Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b1cfb09-6240-3568-a706-785f246d7897.roa
File: 7b1cfb09-6240-3568-a706-785f246d7897.roa (raw, json)
Hash identifier: k9HyqDENTbOrJm9MOkfez4n+u4wgdrzb5dbyr9w+okw=
Subject key identifier: 5B:29:CE:D9:1B:7B:EA:84:58:E7:EB:98:F8:08:01:96:92:13:C6:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DD7F7D3BDA057A3C7780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b1cfb09-6240-3568-a706-785f246d7897.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396573
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:dd:7f:7d:3b:da:05:7a:3c:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=78a57368-42e5-4e91-a58d-4d06157c9718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:41:9a:ef:1e:fd:9a:9d:14:7d:a9:87:b2:
13:ae:24:7a:b2:25:7b:f5:9a:61:fd:8b:c3:f3:89:
f9:74:6f:e8:2b:0b:6e:fb:a9:99:33:48:40:58:6d:
11:ec:17:54:af:0d:64:f0:40:d1:e0:42:34:56:e9:
8f:a3:94:2f:6f:2e:57:3d:c1:35:53:a3:86:ba:b8:
3d:01:f8:ab:27:b3:b7:6b:b2:2f:95:dd:f5:0b:b2:
50:e0:fc:eb:82:ed:d5:5e:52:23:e2:32:ee:73:62:
ba:97:ab:b7:b5:83:8e:74:9a:79:94:8f:b7:36:53:
06:71:b6:4b:92:df:a6:48:49:21:b0:e3:41:1d:01:
76:49:d6:1d:62:9d:91:e3:fc:d0:8b:55:69:f8:11:
67:d5:f8:5e:6f:e2:99:da:8b:ee:ee:01:99:c8:8a:
f9:4d:2a:e7:59:14:64:a9:f8:c8:eb:15:96:99:3a:
8b:8f:14:e0:06:94:fe:af:99:a2:7d:f5:99:98:4e:
3a:3e:6f:ab:81:a8:92:a8:e9:77:c7:a7:a6:3c:92:
4f:28:ce:bf:b3:a1:12:96:cb:70:61:c6:48:9a:e5:
c8:ba:a8:da:37:27:1c:36:26:22:1c:d0:8c:12:e3:
b8:7e:bf:21:82:01:47:63:1e:41:f7:24:1c:da:d2:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:29:CE:D9:1B:7B:EA:84:58:E7:EB:98:F8:08:01:96:92:13:C6:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b1cfb09-6240-3568-a706-785f246d7897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:79:58:bf:2a:b0:91:ed:8e:7c:7b:b8:fe:62:d6:20:f7:71:
2a:2b:e3:6e:64:c5:2c:34:08:e9:35:79:c8:8e:a9:b6:9e:d9:
dc:7d:21:e6:8f:d4:8a:f8:17:e6:04:70:fd:68:d6:6f:db:08:
cd:26:5c:13:a6:ac:e9:ed:09:45:35:98:6b:a5:f1:02:a6:4d:
69:ea:05:0b:aa:d3:ec:38:ca:f3:08:f1:47:ac:28:da:19:d9:
5d:10:3c:2b:a3:62:06:4f:7f:eb:29:ab:c3:cd:0e:50:9d:a3:
35:c6:2f:4e:3c:4b:67:6f:46:cf:3d:9f:bd:20:ee:04:59:4e:
e9:92:ae:9b:79:68:94:c8:d5:c3:8f:72:5c:27:c7:ac:9e:1c:
42:34:44:e4:ee:20:39:de:df:54:75:bb:76:fa:3f:8c:36:e8:
ca:52:a2:6b:28:ea:87:7f:4d:27:dd:af:36:56:eb:fa:5c:4e:
01:dc:e2:96:13:d6:13:17:fa:6a:f4:ad:cc:65:79:ea:ec:13:
5b:08:91:a9:85:c7:b0:15:b0:ed:7f:00:2c:45:0b:82:df:7b:
d0:a7:a2:50:db:cb:30:f8:e6:76:72:11:e2:2c:c1:28:d9:fb:
96:0d:d7:02:a2:20:06:e6:fc:26:2d:6e:04:bc:7e:e9:a3:ae:
6c:b3:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:04 2025 by rpki-client