Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4667e1da-e08c-302b-ac16-437baa9e0fbc.roa
File: 4667e1da-e08c-302b-ac16-437baa9e0fbc.roa (raw, json)
Hash identifier: G9jGE048kfodPuH6OR455O/+8LYQJV4ZMxEdmElf1QU=
Subject key identifier: 2F:94:B5:34:A6:82:4E:69:4E:52:9A:A6:99:B1:D0:45:1C:36:34:05
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183FA463E2F2F9016012600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4667e1da-e08c-302b-ac16-437baa9e0fbc.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396547
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:fa:46:3e:2f:2f:90:16:01:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=90927859-f75b-4b0c-b51e-b70f97b687ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:91:50:b0:93:d0:65:bc:33:b3:2b:1f:e2:
95:82:61:5d:93:66:c0:2b:8a:1b:92:ea:2a:97:34:
77:8b:63:0a:3f:31:dc:70:a5:ca:1c:fb:8b:3c:fb:
9f:50:7e:7e:82:4c:d1:e1:a4:31:7d:9d:9d:df:2e:
85:06:ed:11:64:fc:9d:d0:dc:b1:90:8d:00:66:20:
3b:44:8f:ff:8c:00:28:28:c9:fc:27:66:e1:f3:6b:
97:5e:e3:f6:67:ad:4e:49:98:39:8f:35:5e:94:98:
09:46:9e:a2:3f:78:c2:fe:5b:a0:fc:8b:5a:13:0f:
86:f3:30:9c:11:75:ff:26:d8:e8:5a:ae:a3:08:c2:
d3:7c:3c:dc:32:7a:e3:86:a7:19:93:5d:94:5d:e0:
1b:b0:70:ad:79:63:1e:ee:05:06:b7:50:6d:7c:85:
83:99:2a:a3:97:6e:ba:5a:7c:82:72:b3:f9:b1:ae:
e1:90:eb:92:3b:e1:35:ac:2f:06:60:af:6b:97:13:
fc:9f:25:33:b1:b0:a5:2b:d0:f1:fd:79:7d:3b:ff:
04:d9:54:50:bc:05:e4:21:49:67:6d:5d:5a:c9:95:
20:67:1f:cf:37:7e:df:84:50:d4:e0:dd:ea:b2:1c:
c3:94:93:47:18:d3:d3:79:eb:3a:0a:99:26:13:fe:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:B5:34:A6:82:4E:69:4E:52:9A:A6:99:B1:D0:45:1C:36:34:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4667e1da-e08c-302b-ac16-437baa9e0fbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:31:bf:6c:17:fa:2a:cf:76:59:ab:5e:47:60:e0:43:2d:15:
6a:9f:2f:a9:41:c1:bb:7a:24:6e:a7:8b:48:4d:77:da:48:1f:
08:7c:48:60:b8:56:a5:f3:01:d8:fa:8b:93:e0:81:f0:eb:5f:
2e:7c:03:30:23:6f:d0:43:de:6b:49:d8:a9:81:ec:a8:b5:90:
98:f7:13:08:07:b0:f4:95:a6:2f:e1:9e:f2:5a:a2:66:8e:d9:
13:3e:1b:cb:40:c5:af:14:aa:8b:95:f7:96:7d:60:d0:a1:9c:
1d:90:7b:69:1a:ff:02:8a:e6:3c:9e:6b:02:7b:7b:f5:7c:73:
37:a1:52:ae:54:50:35:35:1d:de:bb:53:0d:65:08:e5:f1:eb:
1c:e3:9d:fe:b0:e1:b3:45:29:25:ce:a5:7e:0d:9a:3a:db:08:
2f:e1:99:24:7f:0e:ca:41:25:f9:bb:26:19:ba:56:97:01:3c:
a6:cb:82:62:03:5f:0a:d0:16:e0:31:fc:0d:2a:3b:0e:23:cb:
ba:98:6c:6a:72:4d:26:e4:81:28:1e:00:4b:7b:6b:6d:78:78:
0c:4e:6e:f8:44:9c:c6:49:d8:59:22:38:fb:c0:e9:74:4a:8c:
c7:6b:99:d3:75:3d:38:0f:c3:85:93:92:f7:85:99:74:19:55:
f1:b1:64:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:04 2025 by rpki-client