Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4107150a-e5dc-3f35-bcf3-251030df5910.roa
File: 4107150a-e5dc-3f35-bcf3-251030df5910.roa (raw, json)
Hash identifier: 0z7iTJNcb7HHr9Hz5/6ZI1XC0UBjFss8QjK39CaYf0o=
Subject key identifier: B4:1B:DA:E5:29:87:D6:A7:20:AC:DF:90:00:4B:29:96:61:87:02:16
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AF2BABD31FCB11C73ED1BD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4107150a-e5dc-3f35-bcf3-251030df5910.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 396570
IP address blocks: 192.81.185.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:ab:d3:1f:cb:11:c7:3e:d1:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=6dc24568-3c84-472f-a97a-8941a3b6b8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:84:23:ec:64:0a:7e:8e:21:04:1b:b9:fb:
01:a1:96:be:d1:73:6b:4f:4b:bd:db:58:c8:ba:db:
66:17:48:fe:1c:75:35:e6:93:f3:97:df:93:3d:3d:
e5:a6:32:3f:0f:b6:99:a3:fc:a7:8b:c9:5a:51:76:
4a:54:e3:28:94:b1:38:25:28:3d:89:3b:04:b8:af:
4c:48:09:01:13:6a:ac:5b:b0:54:9b:c7:5a:97:a6:
cd:1b:33:ae:1d:0a:17:70:09:55:16:0f:28:77:de:
f5:62:53:14:96:23:cf:3a:e1:c5:4d:2b:c5:56:16:
cd:6c:e9:48:46:1d:3b:f5:d5:a2:0a:51:2b:21:dd:
59:09:69:81:72:c3:4e:71:1f:90:55:bc:9a:7d:a8:
f9:d1:53:89:7a:a9:fb:de:2d:c9:5a:b2:9a:ba:6d:
c1:51:1f:0b:bd:ec:9d:86:f2:fc:41:b7:53:3e:8c:
af:20:90:39:ab:06:5b:ea:58:b4:fe:17:ce:56:27:
16:8b:cf:d6:2f:e6:e7:cc:fa:72:35:15:85:c8:39:
73:06:a9:73:bd:49:62:1b:4c:c3:8a:43:e6:a9:5b:
e0:5e:7d:1a:29:30:1e:e7:44:b3:c8:05:ad:aa:bb:
1d:56:54:d5:19:67:7c:74:75:90:01:93:a5:64:13:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:DA:E5:29:87:D6:A7:20:AC:DF:90:00:4B:29:96:61:87:02:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4107150a-e5dc-3f35-bcf3-251030df5910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.185.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:53:f0:2e:cd:84:ac:7f:8d:a9:9b:89:31:30:8b:27:3b:17:
51:ce:aa:b6:7b:25:8e:1f:a2:c5:47:05:0f:a9:bf:0b:41:20:
cb:bd:ab:46:30:cc:2f:69:f3:b4:44:cf:e3:4f:55:46:01:8a:
5f:f4:76:5e:dd:4e:50:b1:05:24:94:90:98:98:9f:62:f6:ef:
64:35:bb:fe:b1:24:e5:40:55:69:26:d7:64:9e:f2:b6:39:94:
51:e2:25:2b:61:23:28:03:73:3f:a8:1e:0c:79:a2:19:59:0b:
4a:25:aa:5d:c7:21:58:9b:f1:c6:e3:e6:b0:d8:9e:57:bb:39:
d3:f5:a4:d1:3a:fb:3e:27:bd:f8:80:71:aa:b7:21:81:2a:4a:
4b:57:3c:fa:5b:5f:db:64:78:14:1b:43:1e:40:59:ff:c4:e9:
7f:d8:4a:48:63:50:95:07:bc:af:82:45:d2:7a:65:f3:4f:c1:
88:74:0d:07:d9:43:af:a2:de:02:72:53:8a:95:4d:93:27:2a:
f7:0a:38:f7:63:4e:aa:52:0b:53:44:d7:bb:46:bd:51:9c:f9:
a5:62:90:54:a7:3a:e1:d4:7f:96:50:cc:5c:45:f7:4c:4e:58:
49:a0:5e:01:7a:90:55:e4:7a:98:69:87:c5:1a:d0:7c:1c:d0:
02:0a:04:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:55 2025 by rpki-client