2:CF:44:7F:82:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f824264e-53be-3084-bff3-a1f87bd0ff03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:14:5a:01:15:81:4d:85:cd:fa:b9:7b:70:f7:09:25:cb:c6:
d2:1f:e7:7f:96:57:35:a8:0c:27:f9:d1:23:54:b6:03:d5:15:
8d:c0:38:8d:92:d5:1a:0a:bd:5b:9d:bc:16:e4:bc:27:fa:b5:
03:bc:52:d5:96:2b:1d:c5:a2:2c:e4:66:8b:20:ac:2b:68:ab:
45:a3:47:cd:25:af:d7:64:c9:98:31:08:97:f2:05:4a:e1:a8:
bc:13:0c:15:a0:a4:24:0e:dc:6f:e8:b3:e3:e9:93:bb:32:31:
c5:2c:fa:1d:80:38:6e:fe:77:22:87:67:39:e4:5c:ba:db:a7:
b6:98:35:42:b9:54:2a:89:87:87:07:7e:1e:e6:97:cc:07:f0:
09:90:a2:bd:09:78:3e:07:04:43:3e:24:ed:76:25:5b:9d:b0:
2e:46:63:1a:e4:cf:d4:7f:70:5e:4a:68:2c:24:08:8d:c3:b4:
e6:0c:db:31:aa:34:ff:e7:d8:ce:35:f0:82:bb:d8:32:26:09:
bd:2a:8e:70:99:69:c0:fb:28:d2:9b:f0:7b:e0:5f:e8:eb:0c:
74:23:a7:27:ff:3f:3f:5a:0c:ea:73:61:3a:60:a3:04:8d:39:
36:b6:44:88:05:58:88:f3:1f:b4:be:52:0f:5d:ba:a2:44:e8:
4c:7c:16:9c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioML2CthDPxa/7WyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
YjNiNGI5NWYtNWUzOS00NTQ1LWIzNmUtNGNkMWI0YzIyZWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugkXNL085d1dhqlkKqCpbOtuTtGQyX7+Ytmn
MloaIHTUiLbe1RsktE4St11bvgoy+shlnM559h4LnxR6snPF4cixukso7cdYJshI
7r39GJAtCkQyEIyWq5z6V8gfWslc792unouG8SR3XL3tSIGoQrVjAi44aHeSGOP2
MFzF+u4ZyOgiSesO5jS2PZ7CLn9SbxLvS/d05mB23LNWzokJJjQwRGraq8bQyGen
r56pzGpMEv+IgixlTOqNohyAFKZkVhcsI5j/E58llBzR9k0lMTdOAs1OIjnBolae
cfw/G+/nIujrSJPFp2HbkR70WiZRg6nwZv5IDFAzdroEhlWQzQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLxCoJuS6N5oh8h/aC4G0s9Ef4J2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjgyNDI2NGUtNTNiZS0z
MDg0LWJmZjMtYTFmODdiZDBmZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC0FFoBFYFNhc36uXtw9wkly8bSH+d/llc1qAwn+dEjVLYD1RWNwDiN
ktUaCr1bnbwW5Lwn+rUDvFLVlisdxaIs5GaLIKwraKtFo0fNJa/XZMmYMQiX8gVK
4ai8EwwVoKQkDtxv6LPj6ZO7MjHFLPodgDhu/ncih2c55Fy626e2mDVCuVQqiYeH
B34e5pfMB/AJkKK9CXg+BwRDPiTtdiVbnbAuRmMa5M/Uf3BeSmgsJAiNw7TmDNsx
qjT/59jONfCCu9gyJgm9Ko5wmWnA+yjSm/B74F/o6wx0I6cn/z8/Wgzqc2E6YKME
jTk2tkSIBViI8x+0vlIPXbqiROhMfBac
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:36:59 2025 by rpki-client