Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fb330d-a16d-3f45-b8d6-f8ed72e4b916.roa
File: 18fb330d-a16d-3f45-b8d6-f8ed72e4b916.roa (raw, json)
Hash identifier: ym7iddUb22RvkAVE8XdMkJcE3dclLsKPULeZovhOAzw=
Subject key identifier: 17:F5:56:14:35:AA:65:38:29:C9:68:A5:35:DF:1F:43:15:22:C9:78
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493ED3F4A8031AE63530389040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fb330d-a16d-3f45-b8d6-f8ed72e4b916.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 36632
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:f4:a8:03:1a:e6:35:30:38:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=2c121f8e-60c8-49ab-a3cc-88c925bf6311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:8c:96:ba:7f:61:05:5d:e5:5c:ea:cf:aa:
88:d4:72:8e:a6:70:df:f4:61:41:05:52:5a:58:f6:
6f:82:fb:f5:64:cb:e1:ab:fc:76:e1:13:ef:74:3d:
6c:9f:b6:6c:4b:7c:49:fb:4c:c3:43:7b:6a:26:e5:
a5:8e:e2:eb:b2:f0:cb:e5:46:b6:35:75:ce:5b:35:
86:01:94:6d:71:67:64:9d:56:f1:b2:2d:81:ea:82:
44:66:b0:82:87:16:bf:e0:bd:ae:14:67:79:d6:8d:
cf:76:df:bc:a1:14:fa:4c:6e:66:ae:a4:c5:ec:d7:
10:1b:7b:03:b0:76:a8:10:91:4f:28:f5:f2:b0:17:
65:51:de:27:57:d1:38:bf:ca:00:ce:8a:c7:69:d8:
de:a9:01:69:6b:96:48:77:bb:e8:64:60:40:9b:79:
33:81:40:1a:a1:79:5f:64:b9:78:bf:5e:93:f5:d6:
af:75:14:4d:23:86:04:bb:cd:e7:f9:41:e1:83:9c:
85:cf:69:dd:d7:c0:bd:8c:17:ef:b3:10:1d:99:25:
78:3b:93:6e:fb:6d:8e:03:d9:5d:38:82:7a:a5:41:
5d:88:b2:27:9b:d4:75:2f:ae:d2:99:b5:c4:4d:34:
a6:66:47:3e:a7:1f:19:53:6d:ec:7e:cb:6c:5b:81:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F5:56:14:35:AA:65:38:29:C9:68:A5:35:DF:1F:43:15:22:C9:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fb330d-a16d-3f45-b8d6-f8ed72e4b916.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:9a:67:11:50:fc:1a:0e:e4:7d:b4:82:39:52:c4:2a:15:a1:
91:cd:f1:62:c7:82:21:17:d4:54:a3:82:ae:04:65:78:a8:21:
cd:79:9b:39:56:85:b5:63:c2:86:59:dd:08:b3:67:27:91:da:
ce:6e:06:54:8c:63:1a:a7:32:f3:eb:1a:3b:89:39:13:bc:ae:
ca:ab:74:6b:12:66:6e:f4:ce:d4:f3:a5:b4:c1:41:04:72:de:
06:9c:c3:7d:49:0e:fe:a1:08:35:6c:15:f7:3a:45:79:d4:55:
de:55:58:dc:d2:6e:f9:ad:3f:90:43:72:29:f0:86:6c:37:b6:
68:59:dd:f0:eb:6f:2b:42:e3:21:ec:36:bc:f7:bf:06:0a:cb:
d0:65:16:47:61:79:fb:83:5c:c1:3c:08:f9:c3:8d:8f:4a:fb:
61:fc:0e:e7:ac:77:5c:8d:5e:6a:3d:75:62:1a:e7:af:4f:89:
2f:ee:72:7d:6e:39:05:5b:a0:09:38:aa:8f:41:a2:e3:36:d5:
ae:cc:35:b2:9f:0e:25:dc:66:0c:57:d8:c6:e5:84:07:31:ea:
fe:b7:3a:fa:eb:85:3a:8b:bb:60:a3:73:a5:4d:f7:0f:a2:16:
c1:d0:a6:75:41:eb:aa:50:6c:04:f9:d2:d1:12:64:3b:31:8e:
a9:af:c9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:31 2025 by rpki-client