Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17f77679-b3d7-3dde-822f-32d3a7a706c6.roa
File: 17f77679-b3d7-3dde-822f-32d3a7a706c6.roa (raw, json)
Hash identifier: fOTHxQXFzeTvAUBL3e8JDVFBILIbFDgTaSsr52Yu6qc=
Subject key identifier: 0D:AC:3E:59:4D:D4:E8:FD:6C:C4:5E:FF:88:26:E8:58:2F:37:38:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3C25F0BF5331A9562560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17f77679-b3d7-3dde-822f-32d3a7a706c6.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396546
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3c:25:f0:bf:53:31:a9:56:25:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=7ebe6990-efd5-43ff-85b1-b398321299c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:2d:c2:a9:7f:46:5b:d9:00:18:21:ea:ec:
85:f2:7d:eb:65:b2:4e:36:94:fd:6a:b0:3a:51:15:
55:ed:3e:1b:f5:53:3f:be:4b:ef:2c:c8:98:6a:0b:
ba:3e:1a:83:12:42:d5:87:05:69:fc:0d:ab:16:1c:
c1:ac:bf:09:dc:9b:ea:b6:72:e8:f0:70:8f:9f:19:
d2:71:6d:0a:da:98:26:97:c3:8e:5b:91:61:6e:a0:
19:d1:5b:57:8b:bb:c2:14:d4:2e:48:60:8d:b4:79:
30:e0:02:9e:b2:41:8e:10:fe:f1:ee:3e:d2:41:de:
a7:5f:ae:b0:d0:1c:9a:18:fe:f7:f5:be:b5:7c:8b:
03:6c:da:e0:d5:e9:9d:f2:dd:20:66:64:53:b3:26:
62:8b:07:1a:eb:48:fb:b9:ed:93:da:8f:9a:cf:a3:
98:ab:82:76:ae:bb:07:7f:20:3a:1a:28:80:ec:79:
f5:a3:de:48:f6:c8:2d:ba:7c:09:7d:1b:df:b7:73:
2d:78:82:cc:01:2e:d2:43:ef:6f:ce:41:06:d9:ad:
5e:cb:bd:b7:35:a5:78:d7:96:bc:31:30:98:e5:50:
df:d2:81:e5:49:5a:c1:8d:0e:22:e2:17:98:f4:30:
ac:9b:e3:26:a4:3f:95:b3:94:b8:dc:75:f9:36:3d:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:3E:59:4D:D4:E8:FD:6C:C4:5E:FF:88:26:E8:58:2F:37:38:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17f77679-b3d7-3dde-822f-32d3a7a706c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:c1:6e:6e:4e:92:66:06:d8:1c:e6:40:61:76:a8:71:0a:3e:
ca:df:27:06:0d:3f:f3:67:f3:b0:d3:6d:1b:ad:7d:fa:1f:68:
9e:a2:d9:3a:db:32:12:4b:f3:a7:ad:b8:ad:81:28:eb:42:26:
2a:92:7e:aa:63:3b:c4:96:fa:6a:bb:bd:88:62:f0:15:82:0a:
22:90:67:b7:2f:c6:95:9b:97:1f:cd:b8:11:fc:04:59:f1:50:
c9:23:e9:79:01:8f:83:db:54:ab:67:15:7b:b4:8b:ac:fa:ae:
18:7c:11:d9:9f:c6:e0:cb:c8:e8:15:de:e6:4d:da:8e:dd:1f:
fd:6d:73:d5:55:26:7c:87:17:e1:cf:44:6d:97:cf:da:1f:ce:
3a:9d:03:1d:ba:34:0e:f2:22:c0:47:b0:1a:37:89:f6:da:a6:
82:9b:7e:50:b6:bf:e7:f5:78:28:24:b2:6c:cb:9d:f9:80:e8:
14:de:e5:84:ad:62:a1:6f:54:eb:46:d3:0b:bb:4d:35:e5:75:
5e:d6:2b:6f:0b:31:a0:be:5d:4f:eb:af:31:51:38:6d:df:1f:
cd:89:eb:f1:1c:36:38:de:79:5a:c8:41:c5:fb:21:28:88:16:
02:92:51:a6:23:f9:cf:5c:7a:72:de:3a:78:05:8b:d5:49:06:
ea:73:aa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:03 2025 by rpki-client