Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/107ca292-54f2-3f73-b4a3-f7ccebd2bb91.roa
File: 107ca292-54f2-3f73-b4a3-f7ccebd2bb91.roa (raw, json)
Hash identifier: xb+/guPdDryOSFoqeOFfnN0jBLSwU2V1asxy00eeNM8=
Subject key identifier: 1C:CE:23:9A:45:1E:72:0D:E1:E4:ED:74:15:23:C1:8D:07:8A:B3:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F40932FAAAFC0AB40760
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/107ca292-54f2-3f73-b4a3-f7ccebd2bb91.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396581
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f4:09:32:fa:aa:fc:0a:b4:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=14b52d88-10ba-4fbf-81a9-7efefefce2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:51:4e:15:a3:50:54:44:25:2e:0f:f5:dc:
ff:49:f7:10:4b:85:cc:dd:72:9f:dc:0c:8e:0c:00:
f4:ed:0f:bf:41:cf:fd:ee:4e:7d:bc:80:1d:c4:30:
f2:43:d1:91:c3:c9:ce:af:16:2d:ec:ba:7c:69:c8:
c8:fb:8a:dd:7f:91:34:65:fd:1c:bf:17:66:1d:3a:
ce:60:30:38:dc:62:ad:93:bc:78:4c:fa:ca:27:7a:
64:6f:77:54:0c:60:a0:bc:f2:00:a6:35:ca:e0:15:
eb:91:a5:69:56:a1:17:e6:37:86:62:6c:71:13:e8:
77:d0:0d:4c:b2:bc:d0:86:39:b5:60:7c:cf:58:c0:
1f:76:2d:05:6c:fe:0a:4b:07:74:d6:6a:e1:40:f3:
dd:8d:2f:a2:24:b8:cd:00:d8:44:8b:cf:c7:10:c8:
b0:29:c8:74:59:07:32:d4:b2:62:a2:2d:8e:10:ea:
15:b2:6f:78:d1:7b:4d:78:01:d2:8c:e9:80:5d:ab:
9b:2e:d8:d1:aa:a9:10:99:0d:ba:9e:67:f0:c9:b1:
59:d0:99:b2:3d:e9:40:10:79:30:27:14:51:55:c2:
d7:49:85:1f:58:28:7a:36:87:8d:ff:57:5b:9c:4e:
17:9a:60:36:f0:37:d3:dd:d7:53:5c:49:58:b7:47:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CE:23:9A:45:1E:72:0D:E1:E4:ED:74:15:23:C1:8D:07:8A:B3:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/107ca292-54f2-3f73-b4a3-f7ccebd2bb91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:92:27:23:6c:4b:1a:1a:75:45:a9:b0:31:e3:9a:48:e4:a5:
72:52:f0:61:e4:8a:2e:e8:12:ea:69:ff:aa:6d:29:fa:c9:2a:
ba:94:76:01:2b:0e:2f:2b:18:d8:9d:34:f4:e8:30:00:12:9e:
a5:a4:95:a4:44:26:d1:93:17:08:70:3f:08:49:60:8b:f1:63:
fc:46:37:12:eb:dd:0f:03:94:71:65:cc:e6:cb:be:23:bb:45:
ce:0e:f4:44:b3:62:5c:6c:29:26:8e:bf:b6:cf:db:2a:fa:6f:
cf:ff:53:df:03:70:6c:12:70:fc:49:99:23:9c:c3:57:35:a6:
fd:b2:64:db:1a:56:48:36:c1:02:28:f1:00:0f:94:12:b9:41:
fd:7b:7c:ac:f1:67:5b:9e:ab:bb:8b:bc:ca:c0:b9:dd:ae:e6:
11:35:a5:f1:07:a5:96:74:bc:9e:b9:69:5c:d1:9c:82:81:0a:
fa:74:11:33:b4:45:9f:c5:f2:dd:89:e5:49:d0:f3:2c:ea:ce:
75:93:9b:d0:b6:35:84:8b:07:39:84:52:33:02:17:a7:2e:b7:
d1:15:d5:cd:7b:ed:88:0a:75:24:16:34:52:63:e9:cc:68:0b:
05:e9:33:b9:6b:b9:f3:c2:9f:01:63:c5:13:d7:b4:34:f9:8b:
98:e8:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:05 2025 by rpki-client