Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6d5a05-951f-3818-8c8b-f2b9e0237d69.roa
File: 8a6d5a05-951f-3818-8c8b-f2b9e0237d69.roa (raw, json)
Hash identifier: jS/1bE/d8cncq83cdiXmGOPrqRfBYeK12TE4pGyDY84=
Subject key identifier: E8:6C:4A:87:FC:B7:3A:C8:D0:F8:BB:14:7E:B1:DC:3E:3A:D7:81:87
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B38221DB91CD2EBA88BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6d5a05-951f-3818-8c8b-f2b9e0237d69.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 397201
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:38:22:1d:b9:1c:d2:eb:a8:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=1e678af4-5a76-4872-998f-0fbb8bdc241d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:b2:e5:ff:51:36:ad:74:8c:0c:f4:54:65:
1c:9c:de:eb:23:5c:69:42:3e:4e:46:75:26:d3:92:
58:c0:37:1b:f1:af:5f:1c:09:07:82:90:5e:f2:1e:
5d:8a:d9:e7:30:17:b1:e8:c0:88:53:20:ef:1e:c6:
61:64:a4:35:14:d6:8b:5d:5f:ee:1b:42:a5:29:a5:
4a:3a:a1:8f:9b:1d:0c:fd:e9:12:b0:ef:cb:61:d7:
78:fd:a4:58:d0:52:ea:b2:99:d8:73:96:68:a6:67:
42:f5:55:3e:8a:cd:5c:65:11:98:bc:12:5a:b1:28:
75:52:c4:c5:d5:58:37:72:5a:b1:ea:b6:22:41:66:
31:ec:19:3d:72:c1:65:a8:8a:e2:81:0d:2d:30:87:
03:10:a7:93:46:18:87:b3:0c:70:70:54:69:9b:f6:
b9:81:4d:b0:2c:62:2e:8b:12:80:16:31:60:26:73:
9f:d1:a3:f9:cd:18:7c:9b:5c:b4:c8:c5:10:9e:af:
9d:c4:d4:cd:d9:2d:1b:ee:a0:64:a1:09:01:6b:7b:
bf:a3:9d:59:57:2c:95:7b:e1:86:c2:cd:8a:50:91:
cc:a2:1e:16:cf:9c:86:32:05:36:87:b2:c9:b9:7b:
ec:d5:aa:c9:25:b4:33:bf:f6:5c:78:f9:11:72:1f:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:4A:87:FC:B7:3A:C8:D0:F8:BB:14:7E:B1:DC:3E:3A:D7:81:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6d5a05-951f-3818-8c8b-f2b9e0237d69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:f7:ac:8d:cb:11:7d:48:58:b3:fc:51:c8:30:0f:d8:1f:9a:
62:90:92:99:7d:d6:83:ac:e5:81:21:cc:1f:98:73:eb:c4:7e:
f6:e5:c1:74:73:a1:0c:08:2f:04:f4:51:a4:96:1e:dc:7b:fc:
22:a0:1e:d4:4e:20:53:f3:43:93:8c:65:77:ff:51:df:f0:dc:
8e:ee:f7:28:10:4e:b0:08:14:b7:42:92:a3:f3:51:d2:b3:e6:
cd:0e:6f:7a:81:f7:b8:c3:f7:b4:7f:88:18:fa:07:d5:d5:1e:
1a:4d:4d:d9:59:97:58:69:cf:db:dc:e3:f3:f5:e1:5b:41:04:
9e:b9:14:47:29:09:08:a6:02:57:a6:e8:1d:a8:b2:d1:40:1e:
0f:36:51:85:8b:d7:d1:82:75:21:35:76:fd:e7:b0:95:6f:7c:
a6:ea:18:6d:fb:7f:69:3f:66:ef:ab:d2:ad:f7:e3:a2:64:a1:
5b:5d:47:c1:b1:ba:ec:c2:59:12:fe:89:5e:46:af:21:50:37:
98:da:8f:04:2c:8f:85:22:d3:d0:7d:06:37:cc:9b:35:7b:6c:
2e:d0:71:a0:9c:26:f7:26:37:5c:24:6e:1f:a8:ea:be:97:45:
d4:1a:1e:7b:fa:b8:28:dd:38:e1:3d:7f:93:de:1e:c4:b9:91:
8e:38:af:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:59 2025 by rpki-client