Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5280717-5065-3984-b465-e7881747928b.roa
File: b5280717-5065-3984-b465-e7881747928b.roa (raw, json)
Hash identifier: qFGUQL1k4p9MOATq9ky1/BSnfac4A2zUjYYoaSF7Rmc=
Subject key identifier: CC:52:2B:B0:E0:F5:2F:D7:A3:10:22:A7:7B:46:16:6E:8F:71:C7:FD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F9805ACC49EF9AA6B2F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5280717-5065-3984-b465-e7881747928b.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396603
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f9:80:5a:cc:49:ef:9a:a6:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=a9d26bea-a2a3-42d8-afa2-dea8cfd34fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:72:c7:25:b8:4c:fe:d3:95:2d:de:45:fb:
d3:0c:8b:b4:32:f2:bc:de:4f:d6:b6:a2:a5:0f:0c:
ac:2f:55:85:59:39:81:cb:ef:af:b0:f3:fc:d4:b5:
f3:50:0f:8e:00:de:47:96:43:fb:df:53:fc:a8:54:
f9:7d:e9:7b:e0:19:95:ef:67:62:e8:aa:e4:d0:d4:
c9:0b:fa:2f:75:de:03:5e:c7:26:41:76:1d:33:99:
db:55:cc:e7:0a:2d:2d:0a:63:fa:d8:e3:ce:23:ef:
bf:31:7c:15:7e:4a:ad:6f:e4:91:13:b6:5f:f3:69:
25:7b:a9:8b:71:c2:ef:33:2b:7e:c9:95:45:32:c2:
60:64:ee:33:d6:a7:d7:20:df:e9:a7:b0:06:a1:b6:
1b:2e:c9:5f:39:d3:9c:a8:85:49:c4:d2:a5:91:51:
19:1e:62:65:47:ef:ea:f8:33:14:69:c3:e1:cc:ec:
01:e9:bd:29:fe:73:c1:8f:e8:0d:8c:8b:ae:07:9a:
99:e6:fa:6f:10:ee:56:cc:1d:9e:a0:2a:c7:b6:23:
ba:b8:f5:ad:31:a0:cb:71:0a:f1:42:51:ba:9f:d1:
48:84:31:58:0e:d4:cd:fc:16:26:5b:a0:80:6b:d3:
67:00:b0:a9:39:e9:af:5e:88:2b:61:4d:66:e6:11:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:52:2B:B0:E0:F5:2F:D7:A3:10:22:A7:7B:46:16:6E:8F:71:C7:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5280717-5065-3984-b465-e7881747928b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:99:96:2c:a1:dd:92:59:2c:6d:35:2c:4a:74:1b:31:57:be:
5a:29:7d:b7:88:40:bc:b4:75:c9:78:6d:f6:1f:4c:67:e1:7b:
e8:40:50:12:f1:f4:32:db:7f:7a:12:ca:cb:53:61:ae:a9:df:
28:c6:7c:1d:71:09:84:d2:55:9b:6b:bc:a3:4a:1e:06:51:32:
94:30:85:1a:bf:70:24:b9:9d:6b:c6:1e:25:38:10:6b:ed:17:
5f:96:59:4d:05:41:1d:54:f3:aa:a3:4c:90:4f:77:10:50:12:
dc:67:56:f7:d9:fd:10:9b:0f:5c:6f:51:a3:cd:e0:a2:7f:7e:
bb:a9:62:cb:3a:1d:72:d4:54:c9:0e:c6:b5:be:7a:22:4c:00:
f3:34:b5:c8:f0:13:62:43:f1:2e:2a:f1:f3:5a:86:d6:34:67:
4e:36:66:a9:de:22:81:b3:8b:86:d3:c4:c8:83:6e:91:7d:99:
9c:9e:00:e3:3e:ee:2c:7f:7f:3e:ad:c7:f4:79:52:1f:a8:b0:
0d:41:1e:cc:60:65:92:ef:57:fd:1b:45:7b:96:f6:bc:ab:8a:
05:79:5c:93:40:2f:76:7e:8a:48:3c:98:9b:e1:43:f8:38:1b:
66:2e:03:ad:fc:c0:0d:68:f8:3e:03:03:b4:11:21:62:0c:7a:
78:f5:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:50 2025 by rpki-client