Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e9f7415-1a93-3973-a8bb-79a15b8ec469.roa
File: 0e9f7415-1a93-3973-a8bb-79a15b8ec469.roa (raw, json)
Hash identifier: UAbj8NgQIBpRjZHeUn5MxiVYcgW5R2fnxTbxUtFvjok=
Subject key identifier: 06:BE:82:7B:A6:1C:A7:3A:94:C5:DD:4B:A0:B1:AB:17:C5:E3:DD:CB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B404FBDF0423205B2A900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e9f7415-1a93-3973-a8bb-79a15b8ec469.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396609
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:40:4f:bd:f0:42:32:05:b2:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=0c977151-3e19-48d6-8676-a61d1f58018c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6f:9b:e5:77:61:6b:a7:b3:76:54:ea:8e:db:
8a:31:58:f9:93:e9:de:8d:47:d2:72:15:3a:e6:4d:
08:01:b1:7c:c0:d4:66:0c:6e:83:e3:88:5c:cd:ea:
8b:c0:a7:bb:a0:53:26:6d:97:00:29:58:38:64:39:
ee:6b:3f:46:ed:7d:0a:d7:25:7e:b2:9f:f7:da:96:
e1:85:d0:ee:f3:0e:a9:8b:f3:55:00:ec:f6:57:5b:
ff:c8:d5:d0:40:dc:af:ef:62:9b:12:85:64:fa:b7:
8a:4c:05:43:03:07:70:33:aa:9e:6a:e9:c0:97:10:
94:ff:a1:85:c4:f1:e6:38:c1:f0:ed:46:c6:c9:33:
36:27:e0:ac:19:dc:fe:30:8f:27:ca:35:d1:d3:70:
d9:23:5c:e4:0f:a7:e3:32:4b:26:5f:60:17:3b:03:
9e:39:63:24:a7:4a:40:9f:d6:0d:9d:24:f3:fb:8e:
4c:83:dc:f1:2d:98:e8:87:37:e9:8a:f1:05:b0:4c:
8e:26:8b:2d:27:27:69:99:0a:f7:13:16:01:0f:47:
fc:e0:f5:ea:90:29:c7:9d:9d:b3:bc:74:ed:c3:9a:
fe:e0:6b:62:0e:ac:79:b1:3e:8b:46:f9:28:40:72:
56:67:f2:b1:fe:52:d6:cc:a8:59:38:aa:96:ce:43:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BE:82:7B:A6:1C:A7:3A:94:C5:DD:4B:A0:B1:AB:17:C5:E3:DD:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e9f7415-1a93-3973-a8bb-79a15b8ec469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:6f:0c:d9:9e:8c:22:e7:db:ff:49:04:f4:c2:1c:ea:27:e7:
e8:d0:57:fd:57:8a:23:32:76:da:ed:13:6e:c4:db:f3:29:81:
10:6b:a0:2e:c6:f7:75:9f:29:0c:b3:2a:90:48:c2:78:6d:7e:
83:f2:d2:20:b7:c3:bf:7c:32:f6:94:0c:ab:16:ed:ae:f2:86:
ca:48:9b:28:49:1e:68:e5:01:07:2e:47:99:f5:73:d6:61:0f:
9d:ec:89:7d:e0:22:a2:46:d8:b7:5f:15:6c:cb:8f:d5:e6:94:
48:db:9f:bc:02:1f:ab:b7:a7:d4:f4:63:22:74:73:a6:61:16:
48:d3:e7:aa:dc:03:9e:ac:e9:fd:e6:25:70:6b:f2:44:bb:9d:
18:91:27:81:d9:22:fb:c1:64:5e:66:b9:a5:ca:f4:1c:d3:46:
a6:65:7c:c6:c5:85:16:a3:af:3b:36:32:00:20:1d:5b:0a:09:
32:b4:a4:73:d4:30:2e:f1:67:85:b4:b1:fb:bd:06:f3:ec:dd:
76:c3:c5:37:82:70:85:51:66:87:c9:10:7d:88:a0:cd:66:c0:
dd:85:42:2c:b1:89:e6:77:f0:60:46:72:4f:b6:92:fe:24:e8:
e0:37:3e:96:94:f7:95:dd:54:47:40:ae:98:07:e3:61:66:7e:
20:2d:0c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:30 2025 by rpki-client