Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ed3c2f4-a5cd-3723-b337-07ec529bfe2b.roa
File: 2ed3c2f4-a5cd-3723-b337-07ec529bfe2b.roa (raw, json)
Hash identifier: fsLod0D8SRfQRQbGE1spg1mUG5hE+iEBfcGtFPWrvDM=
Subject key identifier: 97:D0:71:23:02:E1:E6:77:52:36:7C:AA:71:85:A8:9F:EE:30:B2:11
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B396DE9F2746DF4E05E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ed3c2f4-a5cd-3723-b337-07ec529bfe2b.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 36631
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:39:6d:e9:f2:74:6d:f4:e0:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=21255ec0-7933-4641-8760-35541ed37795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e5:3c:a1:7a:00:00:10:d7:65:ef:b6:40:39:
83:13:90:f5:3a:94:18:3e:57:33:25:8b:b1:80:72:
29:66:ca:17:f9:a4:9f:de:af:04:30:3c:08:14:a1:
28:62:03:e7:1c:8c:9b:5e:c9:1f:bb:6a:5e:17:3e:
e1:cf:df:73:a4:da:e3:72:29:7d:32:fb:2c:3d:f2:
c3:c5:51:97:dc:05:c7:4b:73:86:77:10:e7:3d:c0:
35:fc:7e:a3:62:5f:ac:8f:ba:f9:0a:63:62:a2:fa:
c3:c2:53:54:5e:94:43:b4:9a:94:0e:ce:f5:29:11:
3f:2d:76:cf:96:8d:1c:5f:59:e6:b1:cc:38:34:6e:
3f:d3:4e:db:6c:e5:18:0d:af:ae:65:e7:d4:48:c2:
8e:92:ed:6e:98:6c:5b:30:8f:b9:05:a7:d9:ac:71:
9f:1d:1e:9a:a0:b1:73:6b:3c:41:e3:e5:40:39:1b:
5c:ae:af:73:4c:a8:07:f7:0f:d3:b1:55:43:88:f0:
1d:db:86:4c:e7:68:2c:32:7b:ff:12:b6:c7:20:4d:
de:79:db:d5:60:d8:ef:05:24:c7:54:a9:48:84:bf:
b6:44:34:27:7f:f8:83:10:8d:39:a0:95:90:41:b9:
2c:e6:5f:21:20:0e:25:8d:1f:2c:27:47:54:24:af:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D0:71:23:02:E1:E6:77:52:36:7C:AA:71:85:A8:9F:EE:30:B2:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ed3c2f4-a5cd-3723-b337-07ec529bfe2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:35:d5:f1:dd:da:29:58:56:ff:f4:9d:6c:e1:ba:8d:e4:02:
32:a2:d9:2b:0d:23:9f:aa:33:4b:96:ee:a3:84:19:51:82:e5:
e8:e6:e3:80:f1:ea:11:b2:be:5e:c0:e5:61:7e:76:ae:1a:7a:
f6:19:f3:7b:ea:99:50:d4:d9:de:88:c9:f2:b3:8a:3b:82:fa:
9e:fc:ef:7e:e2:c6:b3:63:b8:47:da:72:8a:f7:83:ef:da:82:
bd:18:92:af:bc:62:15:46:f9:46:57:fb:2d:0a:7a:cb:75:51:
26:af:4d:fe:3a:ce:5c:54:25:aa:07:02:62:fd:fd:d0:41:b6:
cc:a8:88:10:1d:b7:5c:b8:25:69:31:33:e9:cc:3a:48:6c:ce:
fe:97:88:fa:ae:41:d9:d5:5d:e8:d0:4c:0a:f5:5d:50:ee:a9:
35:02:ad:8f:80:e7:09:b8:32:49:3e:0b:ce:6a:49:16:f0:ef:
00:91:6c:00:92:f2:52:88:d6:20:3d:46:cd:80:7b:02:65:38:
c7:ee:fc:9e:2d:88:21:ed:c6:11:d2:65:64:70:1f:dc:76:3e:
aa:cd:ce:01:b0:da:7e:96:3f:b4:11:70:29:c1:71:22:c9:0f:
f3:d6:41:6e:c9:3b:ef:86:d2:36:d7:0e:85:b3:21:d2:0c:95:
10:41:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:08 2025 by rpki-client