Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d3ed90-bdff-3d72-9f28-bf0cb32759ee.roa
File: 72d3ed90-bdff-3d72-9f28-bf0cb32759ee.roa (raw, json)
Hash identifier: o0nOgCFsySWIYqr6P9kn0X620cgkOBOhq3IAXfiDLJk=
Subject key identifier: F8:DA:02:DB:87:E3:91:AF:5B:D1:9F:85:F6:76:5A:9A:D4:B7:2A:30
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B7844AC04DEB66397F5158C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d3ed90-bdff-3d72-9f28-bf0cb32759ee.roa
Signing time: Thu 30 Jan 2025 13:46:22 +0000
ROA not before: Thu 30 Jan 2025 13:46:22 +0000
ROA not after: Wed 30 Apr 2025 12:46:22 +0000
asID: 396551
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:4a:c0:4d:eb:66:39:7f:51:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:22 2025 GMT
Not After : Apr 30 12:46:22 2025 GMT
Subject: CN=90d22e9b-9860-4ec2-b2bb-b972632aae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:94:bf:dd:03:7d:fc:35:d7:cb:30:8b:73:
e7:9c:b4:c4:68:9d:d5:e2:a6:dc:a1:90:89:7e:41:
5d:ac:cd:99:e7:48:60:17:f6:26:e6:9a:82:ab:35:
98:df:31:fe:89:31:dd:64:fe:9b:de:2e:cd:e0:ef:
a3:9e:a8:aa:ec:ea:c5:2a:d3:04:fe:07:9c:04:35:
ed:6c:87:15:75:16:5e:c4:8a:1a:f2:c6:3b:a5:8b:
c6:ec:98:1d:9f:4f:4d:70:4a:49:48:52:5a:23:71:
e8:15:74:5a:c1:16:45:7d:6a:62:3e:17:e8:fd:52:
36:6d:c7:03:93:4b:72:41:b5:34:db:24:8c:65:f1:
f0:ad:26:0a:81:4f:7e:4a:00:be:bd:e6:1b:f7:e6:
e8:93:23:70:fc:82:4b:71:94:7c:af:c1:33:b6:ae:
7b:e8:18:65:ad:4e:b4:61:da:4d:c4:50:cc:54:d7:
59:d8:f5:e7:b5:4c:d3:b0:b3:a7:dc:92:e8:db:17:
0d:2e:8b:fa:07:60:45:67:b7:b8:a5:69:3e:3e:32:
93:5d:59:d5:21:07:0d:dd:00:86:ab:c3:49:3b:2b:
b6:8b:b3:17:f0:4f:a3:d7:0d:f3:9b:01:6e:2c:35:
82:0a:8e:03:8a:c3:4b:06:31:ba:13:56:af:79:b1:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DA:02:DB:87:E3:91:AF:5B:D1:9F:85:F6:76:5A:9A:D4:B7:2A:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d3ed90-bdff-3d72-9f28-bf0cb32759ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:77:36:87:96:da:cd:8a:6f:32:fc:cf:3c:cd:56:97:88:62:
c0:aa:7d:9a:b1:9e:c5:c0:d2:0e:27:15:f0:bf:a4:81:4d:7a:
ee:c4:a6:34:42:3f:c3:eb:d9:58:53:6d:4d:79:07:69:47:f1:
1d:39:8a:c0:23:97:a2:71:53:c9:c3:1f:88:ad:03:11:56:4d:
2a:6d:32:47:dc:15:82:42:64:dd:c2:8b:e8:a4:7e:30:ff:df:
95:fb:b2:17:f4:cf:4b:68:dd:11:4c:ca:4f:66:a7:ec:60:bf:
06:4f:c2:c7:1e:da:d5:74:68:ce:e4:8f:72:53:2a:e0:46:f1:
f0:c6:f5:74:92:43:e7:07:c3:26:77:2c:1b:a7:03:67:de:41:
81:13:f7:86:cc:e8:a9:f4:e5:c1:a2:51:5c:db:40:5e:b6:e5:
a3:35:b9:3d:79:15:11:3e:7b:b2:c8:cc:96:f6:6f:b0:bf:b7:
b2:2a:7b:73:7d:c7:0b:95:84:cb:72:9e:54:b4:ce:b8:51:66:
5c:93:0b:0b:41:7b:39:f8:f7:f0:d9:4d:cf:11:6f:f4:2d:68:
1b:f0:e5:16:6e:f4:f9:e1:b8:67:9a:16:24:d8:f8:67:93:07:
96:74:54:62:e8:f6:ee:1d:2e:06:c9:6f:8b:db:08:a0:d8:7a:
07:73:9a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:48 2025 by rpki-client