Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/403b6a1d-fa11-3a6c-8722-98755c82139a.roa
File: 403b6a1d-fa11-3a6c-8722-98755c82139a.roa (raw, json)
Hash identifier: Q9DptlzhLR3+enhcJDY1+m2nNgMAh9rMbOrqD8pPQq0=
Subject key identifier: 47:D9:D2:C7:4B:82:95:2B:BC:3D:33:D3:A0:0C:C7:D0:CC:62:C7:82
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B38A3B6BA15A9DB076C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/403b6a1d-fa11-3a6c-8722-98755c82139a.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 397207
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:38:a3:b6:ba:15:a9:db:07:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=3a43ef2b-f2ca-4b6d-a16f-5231e694d492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:33:5d:96:fe:41:ae:63:8a:41:d4:c2:e7:10:
ad:5c:21:48:7c:d3:46:a4:7e:32:54:1e:6f:24:e5:
38:ad:71:f5:d3:c7:cc:84:aa:b6:be:cd:31:e9:64:
11:79:79:d1:cd:30:06:6f:2d:31:f9:d2:25:3b:2e:
59:7e:e4:f9:9b:bd:75:2f:ce:4f:e4:f8:03:62:8f:
97:2c:69:25:e3:ae:bd:cf:90:9c:71:21:af:66:3b:
4a:c4:ca:08:72:aa:aa:7c:09:04:1d:ab:4c:9e:73:
9b:af:b4:57:22:c8:dd:ca:bf:95:f8:6c:87:30:3c:
2a:85:c4:74:43:2c:bd:9c:c7:58:39:31:46:1d:3e:
86:14:fc:d0:5f:86:96:5d:76:39:9f:31:7c:e9:05:
7b:6c:e6:89:e3:13:87:cf:d9:88:8f:e1:0b:bf:33:
2e:e1:07:b2:77:03:b0:34:6b:ed:1b:95:62:d2:71:
ab:36:2a:20:9f:92:5e:a3:d5:31:e9:cf:e4:82:b9:
44:3c:cc:4c:da:88:e4:b7:71:21:40:52:70:09:d8:
f4:ad:57:16:6b:5b:be:2c:dd:72:30:ba:49:9a:45:
c2:d2:86:0e:73:2d:ad:ca:13:1a:b0:f9:b0:1b:54:
ca:d0:4c:99:1b:cb:f9:54:c1:66:7c:c6:4e:2a:d0:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D9:D2:C7:4B:82:95:2B:BC:3D:33:D3:A0:0C:C7:D0:CC:62:C7:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/403b6a1d-fa11-3a6c-8722-98755c82139a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:19:3c:fa:b2:19:eb:14:ae:6a:a6:0c:df:a4:7b:90:f8:06:
30:e3:4d:e4:94:a7:db:49:ae:29:66:06:93:90:4e:c0:f9:86:
12:c1:13:1b:d0:4d:5e:3e:06:a7:ae:c5:93:18:a2:6e:bc:e5:
e0:dd:e7:0c:6f:04:82:d8:9c:73:b3:e0:38:53:d8:e1:0c:5b:
04:bd:03:bf:bb:45:a2:ed:3c:0c:d3:1a:8f:2b:04:9d:8b:f4:
b9:fd:e5:20:cb:eb:67:e5:19:b2:c7:f9:e1:a9:92:3d:ad:a0:
5b:ad:ed:31:bc:db:68:e3:25:a5:49:66:c3:a7:a0:82:30:2d:
78:80:9c:8e:a6:e4:86:f1:c8:8f:53:0c:b6:70:38:96:7d:f1:
98:d1:28:69:52:99:2a:43:60:cb:63:e7:fd:75:c3:69:59:87:
61:6d:e5:36:88:bc:a0:68:41:a2:22:24:6a:d7:a9:de:4a:86:
ef:a2:f4:c2:be:04:f2:5a:67:0e:5a:08:81:c5:62:68:38:4e:
bb:f9:ed:98:f6:5e:97:72:ca:83:89:1e:bf:d2:7c:4a:7e:1e:
20:fa:03:37:05:05:06:66:49:6f:1a:4b:13:2f:3a:5a:9c:1c:
f7:45:f9:85:76:75:d3:c1:2c:73:fc:97:7c:41:55:22:67:5d:
56:45:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:54 2025 by rpki-client