Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4141ec46-0cc1-3aa8-a2c9-af1f2832afaa.roa
File: 4141ec46-0cc1-3aa8-a2c9-af1f2832afaa.roa (raw, json)
Hash identifier: E+g3z40q7S78BNeABXm3JIx6wSS+Wv8kzp6IGUCeWKY=
Subject key identifier: C3:7C:17:9B:15:7E:54:83:9D:37:F0:79:B6:BB:61:19:C9:4D:10:A6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3B905A1377CE35C79A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4141ec46-0cc1-3aa8-a2c9-af1f2832afaa.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 36619
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3b:90:5a:13:77:ce:35:c7:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=059df638-0bee-4301-b0ec-5f7e0e7488ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2d:1f:79:66:11:b5:f7:12:ee:1a:78:ac:d9:
c2:7c:0c:6e:5b:b9:63:0f:57:b8:9b:7b:23:49:bf:
9c:11:1e:f3:ce:16:2a:e6:ee:fc:d0:50:8d:bf:87:
4b:3d:fc:8e:9d:ff:7b:a5:c0:3a:31:4d:2f:57:6b:
4b:5e:dc:47:ef:ca:44:e1:db:a7:b2:8a:b1:74:08:
2d:86:d0:b0:f4:62:3e:0a:b8:2d:d2:76:d4:df:77:
9c:13:9b:86:05:08:1f:51:fc:8c:3d:f6:29:31:ab:
c3:cc:68:81:81:98:ec:fe:cd:97:5a:fc:d5:fc:c8:
06:77:df:d3:2e:82:e7:c2:b5:6c:e3:6d:c0:ab:1d:
f3:8c:c1:73:cd:26:44:72:86:bf:99:9d:85:bf:9b:
be:65:4c:8d:5d:0b:41:af:2d:c6:4b:c7:db:46:54:
95:3b:e6:c2:0f:f5:87:5a:99:9a:c8:4d:70:c2:0b:
d7:30:15:46:42:09:1b:2c:65:49:2d:9c:6f:3d:e6:
08:92:51:39:3e:32:36:70:14:f9:06:dc:59:5a:09:
7c:e1:8b:0b:99:62:08:28:3e:b9:52:82:86:5c:53:
b4:48:4b:b0:5f:9f:94:91:c1:c1:b2:b0:8f:22:b5:
02:00:ec:17:58:cd:60:ce:4d:34:cb:18:24:41:54:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:17:9B:15:7E:54:83:9D:37:F0:79:B6:BB:61:19:C9:4D:10:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4141ec46-0cc1-3aa8-a2c9-af1f2832afaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:76:28:82:51:31:6f:45:47:a9:61:75:ae:50:de:3a:90:d6:
33:08:96:b6:85:72:3b:f1:21:11:49:b8:9d:67:ee:c3:a2:c0:
a8:e7:45:f2:a4:c6:a2:d1:2f:da:67:8b:64:b2:3a:03:45:ff:
67:26:14:72:a0:8e:3a:ed:50:61:39:6f:20:64:92:5b:1b:c0:
09:d6:a4:bc:98:38:2a:bf:49:99:b6:75:d5:16:27:b2:0d:71:
f3:c2:46:0c:e4:3d:98:7d:5a:cc:92:c6:50:83:a3:c4:3b:e3:
ed:4f:8f:48:cf:d8:9f:d5:e9:5a:7e:03:11:67:29:64:ee:5f:
3d:4e:0d:e6:17:af:91:65:d5:7e:c0:d7:5d:0a:a6:9a:ea:1e:
28:75:ee:99:cd:64:1b:10:10:dd:2a:82:cf:c4:b0:ea:0d:9a:
a8:ed:ba:e2:86:36:87:11:bf:c2:16:70:f6:8e:30:8c:bd:6b:
ed:eb:b7:77:e6:a3:5a:51:23:3a:a5:9a:bc:8c:29:b9:e9:94:
26:51:ba:85:7f:c3:42:13:fd:d9:a9:41:3f:a4:2b:dc:62:65:
6d:bd:f7:59:6f:81:7d:8d:3a:c5:41:7a:ac:15:a1:82:95:7c:
d4:6d:a0:23:95:62:57:5f:55:82:03:48:78:03:1b:1d:a7:51:
a0:e5:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:18 2025 by rpki-client