Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aea081a3-dc81-3186-b9a6-ce73cfe1ac6c.roa
File: aea081a3-dc81-3186-b9a6-ce73cfe1ac6c.roa (raw, json)
Hash identifier: RFG+JMsLpYnnd5a+/CMWLgkFGFDhDqGJYBuPPtnqhdE=
Subject key identifier: C7:18:FD:58:B2:21:40:73:7D:08:BA:B4:9B:16:1B:B5:96:6F:FB:BB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DA983D824248E4B099C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aea081a3-dc81-3186-b9a6-ce73cfe1ac6c.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 397210
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:da:98:3d:82:42:48:e4:b0:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=33a79ce0-5c75-46f5-841b-7590c87dea5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:32:f5:80:ec:8a:77:f2:51:14:a7:76:c3:
c3:8b:86:a6:96:39:9b:b9:41:83:b2:ab:4a:15:8c:
c3:5a:5f:e3:2e:40:be:2d:15:32:c3:d4:57:23:9d:
df:97:03:25:4a:bb:f5:f9:f6:a7:eb:58:d2:b5:b0:
0d:67:da:95:ca:41:5f:ef:41:b0:0f:89:39:8f:c7:
ac:63:e3:e0:19:36:6c:a9:f4:54:5c:00:be:e2:3f:
cd:be:c5:ae:c6:59:1d:f1:30:62:9e:d4:9c:be:02:
c9:28:6d:d3:7b:6e:ce:34:a0:3d:de:bc:13:54:2f:
96:dd:55:1c:17:f5:e7:e5:5b:5c:6a:25:2a:fa:f6:
3c:a6:f4:71:72:8a:7b:a4:55:ce:f1:f6:2b:20:2a:
35:f9:4e:ba:63:ca:18:11:34:83:b9:e1:ca:ba:13:
b1:76:fa:55:5f:f4:44:c4:d6:83:b5:de:5d:27:c0:
50:d1:12:d6:cf:dc:8a:57:95:4a:1c:a4:29:9f:56:
e9:17:9b:03:10:4c:45:bb:1f:e3:5f:93:19:06:d1:
d1:d7:f5:5a:d3:4c:1c:b3:a7:b2:d8:66:36:5f:66:
8c:3e:6d:52:90:17:f7:80:23:9e:2b:b2:8e:98:f6:
ef:8d:9d:74:1f:cf:1f:aa:96:7d:80:07:9a:28:ad:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:18:FD:58:B2:21:40:73:7D:08:BA:B4:9B:16:1B:B5:96:6F:FB:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aea081a3-dc81-3186-b9a6-ce73cfe1ac6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:fd:18:23:c5:06:45:86:9c:dd:44:c3:fd:22:66:e7:f8:b1:
c9:56:22:20:c8:e1:c0:bb:90:78:db:cd:b5:70:c5:f9:a5:ff:
30:63:74:5f:8f:80:13:00:c5:db:c6:36:a4:fa:e0:0b:d9:43:
0a:38:f6:1c:4d:1b:1d:75:94:cb:cd:6d:10:29:0d:4d:f7:f2:
28:cc:46:51:12:ba:5e:79:97:79:58:92:2c:aa:1e:e7:6c:08:
d8:54:02:3e:34:d0:20:7e:05:62:ab:ff:7f:72:c7:35:06:05:
23:3c:e5:8d:4c:a0:91:f5:84:db:69:1a:82:96:11:65:9e:3d:
79:f2:3b:b6:ae:76:62:9b:cf:fb:c8:2a:92:86:1e:6d:f6:1e:
b2:c4:26:2d:e9:b4:6e:cd:13:9d:29:9b:92:35:f9:3f:63:b2:
31:ba:c0:99:0a:18:f7:e4:bb:b0:c6:72:38:64:3d:4f:be:8a:
ba:c1:3c:fb:39:22:4e:9e:f4:9a:74:55:77:a0:47:0d:5a:68:
1e:ed:ab:d2:22:53:39:f4:a0:4f:12:b0:28:62:1d:c8:47:95:
df:65:bb:39:81:e0:dc:5b:17:fd:13:2a:32:f2:74:4a:89:1c:
53:e8:6c:3e:84:7d:90:8d:64:d9:9f:e6:d0:ba:21:6a:ee:51:
33:04:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:39 2025 by rpki-client