Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa
File: a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa (raw, json)
Hash identifier: XayOShno8oYkaUTKYq9EjbiniLHJzzLxbF7WbTaw4Zw=
Subject key identifier: 6D:42:72:7D:C3:0A:99:12:DE:E5:40:84:BE:70:44:16:D1:26:94:2D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3995801B74B6DFC3FA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396603
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:39:95:80:1b:74:b6:df:c3:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=fab013c1-432e-40a6-9061-8f9def2cc3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:b5:eb:8f:a9:0a:67:12:7c:8f:21:31:a3:
a2:0b:1e:f5:30:19:dd:f9:b0:04:04:0e:48:93:a6:
f5:15:83:cd:7d:f0:ba:43:a0:09:58:ac:e0:be:10:
65:36:38:1f:73:a9:84:63:3d:00:e6:d4:76:c9:e7:
24:60:78:fe:a5:89:b4:b2:a5:cd:92:d5:75:8a:83:
50:a0:b7:64:6c:85:71:4d:e6:0f:1c:d3:04:5e:f6:
a4:a6:1e:2d:4b:38:17:5b:75:94:43:6d:01:66:b8:
f9:1c:e0:53:3e:dc:12:8c:e4:af:2b:33:81:b3:f5:
3b:8a:95:f2:81:60:40:4c:a1:d5:a8:d0:a8:ef:a8:
c7:f4:aa:cc:96:b7:9a:07:29:56:e9:94:f7:34:a0:
fc:33:5e:43:3f:0b:8c:dc:e0:2a:f4:31:24:aa:db:
7b:4a:1b:cb:e7:f8:9d:a0:48:ff:c4:37:51:fb:13:
f3:3f:39:66:12:5b:a2:4b:82:50:47:fc:03:99:26:
0d:c4:72:d7:b6:74:f5:ae:97:32:2f:03:8c:8a:ef:
7c:45:f8:9b:72:4f:3d:a0:31:ae:cd:e3:ab:98:3d:
e1:b8:5d:81:ef:f2:45:a2:3d:10:f7:ec:46:28:fa:
d8:0e:90:b0:fe:8e:15:b4:c2:d1:6a:05:ea:60:8f:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:42:72:7D:C3:0A:99:12:DE:E5:40:84:BE:70:44:16:D1:26:94:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:af:55:f5:c3:48:40:f2:87:bd:f4:6b:45:49:37:f1:08:41:
db:3c:68:4d:c1:b6:7f:57:49:8d:6c:11:2e:1d:f2:d8:ad:9c:
c7:fa:71:ff:04:18:ac:b7:70:0b:87:13:3c:71:0b:f0:80:5e:
2c:14:d9:b6:3d:ae:35:35:1b:3b:7c:83:6f:4c:06:5a:72:92:
c3:9c:38:e9:7b:e2:46:d1:81:57:e1:7e:a5:89:99:32:94:cf:
27:bb:da:a7:23:e9:ff:9d:1b:63:eb:95:04:d9:45:26:1d:7d:
cb:90:cd:33:32:32:95:93:47:c7:b2:c8:33:2c:39:5a:25:c9:
f4:af:9f:00:20:a4:da:bd:94:85:78:de:47:89:88:ed:e3:d5:
32:50:6c:84:ac:db:ec:da:62:fd:97:b7:40:6c:de:10:e2:76:
1d:a4:ec:97:9f:5c:ee:32:4a:66:89:8d:71:d0:3f:1b:c7:7b:
d8:74:3e:95:dd:09:37:d0:38:0e:23:3d:0d:69:8b:6b:c1:15:
b3:28:85:45:e7:ae:91:6c:d5:e5:bf:a5:16:2c:fa:a9:22:48:
dd:ff:61:5e:81:01:ef:89:fb:c7:7b:bd:4d:fb:0b:c8:b9:f1:
f9:aa:7e:6a:11:22:16:f9:9a:e6:58:76:d5:6b:ad:f0:82:f0:
63:37:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:17 2025 by rpki-client