Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2056b671-8c26-33b2-b7a4-52dab5db657c.roa
File: 2056b671-8c26-33b2-b7a4-52dab5db657c.roa (raw, json)
Hash identifier: JXeufZZVdr9Ky9FgzP/3HKZXAB95NXEZMbUHKbaUeJA=
Subject key identifier: D3:0A:0B:C5:DE:97:9D:B3:81:53:24:70:B6:F3:74:59:F8:50:9F:F7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AF2BADBECC1C03EEE6F5B2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2056b671-8c26-33b2-b7a4-52dab5db657c.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 20172
IP address blocks: 192.81.185.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:ad:be:cc:1c:03:ee:e6:f5:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=7844c61c-e924-4a59-b28d-f0d6019b61f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d3:ee:53:d7:c0:38:1b:e2:f7:83:a9:88:a6:
ba:58:fd:bb:f5:a2:32:47:b9:97:92:42:92:dd:68:
8a:5c:b1:0e:f2:14:dc:42:12:7d:42:6b:f6:ab:48:
d2:45:0e:47:46:cc:96:4b:f0:6c:d4:b6:70:51:b3:
35:26:d5:74:83:46:d7:75:3e:99:20:66:86:6d:e9:
de:3a:3d:fa:e7:31:e1:b6:cb:b4:b9:ff:50:bc:60:
db:67:d5:e9:a0:6b:38:7b:27:74:de:6e:31:00:19:
ba:c0:0a:69:37:c7:ed:03:ec:16:79:fa:6f:5b:6a:
02:ef:56:6b:19:af:9d:6a:2c:e7:f4:28:39:c0:84:
cd:a0:b4:35:80:f1:7f:e1:1c:52:9f:0b:39:05:10:
4d:51:39:6b:6e:34:c1:ab:07:4b:ea:b2:94:b6:46:
09:16:96:9a:ab:f1:0b:22:8b:2e:d8:80:6a:04:62:
cd:3e:85:47:ec:5f:33:c9:73:cd:dc:8c:76:8c:00:
d6:16:64:34:a3:e6:68:2f:06:97:6e:f6:9c:f5:f2:
63:7d:0d:bc:68:0d:0b:0a:af:ef:8c:50:60:50:50:
9a:42:a0:1e:5e:c5:ae:81:3f:02:d2:de:2e:7c:1e:
9d:c4:e0:b3:06:86:04:35:72:02:e8:bf:f5:83:ed:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:0B:C5:DE:97:9D:B3:81:53:24:70:B6:F3:74:59:F8:50:9F:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2056b671-8c26-33b2-b7a4-52dab5db657c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.185.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:b6:0b:fb:05:fd:16:42:5d:26:3c:b9:49:be:31:e6:5a:f9:
42:4e:09:67:b5:7e:03:d8:5d:dd:74:e0:5c:d1:33:b8:0b:6c:
22:78:49:b0:25:b6:4e:b4:e5:37:fa:30:44:1a:c7:c3:3a:36:
56:3b:5e:a0:ec:5d:2f:5e:18:87:71:a9:00:fe:f1:dd:a2:9a:
5e:e1:c6:de:25:58:09:f4:f8:27:5d:c8:dd:96:2a:db:40:36:
06:e0:ec:71:3b:33:15:fc:20:ef:15:c8:10:12:05:31:fa:6b:
f3:8d:0d:f3:3e:17:1c:95:c0:4a:88:33:b9:a0:a3:7a:16:fd:
46:52:cf:4c:5a:47:b0:8d:ae:e7:d8:ae:da:ac:6a:88:72:49:
f4:7b:4b:f7:0e:d9:ea:47:8e:80:1a:8b:2d:d4:ad:a3:b4:3d:
73:53:f5:5c:96:cf:0b:b2:bf:bd:f3:96:73:59:27:ea:3f:c3:
8f:95:54:6a:ac:5e:ff:09:ba:3d:03:c8:8b:46:1d:7b:b8:e4:
a2:07:1c:54:c1:9d:fe:f9:1b:12:5a:97:e2:44:d6:2e:2e:9a:
bb:38:13:e5:4a:24:96:50:88:7f:2e:f7:c1:d3:a4:94:98:36:
b9:0d:83:18:34:dc:0d:69:51:1d:21:75:70:e9:7e:ee:24:2a:
ea:e0:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:57 2025 by rpki-client