Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/394e3a9d-3fec-39c2-9dc0-6917ff61b380.roa
File: 394e3a9d-3fec-39c2-9dc0-6917ff61b380.roa (raw, json)
Hash identifier: Q0uNvlRPSGvio8C1WpBRGmieu/CCbQH8SwQomvOR8AI=
Subject key identifier: 72:AE:46:71:35:9B:0B:74:5C:9E:23:98:07:72:67:6E:16:35:5A:8C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848854B3B570B76BFED5150FDC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/394e3a9d-3fec-39c2-9dc0-6917ff61b380.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 396553
IP address blocks: 192.42.175.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:3b:57:0b:76:bf:ed:51:50:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=2d3631e6-647a-45d3-8abe-2d2d73b8f60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:ff:5b:a5:36:ce:a4:4f:cf:2f:52:4f:56:
09:38:ba:73:28:d7:5d:af:69:33:9c:f1:38:ba:c7:
71:09:90:75:3c:20:f8:82:a4:e8:3a:5e:f6:7f:8f:
1f:e8:81:50:96:66:10:04:88:fb:28:6c:82:9d:ef:
94:a1:b7:2c:7d:56:e5:30:d9:9b:27:ab:b7:6d:09:
c3:b2:98:5f:69:72:c1:5f:d5:c2:83:2d:85:7e:c6:
b5:50:d1:93:6d:4e:b8:8f:4f:a8:3e:bb:63:42:7c:
80:b9:b1:fd:bc:e4:17:19:2a:82:1d:ea:8d:34:93:
41:c6:cb:3e:ac:df:fe:6b:5d:23:f9:26:ff:d5:43:
60:fb:96:33:e5:62:14:e3:e5:bf:d2:5f:74:f7:c9:
1a:e9:07:ef:5f:b3:7e:52:66:05:7a:dd:5b:25:e7:
1c:fa:9d:46:97:b0:53:8b:b2:e0:6f:a2:00:42:dc:
46:46:32:08:58:3a:be:27:25:05:0f:fd:5b:44:6f:
a0:f1:e4:3c:34:98:74:ca:70:e7:cc:88:d3:d7:2a:
8f:a6:94:56:d2:90:a1:99:3e:4f:97:e8:14:a6:58:
58:21:b8:6e:ee:06:e6:37:19:ac:ad:81:db:01:8c:
20:0f:f8:bc:a7:46:cf:96:b1:66:49:8a:a4:10:60:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AE:46:71:35:9B:0B:74:5C:9E:23:98:07:72:67:6E:16:35:5A:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/394e3a9d-3fec-39c2-9dc0-6917ff61b380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:49:5b:41:6a:e6:12:50:96:95:b7:10:b3:9c:41:a5:7c:64:
7c:d7:ce:d4:41:29:8e:6b:e3:cf:ac:46:e4:4e:df:ce:a6:ff:
55:6e:b0:48:8a:9f:9b:bf:d0:8b:ee:9a:ad:92:5d:a2:86:a9:
7f:ae:a4:d4:21:9f:57:34:13:b9:06:dc:98:c6:4f:bf:f3:7e:
26:6f:78:37:5a:dc:50:32:33:40:a1:ed:82:b3:64:82:e9:8f:
b1:e9:a4:87:cd:42:fa:f0:8d:a4:04:81:82:6b:90:e3:d3:d3:
c7:54:45:b9:fd:b0:ef:03:e4:5f:8f:98:5a:79:cb:94:ee:84:
e5:93:23:31:91:9c:b1:55:64:6e:b6:bf:24:42:cb:bf:0f:05:
bf:47:c5:15:99:2f:77:f7:7f:3b:db:47:02:53:10:a1:e1:56:
e6:04:c4:32:b7:15:2f:79:6e:c6:c4:5f:7c:41:01:49:36:96:
f5:ba:e4:f5:1c:44:96:fc:69:00:19:7c:49:f7:3b:ba:91:f9:
39:ee:fd:f7:74:29:1b:65:7e:6d:42:3e:20:df:6a:30:fd:9e:
c1:ac:f4:75:fb:43:5a:ff:a4:67:3c:fd:9b:12:7c:37:0c:03:
25:10:21:4c:5e:90:f5:ea:00:62:5d:6f:4e:e0:a3:32:3d:d5:
17:a8:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:54 2025 by rpki-client