Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02638ab3-0999-3133-8b23-235683a10fd0.roa
File: 02638ab3-0999-3133-8b23-235683a10fd0.roa (raw, json)
Hash identifier: XnQNud8SRfKB/GO5xJNTc/yWjHlOD0KevAOwEXZj8PU=
Subject key identifier: 90:72:54:86:63:8A:BD:66:FE:36:C4:E1:20:19:AC:4F:D3:C0:2A:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D23BA5E6B2BBC9EE0FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02638ab3-0999-3133-8b23-235683a10fd0.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396551
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d2:3b:a5:e6:b2:bb:c9:ee:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=49bfa27a-15c2-4386-a05a-c09d604a78ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:f8:19:23:75:c0:d2:bf:ff:c7:87:e9:85:
d8:27:a4:14:d3:48:e2:5b:ae:a9:63:d4:f0:df:8d:
ab:4d:62:a4:d8:d6:e3:26:23:05:45:eb:ba:e3:d4:
54:d6:cb:ba:d7:28:49:b8:79:04:64:3d:fc:9f:a5:
be:48:97:22:e4:ab:73:2b:64:50:2f:5c:de:15:b5:
b2:c2:10:c7:f5:69:41:13:13:31:f0:1c:3a:6f:7f:
fe:db:bd:f1:e6:98:55:6f:71:36:c9:e5:55:93:95:
fe:74:7b:7f:b5:35:81:99:21:c9:06:08:25:bf:2f:
ea:17:22:e2:5f:77:fe:b6:e6:d9:30:f8:4a:ac:73:
15:a5:b2:23:d1:1d:37:7e:32:94:06:b8:bc:74:d8:
57:7a:2a:90:25:d0:29:59:f6:05:37:64:fe:f9:69:
5b:8e:79:12:81:fc:e9:d5:21:e7:77:7c:f6:50:8b:
2d:62:72:aa:42:90:1b:0a:75:12:6f:aa:ad:c2:81:
bb:ab:9e:b3:4e:90:9d:c4:17:c9:aa:92:26:0c:a1:
a5:27:a8:f0:ec:c7:1f:46:67:8c:27:76:58:1a:2e:
50:5d:04:21:16:a3:35:8f:0e:97:6d:f7:ac:71:70:
5c:b3:33:74:eb:02:a4:a6:1c:9e:ee:7d:69:8d:80:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:54:86:63:8A:BD:66:FE:36:C4:E1:20:19:AC:4F:D3:C0:2A:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02638ab3-0999-3133-8b23-235683a10fd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:bd:e2:89:13:27:33:80:d8:4c:ff:7c:76:85:a7:86:77:31:
d9:66:d3:a8:1f:b4:f6:5b:9b:d9:10:28:f7:5e:ef:eb:f0:38:
e7:f1:c0:f8:20:75:39:81:27:b3:42:e8:ef:9b:5d:ba:74:8e:
2a:b6:fb:b4:7d:ac:f4:24:d0:4d:47:2f:22:53:9b:21:59:8e:
d4:dc:ca:e0:6f:ae:ff:98:d5:05:d5:e0:7c:f5:b0:09:39:b7:
75:d1:9c:18:93:07:a2:bc:f0:b3:8f:e8:78:60:92:b9:fb:5f:
69:39:0d:2d:0f:a5:fb:63:b9:41:5d:80:7f:9c:af:ee:8f:28:
b4:fc:15:a5:36:e3:22:da:d0:60:6c:d3:b2:9a:0d:77:50:a3:
7e:d5:88:f0:17:45:7f:ba:55:64:a9:2f:d9:65:59:69:dd:b8:
a7:71:b8:20:60:5f:8b:a5:ff:12:01:e2:ba:9a:bc:3b:32:67:
be:60:fc:7a:e2:eb:22:71:1d:bf:f6:5c:90:63:8a:45:61:90:
72:b4:ac:26:77:85:06:10:24:4b:6d:14:a6:46:8a:8a:86:ce:
1d:8e:c1:26:b0:68:7b:69:e9:f9:3d:e5:f3:d9:92:ec:ce:b3:
c3:6a:68:34:16:b5:82:79:92:b7:bb:f7:72:56:fe:dd:07:f5:
43:e2:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:23 2025 by rpki-client