Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2a46b0-7be8-3d92-afd7-ab849c20779e.roa
File: 1c2a46b0-7be8-3d92-afd7-ab849c20779e.roa (raw, json)
Hash identifier: ZF8ZznB4DwThy6LwLnF4xiz2bzFAv5CUZAHvlDO0N6Y=
Subject key identifier: D0:19:22:4C:B2:49:B8:94:85:03:83:4E:8D:1D:C7:30:68:EF:D3:D2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B7844B5A485D61EAC59FF580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2a46b0-7be8-3d92-afd7-ab849c20779e.roa
Signing time: Thu 30 Jan 2025 13:46:22 +0000
ROA not before: Thu 30 Jan 2025 13:46:22 +0000
ROA not after: Wed 30 Apr 2025 12:46:22 +0000
asID: 396592
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:4b:5a:48:5d:61:ea:c5:9f:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:22 2025 GMT
Not After : Apr 30 12:46:22 2025 GMT
Subject: CN=c11b1ff2-49ad-4459-b0ef-44abfe7b584f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:62:bf:2c:a2:f3:c4:c8:9c:1b:ef:73:d1:
68:f0:08:c3:d5:e2:1d:6d:81:73:7e:55:3b:f5:b9:
1e:cd:7f:a1:62:59:5d:ee:19:be:cb:f0:fa:eb:03:
c0:58:88:f1:81:59:06:8b:c1:84:47:38:91:39:3a:
2e:5e:ad:9b:4a:93:8f:8e:a3:e1:02:f0:32:06:f7:
22:a3:ef:a2:53:e1:cc:8f:b7:85:12:4d:f8:25:19:
62:63:df:3d:22:ab:7c:89:a9:3e:b1:5f:47:ff:2e:
41:0d:cb:6d:01:f9:25:3c:bf:91:a0:66:0a:86:07:
e7:ad:90:89:18:5c:c3:0c:11:f5:53:2c:40:57:e8:
74:09:85:a5:a1:65:e9:65:15:77:21:1b:73:33:96:
da:18:07:a7:b6:16:80:42:e4:60:85:c5:22:cc:74:
1e:fa:78:7e:e1:63:e6:4e:1e:0a:cf:b6:f2:39:99:
a0:ee:5e:b6:77:bb:b5:be:77:90:a4:bf:82:51:71:
b4:84:d0:c5:57:17:2f:ed:1a:9e:63:06:e1:1b:71:
8e:69:1b:b1:7e:cf:39:ce:01:7a:e5:95:ba:92:9f:
c7:a1:f1:ca:9f:d8:f3:40:4d:71:da:68:db:bf:0a:
85:28:81:f2:30:3d:5a:d5:9a:ca:34:6d:eb:89:fd:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:22:4C:B2:49:B8:94:85:03:83:4E:8D:1D:C7:30:68:EF:D3:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2a46b0-7be8-3d92-afd7-ab849c20779e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:e4:cd:af:1b:7c:46:e9:48:19:ef:a2:85:e2:65:73:50:27:
b4:39:22:b0:a1:c4:84:49:49:3b:df:1b:12:41:61:ab:f1:ea:
cd:7a:99:2d:16:d0:c7:59:c1:c2:73:46:3a:80:47:4f:58:9d:
9c:c5:65:e9:b9:7a:fe:56:f5:0e:7c:4d:72:e3:e7:c6:49:de:
04:86:18:e2:82:ef:15:4e:4d:ce:e8:8b:ae:ae:90:52:e0:c3:
fa:33:05:56:5e:d3:32:65:1f:48:c4:60:d9:0d:69:4d:fb:19:
2f:bf:a7:4e:1d:0a:b1:4b:88:e5:24:ad:2b:4b:bb:73:67:55:
04:b1:2a:48:75:42:4b:81:80:da:43:9d:41:25:99:1b:c1:a4:
4c:3b:25:8a:2a:73:e1:f3:58:4a:8f:5c:c6:c8:13:d7:41:3f:
60:15:59:1a:0a:80:ad:ee:5c:6d:d3:8e:d6:85:08:0e:a8:17:
48:c3:18:11:da:af:4c:a9:0f:ad:49:13:2d:d4:10:bf:df:a4:
53:96:f1:1e:e0:00:25:91:56:3d:c5:06:42:6c:19:75:a7:fb:
03:3c:6b:df:16:32:94:68:15:2a:43:1e:b0:f4:3c:a4:e2:b6:
3b:98:80:44:73:56:c5:96:9a:c3:90:76:ae:cf:55:af:c0:df:
03:94:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:45 2025 by rpki-client