Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/311ef78b-cfc1-385e-b00f-13ddc0f8a815.roa
File: 311ef78b-cfc1-385e-b00f-13ddc0f8a815.roa (raw, json)
Hash identifier: U2sxfYrcfs5Thb/TzVW5efeoqvmsHEekohxuMTz94GI=
Subject key identifier: 07:2A:71:8F:99:21:56:A1:4E:88:E4:92:D5:97:25:2A:3E:93:7F:9B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3FEFC4F8F4FD65E036C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/311ef78b-cfc1-385e-b00f-13ddc0f8a815.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396569
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3f:ef:c4:f8:f4:fd:65:e0:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=0b45001e-a003-45d0-afc2-e22c26c7be89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:b0:df:ff:3f:9f:4f:2e:0b:83:b4:e0:32:
be:d8:37:cc:ed:61:01:ab:59:98:d6:ca:26:2b:03:
e0:31:c0:68:6c:7d:47:d4:80:a0:40:ad:aa:36:51:
18:77:f6:2b:50:28:12:cf:25:f2:e1:d1:61:ec:80:
c0:5f:e9:e1:58:0f:af:6e:d1:4a:15:61:51:f4:b3:
08:91:0c:d3:f1:d8:93:ed:6d:2a:3b:16:bd:de:d8:
72:1c:c5:b5:13:95:83:5d:63:87:2a:60:13:5e:68:
24:fe:2b:5b:42:9d:b7:16:3b:f1:f4:cb:b0:09:72:
25:c1:6a:30:2c:66:b1:e6:8b:8b:c6:69:a7:40:e9:
bd:a6:7c:57:b2:20:36:58:1a:c2:a9:2b:22:62:07:
9d:6e:a0:5d:ed:0d:a0:2e:1a:ec:33:55:50:a3:4c:
59:05:32:a3:e9:37:a5:44:69:9b:ea:59:05:23:52:
2c:e1:4d:e9:3f:79:c7:d2:eb:9e:42:fa:54:d8:f1:
24:b5:32:50:d6:76:15:6e:f4:a8:29:69:c9:d1:2a:
fd:0a:1c:3c:08:cc:e7:3d:68:24:7b:eb:0e:07:28:
1c:f5:d2:58:34:e5:6f:b9:e9:03:f5:f6:57:b7:59:
7b:6d:d5:e5:e8:f5:a7:e3:a6:78:6c:a9:47:7a:0f:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2A:71:8F:99:21:56:A1:4E:88:E4:92:D5:97:25:2A:3E:93:7F:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/311ef78b-cfc1-385e-b00f-13ddc0f8a815.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:e3:e3:cd:c3:2d:18:bd:6b:f7:51:d7:f2:6c:b0:c2:3c:84:
cd:81:41:20:d9:70:b3:c3:c7:bd:a1:bf:26:90:af:52:4c:18:
8d:5b:d3:96:d4:dc:01:27:b3:75:08:13:42:8d:8c:0a:e0:ab:
2f:a4:29:bc:c2:51:db:31:40:c5:02:44:de:62:58:49:94:d1:
89:92:52:6f:89:7c:7b:f1:d8:34:8b:17:c1:70:e3:12:9e:f3:
b7:2a:fb:51:1f:00:37:33:ed:e3:73:e7:db:72:29:d3:c3:8c:
1e:f6:a2:38:a2:31:5a:1f:a3:e3:6c:69:28:8f:25:20:94:ca:
45:71:3f:e4:e7:30:be:ac:64:b9:29:91:c9:61:03:0a:d6:4e:
29:62:b4:90:9b:04:43:14:5d:3f:68:ad:23:84:69:35:0d:1d:
9a:a0:49:67:d9:2c:8b:74:3c:57:46:73:de:f8:cc:73:85:6d:
b4:d0:2f:9b:ea:84:1e:ad:95:78:46:bf:12:b1:26:de:ed:b6:
4e:15:d5:da:4c:08:7b:89:41:36:28:3f:3f:6e:93:3e:23:86:
c6:e5:a9:c8:8e:4a:5b:cb:a4:37:69:18:43:04:e2:70:a9:a1:
c0:46:0a:0b:dc:af:e6:ad:28:2f:19:5a:f0:39:a0:1f:05:c9:
a7:73:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:43 2025 by rpki-client