Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ccf05cd-adcb-3b41-af31-8b8c13480207.roa
File: 1ccf05cd-adcb-3b41-af31-8b8c13480207.roa (raw, json)
Hash identifier: Mhflp+HDPX50S+51r5smzFa0v3juFDVcEeJbGEzAM9M=
Subject key identifier: 1E:8C:9E:8B:B5:97:F8:3E:D6:55:A5:0B:BE:8C:09:C8:28:35:3F:F5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183CED5076D676AEBE67100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ccf05cd-adcb-3b41-af31-8b8c13480207.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396584
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:ce:d5:07:6d:67:6a:eb:e6:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=21ce49e0-0b25-49c3-a49b-337d19e8b305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:23:28:45:c3:d6:e1:8b:03:48:40:6c:28:c1:
19:8f:65:c2:34:ad:28:b6:68:bc:cc:1b:0b:f5:b4:
72:72:5b:1a:be:a1:f4:0e:e3:c3:a1:60:8a:fa:81:
18:b7:46:22:b7:2c:64:c5:ba:e9:cd:0e:d5:dd:6a:
3e:5c:2d:a6:52:3f:10:44:9a:b6:9d:8e:7e:ed:0f:
fe:8d:1a:36:fb:e2:b9:e3:53:12:27:07:e0:dc:1e:
26:82:15:7a:00:45:84:e4:3f:c8:8e:60:f3:4d:16:
7c:15:98:c2:8a:69:92:6a:c3:84:e0:d2:be:84:93:
1b:3f:38:0e:68:06:3e:2a:f8:8f:97:59:53:90:a3:
e9:c1:f4:9d:82:99:3f:9c:a4:7e:7d:21:f5:11:97:
16:f8:50:a4:87:20:2c:23:ef:2f:b5:06:40:70:d5:
a9:22:73:8a:0e:6f:89:58:bc:e8:b4:57:e9:b7:3d:
d9:9b:b2:2d:b4:fe:4a:87:65:4c:8f:35:42:1f:e4:
97:81:a5:ae:c0:c4:79:62:5f:3d:44:a0:e2:14:ac:
5c:1b:f5:4a:0a:7f:8c:2b:46:39:48:41:71:9b:fd:
10:0c:cc:21:9f:17:eb:4a:9a:9f:cf:ba:a0:de:a8:
98:b6:03:9c:3e:98:61:e9:0e:c8:3e:1a:de:e5:10:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8C:9E:8B:B5:97:F8:3E:D6:55:A5:0B:BE:8C:09:C8:28:35:3F:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ccf05cd-adcb-3b41-af31-8b8c13480207.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:81:e3:3b:72:f7:d9:a2:d1:e3:86:df:c5:b5:aa:87:3a:4b:
f7:52:2b:a4:31:f0:d6:3d:d8:f7:f6:9c:5b:36:65:de:0f:e6:
85:4b:55:7b:b2:a6:3d:91:63:e0:b3:80:7b:b1:9d:fa:13:37:
b7:42:84:e6:d7:7d:18:ab:cf:b2:67:39:6f:d8:f9:a5:6b:ad:
3e:e7:e2:19:81:f8:14:21:ba:32:45:e9:07:fc:8d:42:cc:32:
0d:2c:a5:92:c8:89:e7:1e:50:1d:fe:40:58:35:43:ef:47:66:
58:22:1a:57:e4:dd:ee:a8:81:db:45:38:03:eb:01:71:f9:a5:
42:07:83:da:a6:f3:3b:9c:50:12:db:18:4b:42:26:3c:8d:e7:
3c:bf:bb:2c:f3:9e:94:7f:86:f1:3e:0e:05:60:14:d7:14:32:
1c:41:ad:40:8b:67:2a:46:f9:14:7e:1f:d8:4b:68:f5:ed:7e:
e4:6a:47:e7:29:3e:aa:33:a6:ef:26:89:7e:a7:d5:c3:aa:a2:
58:0a:f6:3b:7c:5a:d5:f5:00:fd:7f:19:d6:79:8a:dd:6b:b7:
bb:70:3a:11:f7:f2:7e:4e:52:43:41:da:c6:3e:dd:f2:3a:2a:
ac:f2:ba:ae:7b:5b:f8:03:38:51:2a:ce:28:e6:bc:c5:22:bb:
f7:80:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:31 2025 by rpki-client