Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/881ff452-4272-351a-8c9f-0f9cade09991.roa
File: 881ff452-4272-351a-8c9f-0f9cade09991.roa (raw, json)
Hash identifier: JlVmCmzo7ofMFtNepjpn/1aj+NYaToEFI8fwllvlhjo=
Subject key identifier: 07:C3:21:35:C3:47:ED:4E:AE:CB:63:40:01:56:11:03:0D:93:67:A8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C8F2014EE8DDFA210380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/881ff452-4272-351a-8c9f-0f9cade09991.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396580
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c8:f2:01:4e:e8:dd:fa:21:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=faa20149-54de-4f3c-89c6-a32ee9d1d5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:a1:d1:bd:ae:e8:c2:10:3a:47:8e:7c:b7:
2c:71:52:1f:16:6c:32:fa:53:29:d7:8c:3c:62:cd:
62:00:4e:00:98:e9:6a:ee:da:5f:9b:d0:1a:23:5c:
69:58:05:62:c0:3a:3b:b4:42:ce:e2:c4:6c:82:86:
17:70:95:ee:38:2b:d2:4c:d3:68:28:50:5f:03:4d:
58:f4:3e:2d:b7:98:bc:c7:b9:ac:ef:27:84:36:4f:
d6:74:9b:8a:87:df:c5:35:da:58:a6:0f:af:5e:97:
8e:b8:ce:18:57:2b:a6:0c:28:5f:9b:9b:d3:cd:ff:
55:89:55:c4:04:4a:71:27:26:71:4c:dc:56:57:f7:
26:d4:22:cc:b8:ae:de:69:6b:6c:04:9a:7d:18:b0:
7a:5c:09:e6:60:da:79:fe:05:53:30:0b:1c:03:84:
a5:ab:ac:20:e9:f5:e7:f6:ae:d0:0a:5c:07:f8:da:
57:86:37:57:3b:1f:ec:09:17:66:b8:0d:c1:ad:c7:
aa:fe:2f:98:4c:c9:b7:23:2c:e4:a2:1c:39:98:e2:
92:81:4a:1e:82:07:f9:97:64:08:66:96:61:2e:5e:
c5:e3:9d:c4:ad:a5:03:96:b1:56:45:22:6c:86:68:
65:37:e6:4a:a2:f3:3d:ff:85:c3:25:f1:b8:34:45:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C3:21:35:C3:47:ED:4E:AE:CB:63:40:01:56:11:03:0D:93:67:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/881ff452-4272-351a-8c9f-0f9cade09991.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:f5:07:e0:90:78:2a:6f:82:8e:c1:af:69:1a:5a:3e:f8:78:
a1:5c:bf:54:a4:88:dd:9a:2b:53:8f:93:66:4d:aa:7b:eb:db:
3d:52:bd:9e:db:26:e1:b1:4f:3c:08:48:ba:ee:6c:e6:97:8f:
1f:c0:f5:90:d2:72:f2:9e:56:8a:56:b2:e8:6e:57:cc:a4:2e:
7b:88:74:1d:5a:11:db:37:56:a9:45:ca:b2:3d:74:77:57:7d:
c8:5a:f1:59:b0:1e:54:8f:d6:38:d6:24:dd:65:97:0d:f3:da:
09:e1:49:41:45:db:4f:6b:83:7d:68:01:74:cd:c6:a5:82:85:
71:eb:80:aa:dc:a4:5a:07:0e:96:a9:2c:76:f0:8a:b3:3f:c0:
75:70:8d:d0:14:91:c4:0d:fc:68:61:01:9b:11:19:62:47:cf:
db:f4:d8:21:d7:3a:15:d5:b8:50:27:b9:9c:96:d3:bf:d6:39:
d0:96:c8:76:52:c2:8e:f6:d7:f0:4e:5c:b9:36:52:ce:81:f0:
79:26:ee:ff:68:e4:a3:ec:37:03:ce:6c:eb:5d:f2:df:1f:de:
72:5d:34:d0:11:8e:4f:04:8e:1a:08:c1:ae:ab:12:77:fb:fc:
d9:48:00:24:07:c8:92:6f:87:36:d2:86:7e:0e:e6:52:8b:44:
8b:6c:44:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:17 2025 by rpki-client