Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44431121-9815-315d-8697-70ccf679f6ff.roa
File: 44431121-9815-315d-8697-70ccf679f6ff.roa (raw, json)
Hash identifier: vKbDt4po+3PhxyrgHl1afPbHtO1UyyYZj80Qzmy+cio=
Subject key identifier: 7F:DF:16:3B:19:B5:E5:AD:CA:22:D7:6A:DC:91:CB:B9:0C:EC:05:ED
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183CAEA231CBB95E652E300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44431121-9815-315d-8697-70ccf679f6ff.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396544
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:ca:ea:23:1c:bb:95:e6:52:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=1f823a17-fe41-4b2f-9996-c39c9441cfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:bb:3e:b8:4c:54:ff:4b:6f:1a:75:99:7a:
2b:51:dc:a8:ca:3e:1a:e2:07:6c:a2:37:85:22:54:
49:cb:ea:a4:ec:c2:61:a3:ff:e6:3d:22:17:b0:ac:
c6:64:e4:94:65:a1:9c:4f:ad:7c:4d:b8:00:35:0c:
cf:80:5f:ae:33:a2:1a:be:2e:b7:c9:a5:76:cf:27:
c8:cd:cb:3d:e0:6e:63:aa:70:7f:88:7a:16:ff:2c:
16:61:46:2a:42:59:e1:a7:f4:73:7d:58:6c:6c:f5:
da:66:f6:7b:68:3e:04:ed:46:10:19:39:67:01:77:
3f:54:eb:ca:b2:c8:78:f4:bd:75:26:69:16:17:81:
c4:3d:b1:52:99:f3:b8:74:94:ac:bf:6a:7e:45:4c:
b3:2a:dd:9b:35:a8:0b:f3:7c:67:06:9c:35:39:51:
92:31:9e:27:3b:23:49:be:e5:87:69:ed:37:fd:58:
98:49:c6:32:63:69:79:e3:b5:c0:0a:92:c2:d6:3e:
4f:d9:11:06:5c:45:09:6d:8c:06:52:40:fe:07:f8:
5f:54:6a:b9:86:64:c0:96:c1:4f:14:37:09:1b:21:
e3:02:28:fb:c5:95:70:41:5d:c8:85:4d:83:25:56:
ca:bd:ef:51:78:74:be:19:eb:27:87:cf:1d:fa:72:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DF:16:3B:19:B5:E5:AD:CA:22:D7:6A:DC:91:CB:B9:0C:EC:05:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44431121-9815-315d-8697-70ccf679f6ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:eb:01:61:1b:61:3a:94:63:26:2d:10:c4:17:35:f6:fb:31:
9a:30:a1:5c:5f:88:2a:66:e8:f7:ec:4d:e2:48:30:5d:27:d9:
33:80:b7:d2:c9:00:ad:78:0d:99:38:34:02:72:39:aa:12:2f:
e5:b7:90:19:4b:9b:1b:6c:30:86:d3:9f:6d:d2:91:ee:ff:5b:
99:a6:1b:d5:27:06:1c:2f:5d:e0:d1:e4:d8:4e:1e:72:4b:d8:
05:c5:01:77:00:34:ba:11:3b:fd:6b:11:86:e2:04:76:6a:ef:
40:a8:2c:26:ba:0a:4c:20:33:bc:00:78:33:be:8f:26:12:f3:
c2:20:6b:d1:6f:a6:10:16:75:58:13:29:16:14:d8:81:ef:ae:
f8:a0:b8:dd:1a:7f:f1:ff:53:93:50:a4:68:a8:f5:04:bf:97:
08:cc:e2:41:d9:08:3f:ed:6b:04:75:d0:6a:dd:a4:67:ed:10:
ec:ce:0e:33:09:86:09:c0:ac:8d:04:fa:f3:d8:65:b8:a5:a0:
0b:4e:7b:de:88:1a:ac:ba:73:13:77:b2:e7:14:70:f5:46:eb:
40:4b:5a:ec:a1:b6:56:7a:04:b3:9e:13:03:39:ef:fe:ba:da:
6d:4c:8c:cf:85:3c:1b:57:bc:7f:89:b9:ad:c1:ab:d5:11:ab:
97:ad:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:38 2025 by rpki-client