Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72c3390c-41e5-32a3-8e09-87378665f5a2.roa
File: 72c3390c-41e5-32a3-8e09-87378665f5a2.roa (raw, json)
Hash identifier: CBDR4mnAi4WbdBp7pBT0EqlgF3vp6SxV5nmplIuFgY0=
Subject key identifier: 4E:7F:5E:2A:DB:52:44:D8:9D:2C:56:EB:8D:C6:4F:1B:0E:7C:8F:60
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183BEB68DA77E138C068CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72c3390c-41e5-32a3-8e09-87378665f5a2.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396557
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:be:b6:8d:a7:7e:13:8c:06:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=2c496c0f-3214-4350-98d1-6a361e5b9bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:a8:d0:02:10:fe:32:a9:d9:6f:74:a8:2e:
2c:f2:13:9d:64:be:d1:76:fb:5d:de:d9:ed:c4:25:
c0:63:4e:53:e3:51:82:6c:79:60:cd:28:46:da:09:
3e:91:96:76:c4:71:8c:19:c1:d0:ab:da:fb:16:ce:
a9:1a:96:49:87:2b:0b:e6:d0:1e:ed:ca:85:e1:de:
93:7e:62:b4:51:f9:f8:19:e6:2e:91:49:32:29:e1:
5a:92:ab:9f:18:f6:1b:64:02:ff:2d:08:6c:44:5f:
24:b7:c2:27:53:02:c0:d1:ad:29:91:df:f6:6c:b2:
61:07:4a:cb:4c:2c:9c:7f:48:63:e9:79:f4:f5:db:
54:7c:50:25:f4:b5:20:32:cd:b6:d6:92:76:19:b9:
33:8b:09:0f:60:dd:c9:b8:a7:2f:66:e7:62:b4:d8:
c9:0b:48:4d:eb:cc:2b:9f:8b:2d:00:f1:36:46:eb:
7d:1b:1c:32:15:bc:a8:f4:6d:26:ef:40:c1:09:c2:
6c:79:cf:0b:ad:4a:b6:e7:32:d9:36:9e:0b:9c:c0:
f2:88:20:31:cf:b8:64:d4:76:b6:4a:70:ab:a9:54:
9a:6b:6f:4c:98:7f:99:b0:7d:7b:fc:9e:37:d3:df:
c2:c2:8a:e5:b5:79:ec:92:42:f1:4d:d5:3a:b3:a9:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:5E:2A:DB:52:44:D8:9D:2C:56:EB:8D:C6:4F:1B:0E:7C:8F:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72c3390c-41e5-32a3-8e09-87378665f5a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:94:a4:ac:db:b1:ae:16:e9:95:1b:84:97:d8:90:b5:c1:c4:
00:74:af:1d:f2:1c:07:0f:52:04:1e:73:18:a2:18:51:ab:c5:
12:5b:54:06:a6:b0:31:42:d9:86:c4:88:65:c7:f8:ab:b4:da:
2b:fe:77:10:90:8a:9f:bb:5d:08:b1:cd:7a:06:f4:45:ed:ab:
e2:f2:34:52:b2:14:b9:27:04:f9:07:ae:20:c4:0d:87:e1:23:
d4:83:55:aa:39:9f:30:d8:dc:26:e1:38:11:68:5c:db:4d:68:
75:e8:f2:4e:ac:cd:90:98:32:23:da:11:d5:b7:f4:07:a6:c4:
e1:c5:0f:71:ea:f4:55:87:48:b3:e6:23:a3:a3:bb:bd:28:64:
6f:db:bc:c4:53:0e:1f:f1:a3:86:a4:af:67:54:16:2f:ad:10:
63:4f:ea:78:b7:66:16:63:6c:ab:3e:01:74:3e:f6:5e:19:0c:
de:8d:23:3d:ac:d0:70:55:c3:57:a7:a3:5d:b9:66:a2:e3:f1:
a9:79:96:04:26:28:b7:4f:44:e0:a9:21:ff:0c:20:6b:39:3f:
e7:8c:c7:0e:08:38:bb:ef:65:e2:05:7d:72:5d:57:0a:e8:e9:
9f:22:57:dc:32:c8:a2:57:23:99:66:16:d7:02:7f:90:15:df:
6f:3c:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:25 2025 by rpki-client