Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa4b5717-b3bc-3774-a2bc-646e7b84119d.roa
File: aa4b5717-b3bc-3774-a2bc-646e7b84119d.roa (raw, json)
Hash identifier: PiBauCnvZjXIl+K+xmencRM9Knrpe0NvD82J5SZ9/lM=
Subject key identifier: 9C:D3:B0:B1:8A:60:52:53:3C:73:F5:80:F1:3F:F5:6B:06:D1:BA:3F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3CA92B86069C32EEE300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa4b5717-b3bc-3774-a2bc-646e7b84119d.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396564
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3c:a9:2b:86:06:9c:32:ee:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=3fdc25c2-30ad-499c-ac95-c149be27b754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b7:83:b2:aa:b3:b0:dc:23:3c:c3:66:ef:74:
6c:94:45:fa:31:9a:75:e8:11:73:10:93:d0:e9:0b:
bc:3d:38:94:bf:d8:53:e8:7d:40:eb:e1:b1:12:36:
06:3d:d2:5e:11:d9:3d:c2:bf:da:72:f4:2a:46:2b:
69:0f:f2:78:b8:c4:14:89:b7:84:d0:9b:24:ce:96:
5b:84:c6:00:4a:3e:7c:a8:ea:92:b9:8d:6e:98:40:
13:8d:63:7e:10:a9:cc:8a:51:cb:75:b8:cd:39:c2:
2e:ec:d0:5e:22:00:da:a1:e5:81:14:fb:1e:a1:ec:
0f:bb:ba:46:52:4e:95:fa:cb:87:fd:d8:0d:01:23:
30:e5:94:c5:90:e8:dc:35:8f:7d:ed:da:6a:79:ad:
e6:02:c0:d6:0f:6e:a7:19:08:18:f0:24:9f:bc:82:
e1:ab:0d:ec:9c:28:c5:e4:2d:9e:d9:4e:a2:46:7a:
4f:1a:b0:6b:be:22:4c:98:c3:6e:4a:90:fb:50:79:
38:5d:66:2b:ac:12:d5:03:85:ea:2e:45:80:e7:0e:
a0:7f:57:81:66:5a:79:31:3a:2d:39:2d:52:8c:9b:
20:e4:a2:e6:4b:42:6d:27:c9:6e:ab:39:25:23:ce:
54:5b:a7:82:4e:3b:8d:43:03:19:c6:c2:5f:8f:10:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D3:B0:B1:8A:60:52:53:3C:73:F5:80:F1:3F:F5:6B:06:D1:BA:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa4b5717-b3bc-3774-a2bc-646e7b84119d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:89:ec:fc:6a:9e:74:fe:8c:ff:d6:1f:f5:7d:09:fc:5f:2f:
5f:22:34:3e:3a:02:48:d6:8f:d6:13:e6:25:ae:21:c3:3d:c5:
53:4f:53:20:52:e9:43:cf:70:c6:ea:3b:e3:e3:a8:b8:b0:66:
a8:0e:93:4f:7d:25:47:f4:e0:59:32:05:87:7b:52:2a:73:18:
1d:52:c5:00:e7:93:56:f4:c9:09:b6:f6:29:c5:99:8e:93:34:
52:42:68:f6:5f:5b:65:67:e1:a4:55:1b:f6:cb:6e:11:fb:08:
4d:78:53:ca:9b:78:50:f3:d9:2a:55:28:f0:cb:ab:e6:0f:c7:
18:e5:9d:2a:0f:72:12:57:f4:97:c1:8a:ba:0d:dc:6b:51:0a:
32:ef:87:0b:f1:31:37:09:a2:c3:07:19:3f:98:ed:2f:89:e7:
61:43:91:35:0e:69:9f:14:b1:e1:18:a5:a9:19:4a:57:f6:22:
1f:81:ba:48:68:5a:7b:60:db:44:66:42:05:c6:29:bb:b6:b0:
f6:56:87:3d:84:b5:e3:5c:e5:5b:59:f5:ba:40:8a:82:0c:5e:
c8:03:b2:2b:0d:c3:ec:28:b1:97:05:c8:c5:ce:51:3d:d5:4c:
e4:a8:91:6f:cf:e6:43:99:33:b8:db:d7:ea:52:58:d0:a6:ad:
78:c3:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:12 2025 by rpki-client