Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281292ae-b69d-3235-a21a-d3c0d8ecf973.roa
File: 281292ae-b69d-3235-a21a-d3c0d8ecf973.roa (raw, json)
Hash identifier: E4jEwP6kPpuB8S6uFnzseI6taLkQ47opOBBVyBh0wIg=
Subject key identifier: B7:CD:38:82:BF:7B:C1:A3:5D:E3:C5:2C:2D:51:4A:D6:06:A0:85:50
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AF2BB0FEF46332364E64C780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281292ae-b69d-3235-a21a-d3c0d8ecf973.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 36625
IP address blocks: 192.81.185.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:b0:fe:f4:63:32:36:4e:64:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=d205e3d7-631f-45e1-a520-8d18af232d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:5a:6c:e1:e6:b5:78:ae:d3:06:c6:32:c9:
88:4d:c1:de:2b:0a:19:76:55:02:8a:8f:cf:cf:ff:
77:43:1b:e8:28:88:38:9d:72:d4:ff:4a:77:74:98:
61:43:f3:67:00:b6:37:1e:ae:30:6f:9e:7a:2f:22:
0a:05:a0:0d:33:49:24:5d:b8:39:0f:90:dd:1b:e4:
1f:c1:84:ab:c8:96:f7:af:46:85:15:1e:df:21:82:
61:3b:62:a6:d3:e7:43:bc:69:63:db:53:b3:3d:b1:
ba:d0:f8:aa:e0:32:a2:96:c7:17:93:65:ea:23:d1:
10:f0:26:cc:0c:a4:bf:8c:27:d7:7c:ff:54:01:db:
9a:27:17:ff:91:b8:e4:87:9c:44:f3:25:b6:27:97:
04:70:f3:5a:d2:02:29:40:88:4b:ad:85:1e:cb:03:
c1:6e:84:c4:12:f6:d5:f5:49:d5:1e:61:6e:37:7c:
09:95:68:11:a2:0e:fd:39:fb:b9:79:5f:8d:f0:cc:
ab:c8:79:d1:12:9e:80:86:cb:1f:d9:06:33:05:bb:
de:8a:ab:ce:b9:8f:fe:43:81:9c:33:39:6a:01:1d:
e2:6b:0b:e6:91:ba:43:01:8d:0f:37:6a:a5:a2:c8:
10:e1:b2:ac:d9:a1:a0:43:41:45:9b:7a:80:58:f0:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CD:38:82:BF:7B:C1:A3:5D:E3:C5:2C:2D:51:4A:D6:06:A0:85:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281292ae-b69d-3235-a21a-d3c0d8ecf973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.185.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:4a:01:eb:02:c6:e9:e6:68:1e:3a:84:5e:98:ee:d2:8c:7e:
ae:ec:ac:42:c1:23:61:81:91:83:c7:ab:16:c1:4c:f8:1c:b5:
90:69:3d:39:21:37:1d:68:d8:ab:0f:eb:f3:01:88:ef:2c:cd:
3e:60:06:bd:c9:6f:3e:04:81:6b:f9:04:75:14:94:26:82:1f:
7c:17:49:0f:ee:00:5e:94:4f:75:a3:b3:11:de:f0:43:43:d3:
3d:90:33:01:37:ec:e4:9b:b4:07:f4:78:48:25:60:69:42:c2:
23:ac:62:01:e8:2f:ab:a7:cc:5f:94:fb:7b:3c:39:d4:75:13:
c0:fd:e3:94:af:59:4a:29:06:69:21:08:54:65:d1:07:6e:28:
2d:93:23:7a:6f:83:76:39:a4:0f:08:d1:14:52:0d:24:d3:51:
44:05:97:a6:ba:4b:4d:eb:98:55:62:0c:0c:12:17:e3:0e:4c:
2f:de:85:dd:e8:23:43:28:75:5a:08:8d:ad:46:b4:83:36:38:
90:40:44:d0:81:3c:b7:f9:89:73:ff:ec:fa:27:40:81:01:0f:
7c:9a:71:20:61:b1:2c:81:64:27:e2:52:8f:84:e9:b2:ef:cb:
b6:5a:a3:46:cb:e4:90:ee:d3:e2:2b:34:d2:99:64:6b:4d:f0:
4c:17:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:11 2025 by rpki-client