Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/908c9bf7-fd7c-3c44-aa3c-8c5b7922d192.roa
File: 908c9bf7-fd7c-3c44-aa3c-8c5b7922d192.roa (raw, json)
Hash identifier: paTuh3PvrL3u4c3b1DYFQ+Qtn2Nsg5vF0PDa4JVpMdU=
Subject key identifier: D6:83:88:D3:A8:78:1C:A2:2A:F7:90:BD:32:75:B1:CF:E1:41:96:0B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183E8B3534C1C3F02CB66C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/908c9bf7-fd7c-3c44-aa3c-8c5b7922d192.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396827
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:e8:b3:53:4c:1c:3f:02:cb:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=b5c6bf6f-616c-4874-a2e9-6bd3750a4ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:cb:e9:30:f4:c0:a9:23:ae:f6:e7:71:f5:
69:a0:46:1e:ac:fa:59:ba:8c:57:44:4f:b1:12:82:
12:68:83:47:66:97:61:67:0f:f7:65:f0:53:c4:ac:
4f:05:0f:ab:98:ec:c7:4a:92:7a:11:0a:19:9e:a6:
df:d2:8c:e9:c0:9b:95:2a:f5:55:d2:58:96:7f:65:
6b:8c:b2:b0:3e:06:cd:dd:be:f5:5d:08:05:12:97:
29:c9:e4:57:99:1e:cb:56:8e:12:e8:d0:87:b1:55:
80:a4:5a:39:c4:4a:59:e6:d3:aa:b4:cf:ec:fd:72:
23:38:31:34:b3:16:5d:f6:06:75:42:bb:ec:4c:f3:
a1:53:ae:72:5e:6e:bc:d5:1a:67:4c:05:89:2c:a6:
8e:a8:f1:fa:31:16:36:bd:42:28:5d:60:40:cb:31:
ed:bd:e2:0d:a5:fb:69:5a:ce:7e:b4:1b:6d:41:1b:
71:89:ab:ed:57:52:73:b6:9b:4f:72:e1:a4:62:7d:
1a:f2:bc:bf:2e:10:78:0d:c5:fa:49:33:cb:88:9e:
55:f7:e8:8c:cb:40:3c:65:dc:57:0a:ce:17:de:57:
8e:b2:5e:b7:fb:9f:28:2f:66:47:fa:fc:c4:d6:45:
d3:1e:29:de:11:f6:d9:75:6b:51:7e:5b:a3:b7:40:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:83:88:D3:A8:78:1C:A2:2A:F7:90:BD:32:75:B1:CF:E1:41:96:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/908c9bf7-fd7c-3c44-aa3c-8c5b7922d192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:c1:6e:12:3f:33:a0:da:f6:bd:77:af:26:84:b0:b9:49:b7:
e4:3a:c8:68:68:53:77:07:1b:7c:61:03:6a:9c:9c:98:df:72:
87:ba:9f:9f:6b:7c:94:37:47:48:ce:ed:bd:77:14:b1:2f:0e:
ee:93:54:40:61:44:c9:1f:0e:13:86:29:cc:56:a4:25:12:e6:
cf:9c:66:fb:fb:62:55:f7:f7:a2:20:4e:fa:b2:aa:81:f2:fa:
b5:69:3d:5b:66:f3:a7:16:78:a0:de:28:38:ff:a1:59:d2:cb:
0d:51:05:18:8f:8c:a3:2c:c4:30:e8:19:12:d5:4b:4e:02:bb:
d6:01:d6:ca:f0:aa:6c:45:6f:99:67:4f:68:72:b3:1e:f2:e7:
59:d7:2b:7a:89:46:df:b7:c1:f7:19:5c:38:92:a3:f5:d0:34:
a9:72:c3:c9:fd:20:43:c4:ec:f2:f5:3a:86:72:a6:9f:0c:a8:
85:1f:ea:e1:99:08:12:98:06:0e:9c:ae:09:b5:86:5a:59:42:
91:ef:79:59:77:97:d3:87:52:6f:cc:69:79:fc:71:78:88:5e:
60:cd:45:68:8a:9a:40:fe:1c:08:64:d8:40:90:ce:a8:65:1c:
c3:88:fe:2a:79:86:45:ae:a7:e1:5b:a7:c4:d4:21:68:61:9a:
c4:ce:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:43 2025 by rpki-client