Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a846d28-2653-3a4a-b197-d575cf6db4ce.roa
File: 3a846d28-2653-3a4a-b197-d575cf6db4ce.roa (raw, json)
Hash identifier: Z3jTdfww2zlJbmTe8McBHQMH96vzgwpkzPCqNIV8EgU=
Subject key identifier: 08:D0:18:E3:2E:94:10:EB:5E:3E:C6:F1:41:E9:A3:E9:11:92:02:A1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F898E6B1A9D6B3F4D400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a846d28-2653-3a4a-b197-d575cf6db4ce.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396604
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f8:98:e6:b1:a9:d6:b3:f4:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=a9ab05b5-4d31-43bc-8b12-7bb6a2033936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:e4:59:59:05:d4:fe:5e:4c:aa:78:28:cc:
48:ef:a4:de:ff:b5:5f:1f:43:f5:f9:57:53:d9:f0:
08:97:42:12:c8:24:39:67:61:44:87:4e:a6:76:f3:
19:68:e5:27:1d:28:57:3d:0e:d4:05:60:5d:ee:5b:
11:d9:f7:e6:9a:38:45:09:e6:f5:b5:ff:40:e8:8c:
1f:40:ac:06:d2:b3:2e:7b:ec:07:f9:f4:63:9e:b9:
45:2d:fe:1e:08:a8:94:93:cf:0c:42:c9:cb:0f:91:
c2:a4:fb:db:4e:a5:b5:0e:b6:e7:6d:f7:c2:ce:3d:
22:06:a6:88:00:e7:06:6c:29:8d:a4:0f:0e:a3:83:
7b:5b:be:6d:30:6a:b7:0b:1c:5a:b2:69:78:3d:62:
0b:68:e5:bf:d4:1e:dc:87:7e:b2:a1:2c:35:db:15:
1b:c1:ff:fe:30:63:54:ae:fe:25:67:28:8a:f2:49:
80:11:b2:da:70:3f:d3:1e:0c:b6:41:a7:ea:27:0e:
ab:2a:2c:35:66:57:3c:0f:4f:fb:c8:b1:8a:b9:e6:
12:cf:2c:36:17:8d:e3:b8:4c:9a:cf:b7:f9:03:1c:
d0:51:3e:58:2b:70:55:2f:31:10:af:d3:0a:83:65:
4d:d3:cf:9a:a1:0e:87:2b:bb:4f:6f:61:cd:a3:a2:
f7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:18:E3:2E:94:10:EB:5E:3E:C6:F1:41:E9:A3:E9:11:92:02:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a846d28-2653-3a4a-b197-d575cf6db4ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:b3:59:80:0a:f7:cc:5b:fb:fe:e7:e6:5e:15:dc:c1:6c:b9:
d1:57:d8:ce:23:3e:15:5d:76:aa:d4:e7:ca:d2:66:fa:18:35:
38:64:09:00:f2:5f:12:57:67:e6:b2:46:b1:e6:64:cb:49:6f:
a3:1a:ab:54:09:27:de:b8:09:1c:f4:0f:e0:dd:73:fc:9a:1d:
7b:a0:b9:5d:3b:80:21:0d:09:1e:15:28:d8:ec:e1:ba:6e:bd:
51:56:10:d1:1f:41:ed:28:e9:ca:9f:91:75:f4:52:f4:0c:3b:
d9:3a:bb:9b:f6:fd:c7:23:31:a6:8f:ae:cc:30:02:6e:9a:5e:
c5:da:b0:95:81:12:2e:29:67:c9:0c:31:ca:f3:7c:fe:b9:2a:
73:02:d0:a5:c4:de:1b:1c:90:79:25:f3:44:e1:5e:db:f4:f9:
95:6f:e1:15:f8:e7:d5:2d:ec:7c:41:9e:c2:41:0f:44:a3:30:
3a:6c:ac:0f:58:57:cc:36:8b:ba:50:e0:ce:1b:64:26:9a:11:
be:e0:5e:a5:3c:68:05:4f:82:a4:1e:fb:d6:21:84:64:28:fb:
49:10:03:6c:05:83:b6:08:4d:96:e9:80:63:6a:90:db:4b:b0:
d2:59:3c:bb:e8:fb:c3:89:ea:14:76:68:3e:e1:f0:fa:6c:1d:
b9:82:eb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:15 2025 by rpki-client