Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa
File: 0ece9ded-a213-3cef-a817-7375a4dacf4b.roa (raw, json)
Hash identifier: lo089Nho22H1gfOSQF1dECK5ViKsxgeGPtUvucOM4vc=
Subject key identifier: 25:C5:3D:24:D8:D4:06:5F:A8:66:50:61:97:05:9E:26:33:71:7F:15
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3BEBF0DA75CB93D51C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396578
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3b:eb:f0:da:75:cb:93:d5:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=82f458c8-b969-4445-b1f8-ff7338fcc1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:c1:ab:42:4a:8a:4f:8b:13:0b:cc:2a:7f:
26:1c:33:65:b7:f4:60:aa:06:3a:56:c9:7b:7b:b5:
05:8b:0d:64:b4:6e:d0:c8:e5:e4:b9:a0:ed:48:65:
88:c7:ee:92:5d:12:e2:3d:de:93:11:b2:eb:b4:35:
a6:be:de:d9:eb:a2:bf:ec:d8:e9:c8:1f:b1:cc:ff:
75:ae:f9:4d:17:e1:59:f8:cc:51:83:0a:4a:8f:ad:
a1:c0:a8:79:a0:6b:a9:11:99:87:33:9a:98:04:03:
dc:6c:32:3f:8e:db:36:42:88:af:ee:0a:5b:88:6c:
12:c1:5b:23:0e:76:f7:d9:44:1c:85:de:fb:29:21:
80:4a:34:fd:8a:04:ae:39:14:ef:88:97:3f:a5:78:
39:9f:e5:c8:c8:b2:a6:6d:22:50:e1:fe:b8:24:7a:
56:da:8d:c0:3f:b6:b4:be:c5:36:0a:f2:2b:61:20:
33:4c:ca:02:f9:09:1b:d4:b7:82:59:eb:42:c9:3a:
ae:68:43:a5:57:05:ce:83:b2:82:71:ba:20:43:2e:
6b:d3:dd:68:89:e8:b1:1e:2a:a5:49:cf:24:4a:b9:
9c:56:a9:07:e5:fc:8f:04:68:41:8e:ef:fa:ff:f0:
2b:37:21:84:fc:77:b7:f6:ac:90:1e:e1:af:41:f9:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:3D:24:D8:D4:06:5F:A8:66:50:61:97:05:9E:26:33:71:7F:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:5b:71:2e:9a:36:25:ef:06:68:2e:2a:15:09:bf:6e:15:ed:
d3:ef:3c:b4:56:49:8d:92:c2:4f:33:19:62:0b:14:7c:fa:a5:
a5:33:6f:68:dd:09:29:90:3d:90:ae:56:73:f0:ea:ea:f4:ab:
5d:2a:42:fe:46:42:7b:4c:9d:84:32:98:dd:7a:92:64:00:8f:
8b:c1:02:47:b8:d7:76:d1:8f:ad:96:2c:6f:1e:b3:49:57:62:
58:fd:4b:74:04:ed:70:b5:18:c9:e9:6d:f3:43:17:ad:41:34:
0c:7f:85:3d:23:ed:f1:8f:a1:25:00:4b:e5:90:fe:8b:9d:5c:
29:b6:fb:c7:c0:c2:7e:df:a7:93:20:66:99:a9:13:04:5d:52:
4a:ec:23:16:47:b7:35:df:4f:b9:bb:fd:73:8f:6d:77:1c:11:
9a:dd:4f:8f:59:be:f9:c6:cd:92:b1:cc:6c:28:f8:ae:82:35:
42:b9:2b:70:be:98:0e:61:51:33:31:84:44:e1:f8:69:4d:1f:
9a:49:13:8c:60:a5:a9:35:f4:f5:82:30:ae:ff:aa:49:66:e5:
1f:8c:de:f8:f4:56:6c:38:de:eb:74:27:62:9e:c1:95:fc:5f:
9c:65:f7:21:e3:c3:cf:70:f9:65:e7:ed:d5:9c:22:95:50:5f:
86:3c:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:55 2025 by rpki-client