Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ccc0385-d110-3f4d-a9de-0e7c1b3abccb.roa
File: 3ccc0385-d110-3f4d-a9de-0e7c1b3abccb.roa (raw, json)
Hash identifier: vctSL3FPqm5ds6AiYzvIbX/Kwcb+iMzg33pQ8W0KjeU=
Subject key identifier: D4:79:14:DD:84:44:42:B8:A5:A5:71:6E:9E:D6:3F:3D:5F:DF:31:CC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5D7C14E5D1ED98A011500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ccc0385-d110-3f4d-a9de-0e7c1b3abccb.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396589
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:d7:c1:4e:5d:1e:d9:8a:01:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=46ffd9c3-7704-48af-a5fd-b8eb34262bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:37:e1:30:c7:b3:cb:6f:38:f5:76:7c:28:2c:
06:70:2f:34:d6:65:e9:87:f4:79:f3:9d:72:ca:30:
bf:45:56:c5:5a:d7:68:05:2a:fe:6f:8f:77:a3:a2:
96:cb:d7:8e:1b:07:67:77:8f:11:f1:ff:d6:85:5a:
42:6d:d5:6f:07:cb:23:a5:17:a8:f4:3b:92:70:79:
09:d1:58:c5:48:2b:97:45:89:5a:5f:8d:06:72:57:
a3:cd:4b:62:51:9a:88:6a:0b:4d:4c:59:b5:03:cb:
65:38:db:6d:94:b4:1d:c9:59:2c:00:77:05:cd:3f:
34:44:2a:59:76:c3:4b:a6:d9:4e:a5:21:49:06:f7:
1d:2c:5d:15:2b:77:e3:c5:a9:d4:11:e4:40:25:ea:
0b:5e:db:70:1a:70:af:79:60:82:eb:d5:8d:a2:57:
24:f1:36:3e:3f:c7:51:b1:68:d4:e0:5f:3f:fe:92:
1c:e0:ef:ce:d5:7a:a9:90:a0:28:02:88:6f:1e:38:
ad:10:87:98:85:43:50:94:ba:fa:0e:e9:7d:71:65:
ea:cc:e9:d8:d4:db:66:d8:11:43:e6:3d:cc:2d:46:
b4:ea:3d:53:01:60:f1:21:83:32:bf:9a:93:35:f9:
e3:3d:55:bb:d6:a4:5c:08:01:10:a7:1b:bb:e6:27:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:79:14:DD:84:44:42:B8:A5:A5:71:6E:9E:D6:3F:3D:5F:DF:31:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ccc0385-d110-3f4d-a9de-0e7c1b3abccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:33:a2:b2:9b:67:f9:14:86:2a:a3:3c:d3:b4:5b:a6:f7:d9:
96:6a:fc:e8:6d:c1:da:fa:c9:61:95:07:32:f1:89:bd:12:de:
d2:64:55:8d:12:ec:01:f4:7e:66:76:0e:1d:23:4c:f8:88:39:
50:94:d7:e4:f6:df:c1:66:1c:5f:44:2b:53:1e:a4:b3:56:cf:
5f:b5:13:84:05:c9:f8:72:ea:e4:e4:f5:d2:a5:77:ce:ec:40:
76:8a:c5:ca:57:cd:05:c7:5c:1d:bd:72:56:bd:fb:d4:be:e6:
43:11:ea:25:81:2d:f4:2c:0f:fd:4d:86:45:57:55:bd:f8:b5:
11:da:5f:1c:30:d3:81:05:ca:77:ec:d4:76:b9:c7:ff:ac:27:
5c:4c:f9:62:c0:d0:35:90:09:7d:21:ee:7c:d5:af:fe:6d:23:
3d:6e:42:07:16:ae:a7:81:28:c7:36:b3:ab:18:a1:13:c0:c7:
aa:a9:58:64:96:ba:8d:6c:51:21:1a:69:3b:b7:86:56:5d:66:
a0:fd:bf:9d:e7:e2:2b:4a:2c:81:9b:96:07:41:51:b1:97:06:
59:43:c0:e5:49:0a:ac:72:c0:21:c4:bc:0d:96:04:30:8c:08:
11:98:d1:94:ca:cf:45:c0:f2:ff:23:2e:36:1c:4e:36:20:12:
2e:c3:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:51 2025 by rpki-client