Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa
File: a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa (raw, json)
Hash identifier: 5Xuonk0UzPEdjrZamSQXtfY4PBk8e0I19YCcWW65xrY=
Subject key identifier: C5:87:B4:2F:0D:63:0E:ED:0E:66:0E:B0:2F:B5:64:2B:0D:38:0F:9C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3CCF19D6D7E4CCFB4300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 10515
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3c:cf:19:d6:d7:e4:cc:fb:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=746e9889-473b-4903-a9f3-90223eed23ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:5f:7e:e8:31:c6:95:ea:77:ac:0d:1c:f7:
ee:98:be:e9:13:38:6e:5d:e2:99:3f:73:cf:25:75:
a6:35:8a:a4:5f:af:90:56:ff:ea:19:03:7e:00:7d:
b6:1b:e5:07:ac:c3:06:ca:cb:47:e5:02:d3:6c:52:
b7:5b:7f:84:77:74:32:f3:f4:e6:ca:3d:b7:34:33:
1a:77:71:a7:b0:28:13:96:84:bf:82:1c:b5:05:38:
3e:e0:6f:cc:a4:bc:75:16:f1:8a:52:0e:15:75:21:
1b:9c:c8:10:0a:b8:5d:80:ab:49:60:a8:cc:82:7b:
42:cc:05:43:d6:31:5c:75:41:76:0d:3f:0a:9f:de:
76:76:76:f6:43:cc:c7:78:86:00:f7:a8:79:1a:b9:
c0:56:f6:fc:69:c3:4e:24:d5:16:26:e6:8f:80:0d:
fc:4b:27:66:08:11:e9:bc:5c:19:9f:63:a4:f4:1d:
d1:1a:60:0c:10:e6:41:e6:18:eb:2b:49:7a:ca:5f:
56:1f:d3:ce:1e:48:54:b6:8f:18:25:8a:59:62:db:
a6:8f:b9:80:c9:a7:9b:5f:75:50:38:df:cf:a8:92:
73:3f:8d:69:06:73:67:7f:a1:d9:e4:68:2c:c2:1f:
eb:0f:da:99:8f:2e:ac:3c:64:24:3c:ad:f0:7d:b0:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:87:B4:2F:0D:63:0E:ED:0E:66:0E:B0:2F:B5:64:2B:0D:38:0F:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:64:b9:13:73:07:67:20:13:06:7b:9e:18:44:6d:7e:99:a6:
15:f1:47:7e:6b:1a:1c:14:24:cc:31:37:a9:5f:46:1c:04:b0:
2c:6e:88:9e:3b:a3:e5:85:d6:21:a1:c6:b8:4e:15:c8:b0:b5:
64:1d:30:d7:e8:1c:05:a2:d3:a0:34:fa:68:c4:a4:c5:3e:95:
75:f8:6c:3d:49:f5:bd:f8:46:a8:3f:af:a7:9f:66:9e:da:55:
b4:a3:9d:8d:db:25:15:86:00:20:2b:85:2a:c8:ce:d5:22:77:
a2:31:32:d2:e4:82:46:d3:22:5f:24:a8:df:4c:77:1c:98:e2:
90:b8:af:84:b4:27:b5:8a:e9:a3:de:8f:f4:f8:0c:5c:97:ac:
af:b3:50:79:5a:9d:22:af:45:c3:fe:53:b3:28:97:a7:65:30:
4b:15:76:aa:77:7f:a0:b6:55:c8:e8:cf:b0:51:69:65:84:ec:
c1:98:d6:87:2e:e2:4b:49:06:17:48:c8:4d:ae:7e:94:a0:88:
27:89:25:7a:c7:81:fa:af:2c:30:5c:8e:08:07:d2:8b:36:3b:
d1:24:0c:a1:e9:bd:9b:f4:48:11:04:b2:c8:40:50:9b:f3:cd:
e0:cb:3c:e0:da:8f:9d:36:03:1b:89:8c:44:bb:89:64:55:53:
a6:2c:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:59 2025 by rpki-client