Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa
File: 3e8607d6-bc0a-3404-adea-1dc766049cd1.roa (raw, json)
Hash identifier: UWP+J8aVux8D5egoBpbpn/1+fiHuTn7cuHh2bzJ3S7Q=
Subject key identifier: 81:B4:26:5E:B3:80:8B:6D:E4:4A:74:F3:84:31:4C:85:F6:4A:F4:31
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B78447BCE278A2B97BDAA9A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa
Signing time: Thu 30 Jan 2025 13:46:21 +0000
ROA not before: Thu 30 Jan 2025 13:46:21 +0000
ROA not after: Wed 30 Apr 2025 12:46:21 +0000
asID: 396617
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:47:bc:e2:78:a2:b9:7b:da:a9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:21 2025 GMT
Not After : Apr 30 12:46:21 2025 GMT
Subject: CN=53ff8002-a02e-4893-8da5-4a19b88ce42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:07:a1:44:10:11:58:f4:3d:36:18:66:4d:
0b:30:19:61:e2:a1:1f:5f:2f:b9:51:b4:d0:6f:64:
9c:8e:26:1f:89:19:d1:c4:5e:1e:d1:41:ec:55:94:
56:2d:6f:3a:74:b7:6e:54:96:b8:95:2b:66:86:a0:
ff:f1:68:01:45:c1:fb:04:7b:ad:a8:50:57:49:d0:
ef:11:c3:ac:08:ed:26:5d:7d:0f:0f:56:62:6e:4e:
3a:02:3b:93:ad:71:d3:61:ab:5f:e4:92:26:b9:98:
a2:3e:50:cf:a2:8b:e3:7c:1e:f8:0b:f2:1b:7d:ca:
83:19:18:e3:f9:1e:3d:b6:e1:87:ae:7a:ea:52:bc:
67:e8:b3:70:d3:d3:96:d4:31:1c:fc:b7:a3:23:6a:
e9:84:bf:df:5a:ab:06:df:71:fd:eb:af:28:ef:d9:
c7:a0:2e:a0:15:4d:ff:b5:3c:5b:65:65:a6:b9:5a:
cc:2f:67:f4:78:31:60:a0:e8:fe:8b:21:9c:f3:16:
0a:a7:0f:06:b2:e9:3d:94:e3:46:b5:b4:6e:85:9a:
3b:bc:65:e9:45:1e:48:49:34:85:bd:fd:86:67:3b:
2a:27:33:a3:b7:5b:bf:87:ca:4c:39:d6:04:b1:62:
bf:eb:cd:d9:6a:b6:8a:5e:3f:75:83:dc:0a:13:e7:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B4:26:5E:B3:80:8B:6D:E4:4A:74:F3:84:31:4C:85:F6:4A:F4:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:20:4e:cb:e2:45:0d:f0:51:44:4b:12:0c:75:fb:6c:b0:47:
56:df:aa:7b:5c:2a:30:04:02:c9:44:f3:8e:97:63:f5:a1:33:
77:9b:d4:0b:35:f3:d0:6f:28:50:56:8c:92:7f:14:a5:c4:d6:
23:06:ac:20:2a:46:22:43:ba:6c:30:80:c5:ba:e6:e1:90:9a:
1f:fd:34:a2:cb:ad:c6:f0:be:ed:3c:e2:ea:77:6d:e3:43:6f:
2b:ed:84:6d:61:96:75:cf:d0:f9:61:ff:43:67:7c:f2:59:9e:
6e:25:24:69:fa:75:a9:f2:14:a1:f9:bc:23:16:0a:93:2a:7c:
05:b7:d9:56:ec:95:21:93:7b:47:d2:37:a9:32:85:78:ef:ad:
39:c5:de:1c:77:33:0f:f9:c1:07:8c:62:c7:8a:c4:47:f3:cb:
8d:60:0f:46:97:0e:56:65:91:38:3a:f9:1d:aa:c0:88:8e:26:
ff:13:61:dc:27:5a:64:ee:54:f5:c5:40:de:ba:ce:db:c1:f1:
e6:e6:93:ee:bd:e1:d5:89:40:c1:d6:cb:e1:b0:c1:36:58:ef:
2d:d1:f9:9c:7a:57:9f:04:03:49:2b:14:6a:a1:14:ab:03:39:
94:aa:1b:c7:1c:fb:8a:49:5d:a9:91:55:2e:bc:a8:eb:5d:5e:
6c:51:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:36 2025 by rpki-client