Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b460ae9-5494-3573-9fc1-9ebe7ee9ff85.roa
File: 2b460ae9-5494-3573-9fc1-9ebe7ee9ff85.roa (raw, json)
Hash identifier: LJ9qwZzU6mzrhQieGWveqJ5sR6O+FmsGhog4/WNMiok=
Subject key identifier: 30:2D:8F:61:2F:27:E2:F2:9B:0A:E5:AF:AB:B6:45:B3:C6:33:E8:BA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B784478256082D7998508D60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b460ae9-5494-3573-9fc1-9ebe7ee9ff85.roa
Signing time: Thu 30 Jan 2025 13:46:20 +0000
ROA not before: Thu 30 Jan 2025 13:46:20 +0000
ROA not after: Wed 30 Apr 2025 12:46:20 +0000
asID: 36628
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:47:82:56:08:2d:79:98:50:8d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:20 2025 GMT
Not After : Apr 30 12:46:20 2025 GMT
Subject: CN=63e52005-f39a-45af-8af5-50b0c60c0fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:13:be:59:f6:3f:f4:34:65:2a:d6:5c:54:
6e:2c:2a:b7:8c:5f:4c:cc:e2:f9:6b:31:72:4c:47:
06:cc:b3:b9:02:50:be:5d:f0:be:6a:fc:08:79:59:
72:e2:8f:1f:00:14:71:df:86:19:5e:d0:f1:e6:ad:
4a:31:e1:a3:9d:31:92:4a:40:1f:41:1c:e7:8f:48:
a3:2b:56:13:a4:a8:20:f1:1f:cc:05:16:88:c0:42:
2a:17:ca:b7:d4:f4:75:22:7d:26:60:89:a2:44:38:
65:48:86:00:95:0a:23:ab:f4:ca:02:f0:f8:22:f0:
25:e2:0b:cc:20:64:dc:ab:72:00:80:18:0b:ec:37:
84:22:2e:99:60:44:af:49:33:b5:19:9a:a3:8b:dd:
01:28:94:e7:03:5f:93:3b:2c:28:1e:e6:24:e6:77:
af:12:ec:e6:9e:68:3b:c3:af:81:43:a2:be:62:f8:
ff:37:5e:bf:66:27:2c:18:62:78:89:d2:f0:4d:74:
0f:e9:71:91:49:7b:b7:75:ac:22:4c:11:6a:3c:06:
d4:95:50:2d:b3:16:58:01:44:f5:be:e3:3e:92:94:
6d:64:46:39:8b:03:50:6d:f7:0f:09:66:4b:63:62:
4a:6d:79:2a:16:dd:d7:8c:dc:71:7b:b8:98:e4:12:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:8F:61:2F:27:E2:F2:9B:0A:E5:AF:AB:B6:45:B3:C6:33:E8:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b460ae9-5494-3573-9fc1-9ebe7ee9ff85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:5c:55:64:58:64:23:e1:ce:ff:3c:24:3f:91:33:33:56:15:
75:26:68:8f:4b:28:ed:bf:91:2c:16:70:94:5d:1d:1a:db:13:
db:32:ca:ab:99:04:7c:be:a0:17:c9:81:fd:1b:46:9b:24:33:
19:57:fd:08:35:21:d2:2a:9d:35:bc:8b:31:70:11:08:9f:a8:
d4:36:11:f6:42:6f:ea:9f:5d:fd:68:ba:36:55:f4:ed:49:aa:
b6:8c:70:0d:0e:a4:27:66:74:22:9d:bc:c1:86:21:b5:c9:8c:
09:ae:c7:a5:84:07:04:34:60:b4:40:75:ff:35:9d:de:ad:58:
9c:e9:b6:86:47:d3:f8:12:0c:e0:65:bb:c2:65:79:46:6c:2f:
af:6b:8b:66:bf:ce:64:10:e5:63:ad:a7:3b:3d:a7:7d:af:8d:
5d:18:06:db:1c:07:13:6e:a1:29:87:2f:89:b0:b0:f9:77:83:
88:51:d5:73:05:86:59:8f:6c:6c:cf:1e:dc:46:5b:cb:36:4e:
b3:43:a7:3c:26:58:3a:b9:b7:69:c8:ad:21:0e:f3:77:67:8c:
d3:d7:b9:fc:e3:45:23:50:59:cd:eb:e1:30:64:6d:3d:56:34:
30:f6:af:f6:45:79:0b:77:4e:ff:db:6f:e7:33:21:e9:cc:3f:
aa:71:6c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:30 2025 by rpki-client