Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa
File: aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa (raw, json)
Hash identifier: QJGGKIw6hG+pmTzqVhI0BvTk7ycaVdLGPCYn9lr8NHo=
Subject key identifier: 5B:57:9F:B0:57:08:E7:CE:1A:3C:9E:F9:44:A8:A9:B5:7C:36:61:5F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B7844409532158042640CA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa
Signing time: Thu 30 Jan 2025 13:46:19 +0000
ROA not before: Thu 30 Jan 2025 13:46:19 +0000
ROA not after: Wed 30 Apr 2025 12:46:19 +0000
asID: 396562
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:44:09:53:21:58:04:26:40:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:19 2025 GMT
Not After : Apr 30 12:46:19 2025 GMT
Subject: CN=8bb76737-5eb4-48c5-8410-a16702472064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:60:1c:a1:82:e2:81:0a:72:3c:5a:98:b7:
fc:ff:74:5b:7c:c6:42:9d:db:d5:db:c6:69:74:11:
05:5e:9f:65:54:42:e4:29:97:d1:ec:0f:34:9d:98:
40:b0:d4:14:99:8e:ef:e3:40:80:0c:c6:78:97:ef:
4f:a7:2e:9c:64:ca:6b:b1:68:46:9a:30:ae:a7:64:
88:8a:57:86:86:d6:1c:0b:75:56:bf:82:1b:2a:ce:
a2:85:57:df:7c:df:6b:92:f6:e7:8b:b1:ce:58:7c:
33:6c:51:97:74:74:9a:62:ab:49:53:5f:e3:96:b7:
c4:b1:66:36:48:4d:a6:74:1e:31:0d:38:ed:9b:2c:
df:a6:6c:d2:86:d0:ec:00:d0:77:70:c0:6f:8a:df:
63:e2:38:13:9c:1e:9f:63:33:c6:ab:00:70:82:03:
62:ac:3d:86:50:54:cf:88:fa:f3:a0:f2:b6:4c:73:
bf:0f:e4:fb:05:fa:b7:0f:ef:31:78:8c:b8:2b:7c:
7d:da:c7:74:68:2b:15:72:e5:51:62:cb:9f:93:cd:
c5:dd:1f:a4:81:65:c3:86:ad:1d:ca:d7:b4:d0:f1:
9c:de:ab:18:5b:05:9e:d7:98:c6:b5:57:cc:fa:71:
26:d4:61:24:0c:e1:66:67:2e:00:11:e7:ae:0d:c9:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:57:9F:B0:57:08:E7:CE:1A:3C:9E:F9:44:A8:A9:B5:7C:36:61:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e0:62:ea:dd:75:b9:f5:9a:81:59:60:06:04:46:39:07:1d:
18:82:d7:bf:d6:f9:cd:d5:b7:a3:ef:1c:16:64:11:d6:f2:29:
f0:dd:ad:fe:05:89:dc:7a:d1:33:11:59:4c:8a:84:a4:bf:ed:
da:88:5b:59:88:92:a0:a8:0b:d3:77:72:fe:20:51:dc:9d:05:
9b:76:58:18:38:3d:ba:97:52:eb:4f:08:28:20:69:86:ba:36:
be:d7:22:19:08:fc:f7:cc:59:22:0e:0d:3d:bf:1d:7e:70:49:
90:6e:4b:3f:18:f5:f9:9b:01:bc:b4:10:a9:6e:af:08:60:d4:
3e:cc:b0:cc:45:71:c0:b7:21:38:23:a9:8b:db:89:50:cb:0c:
ab:a0:16:c0:a8:c4:ed:7a:57:78:5c:17:d9:2a:b7:8e:0c:7c:
aa:3e:1b:f1:19:25:92:5e:03:21:e6:9c:a9:0a:32:ba:2e:06:
36:e1:c3:08:45:49:a9:d2:59:61:9e:d1:10:91:44:ff:18:d5:
32:ab:ce:59:06:22:ac:53:05:d1:3f:3a:02:0a:44:74:90:80:
25:76:d6:99:3c:10:3d:01:cf:78:46:86:e1:1d:ff:60:50:40:
d0:0a:ec:73:ee:70:3f:94:72:6d:5b:49:92:ec:c5:50:21:49:
e5:96:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:56 2025 by rpki-client