Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc43fc1-1979-3ffa-a4ed-40a0bec39fa4.roa
File: 5bc43fc1-1979-3ffa-a4ed-40a0bec39fa4.roa (raw, json)
Hash identifier: yJ6CjBL/ik34eYe3hp+7F6robt83EM8PowPIvHkbPb0=
Subject key identifier: E4:47:8F:7E:EC:95:05:BB:04:06:8C:77:EE:CC:2F:29:43:D4:63:A0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B4005767F837BC27A16C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc43fc1-1979-3ffa-a4ed-40a0bec39fa4.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396566
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:40:05:76:7f:83:7b:c2:7a:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=9e05de32-de83-4dcf-9575-2cda4730405c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:ef:a5:c4:dc:6e:95:04:bf:94:83:14:a4:
d9:7a:4d:f6:b8:3d:e9:7b:a5:05:f7:1b:6b:74:25:
25:bb:70:aa:8d:c0:8c:5c:aa:7b:45:cb:04:b3:e5:
f6:22:6c:20:2b:f4:6c:b5:2e:a6:1e:5b:c9:9c:72:
f1:36:1c:1f:cc:47:02:52:95:9e:9f:93:a9:ce:bc:
1a:22:d4:d5:f9:a1:10:22:36:f8:08:6a:b1:0b:72:
3f:f6:9f:46:2b:73:fb:4f:17:34:cc:68:74:77:91:
77:ff:09:9f:41:14:9c:fc:6d:4b:19:ac:ce:26:43:
80:15:80:84:b5:5a:84:d4:bb:17:af:fb:de:77:cd:
a0:5c:7a:b8:1d:93:b9:13:84:c8:69:4b:21:c2:54:
7f:18:c4:5c:29:29:e5:d2:fe:ab:84:98:cf:54:ff:
5a:8c:d5:c4:3a:f2:40:60:27:cb:9c:28:8a:94:fb:
34:22:01:47:1b:cb:26:f7:25:77:92:10:af:ec:f5:
ac:7b:4b:d1:48:0d:7f:71:e9:ff:6f:ce:59:1c:19:
63:3f:5e:58:8d:0c:65:e7:b4:57:62:37:91:b4:73:
71:dc:4b:c2:f8:5f:26:00:e8:9e:7f:19:4c:b0:78:
cc:f6:02:7d:4c:8a:11:44:4f:91:15:c8:1a:77:e5:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:47:8F:7E:EC:95:05:BB:04:06:8C:77:EE:CC:2F:29:43:D4:63:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc43fc1-1979-3ffa-a4ed-40a0bec39fa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:61:d9:49:a0:89:18:4b:49:15:ea:f9:58:67:f0:ef:bc:42:
3d:c9:25:d4:42:6b:62:26:d2:0d:4f:fd:d4:6b:58:a6:41:1b:
c5:a8:d7:98:5e:bc:91:67:d2:ce:0b:92:8a:3c:28:5d:b7:d2:
e8:dd:e3:94:ff:f7:ec:0d:5a:74:dd:dd:c5:bd:f7:03:4d:d4:
1b:e5:23:eb:6f:16:8b:8a:96:38:49:43:77:58:ba:08:78:ff:
dc:4a:85:54:ac:4a:aa:5b:1a:07:97:5b:8c:b2:11:91:e4:e6:
8c:6b:a1:a8:ee:f3:f9:30:61:ca:40:d5:74:4b:5d:24:9d:d2:
56:5b:0d:3a:b5:7a:65:27:52:f9:78:26:82:9f:59:e3:75:b1:
ff:8d:64:49:70:8f:b0:bc:24:33:bc:8a:7a:40:39:27:d7:b1:
69:30:ff:9c:c9:33:c1:49:e7:30:73:34:87:6c:68:11:61:d9:
5a:35:1c:33:34:25:15:6a:5f:9c:de:d4:47:f6:d8:10:e0:cb:
c1:39:da:31:a4:26:02:5a:fc:d5:ac:75:e6:0c:cc:c6:bb:7c:
7c:e4:c1:fe:c2:78:14:f3:dc:20:3c:5b:fb:45:bf:38:19:ce:
77:80:47:71:34:dc:70:5a:88:25:5d:0f:84:29:26:ca:2b:d3:
62:9c:29:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:36 2025 by rpki-client