Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f7d7efb-b457-3b06-bf27-2cabdf3b1447.roa
File: 7f7d7efb-b457-3b06-bf27-2cabdf3b1447.roa (raw, json)
Hash identifier: Kdxg44Z84M8301EhDMz8UAUj6z86pHkAka00PBB1pKM=
Subject key identifier: 33:B6:3D:40:38:B4:8A:A1:EA:5F:0B:42:32:1A:36:8D:1C:FA:DA:AB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B39D7117FB4B9A18339C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f7d7efb-b457-3b06-bf27-2cabdf3b1447.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 36625
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:39:d7:11:7f:b4:b9:a1:83:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=720b4f02-7acb-463e-bdc3-979395bbc0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:b1:05:88:60:c9:b9:6f:93:aa:39:5c:31:
66:fc:f3:93:cb:a9:8d:b9:97:21:17:5f:de:7d:36:
08:08:7d:6e:c9:b5:7b:70:4c:59:8d:fb:53:8f:21:
f7:4c:95:ac:b9:79:72:51:07:66:d5:e9:e1:19:a5:
c6:f1:08:bc:67:f9:4c:9c:33:04:c0:95:cd:f8:93:
2b:fb:e1:97:c8:c8:c2:c3:58:f5:7b:19:3c:de:47:
83:de:2f:8b:8e:45:1e:03:52:3c:02:63:76:dc:f9:
9f:c9:dd:28:07:96:34:45:d6:6c:c2:b0:04:35:51:
08:e5:5b:92:81:a2:56:a4:75:9d:1a:b8:45:97:d2:
40:1b:ff:d9:7d:31:c7:f9:30:37:71:be:1f:3a:f9:
56:e8:e1:f0:49:60:bf:bb:a9:dc:63:91:7c:01:a0:
17:a0:b5:e0:2b:62:29:96:d9:bf:a2:a8:11:23:6b:
d3:34:98:3e:76:4f:18:0b:50:ef:8b:94:ca:30:39:
b4:99:cb:72:02:45:f2:fd:8c:e9:e9:57:6a:75:63:
18:7b:b2:6a:e0:92:bb:ce:86:84:b2:bb:34:e8:f1:
30:d1:bb:24:f1:68:91:72:2e:6b:08:29:bc:4f:04:
6a:4d:5c:ea:97:df:30:ad:76:3b:d8:2e:87:6b:63:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:3D:40:38:B4:8A:A1:EA:5F:0B:42:32:1A:36:8D:1C:FA:DA:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f7d7efb-b457-3b06-bf27-2cabdf3b1447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:3a:34:37:0a:c6:9a:a1:8c:89:87:e8:dd:2e:71:cc:b9:66:
04:77:aa:6d:f5:53:8d:41:11:e7:70:75:48:1d:0b:60:d6:88:
8d:5b:3c:c5:32:98:2d:de:a3:d0:9f:0d:28:8c:b2:83:35:9c:
e7:68:d4:5a:64:56:1d:58:79:b3:f8:b4:2a:63:ad:3f:d3:86:
a2:4a:31:27:e3:d1:22:a0:ef:fd:1d:d2:4e:33:14:0b:39:9a:
0b:ae:98:b4:f6:d2:d6:a8:50:20:4d:2b:f9:65:1d:61:e5:77:
49:79:c5:ee:6a:b8:ef:5c:15:0e:8d:df:18:a3:6a:e6:81:a3:
23:cb:07:94:55:24:9f:99:1f:a7:30:5c:fa:cb:88:fd:52:4c:
e8:e2:a4:45:1d:48:5a:18:7d:88:27:39:8e:6f:ab:9b:95:ff:
f5:b5:1d:c9:93:36:4c:55:1e:cc:d1:d7:0e:66:ee:79:1a:09:
fb:46:10:c7:35:72:19:97:6f:78:e5:85:58:5b:bc:78:9c:c6:
c3:07:0d:fc:44:35:03:1a:05:32:d0:1c:a1:6b:a6:35:53:80:
23:5c:2c:01:dd:b8:56:06:cc:6d:8d:d1:e4:a5:d6:96:d2:82:
98:be:80:2c:ff:69:54:3c:37:c6:07:0e:3b:89:e2:77:6d:18:
e6:1b:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:57:42 2025 by rpki-client