Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b88bdb35-3e75-3a55-928f-7d12e69fac1f.roa
File: b88bdb35-3e75-3a55-928f-7d12e69fac1f.roa (raw, json)
Hash identifier: 7HeQSs3iTTPweasbP5T1R2OWNlAe/62L4oK1KnhbC6s=
Subject key identifier: FB:B1:28:94:27:E9:E1:09:AE:AD:02:4E:5F:5A:0B:5E:A7:DC:06:D6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3E756249692066234C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b88bdb35-3e75-3a55-928f-7d12e69fac1f.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396594
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3e:75:62:49:69:20:66:23:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=9ca37c2f-3947-4fe2-aade-eee374df3592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:14:f4:68:8b:6a:5a:6c:c4:4d:f8:78:d7:
81:a3:cc:83:59:48:56:61:f3:19:31:65:80:48:2b:
ec:f3:b5:91:3d:65:aa:ed:6d:f2:74:7e:92:1e:00:
e8:6b:be:44:62:cf:8e:74:8d:65:7e:c8:ba:ba:24:
b5:54:99:00:28:67:d5:d0:bd:6a:8e:bc:cc:80:b0:
44:dc:79:3d:74:f0:7b:e3:06:9f:6d:fd:52:5e:6b:
cd:21:92:f8:52:b9:b7:86:dc:9c:8d:50:f2:f0:9d:
11:19:52:34:c9:80:e0:8d:ec:de:df:4b:9c:0a:08:
d5:5a:85:5d:60:e5:f1:61:b4:48:9e:1f:3c:2b:6e:
14:b0:4c:27:7f:25:c2:77:06:01:f9:62:e7:9e:e1:
12:d8:20:fe:30:20:e5:dc:b9:c4:1c:5b:8a:e1:cc:
0f:ec:99:f3:da:f5:aa:89:cc:47:fd:fe:56:7d:01:
f7:f1:3a:5e:a3:19:56:f2:d1:1a:1a:7b:b5:3d:2b:
98:16:7b:32:bb:91:b0:a6:33:74:ca:2f:ed:39:89:
f7:7e:51:98:8a:a5:9b:b6:7a:cc:b3:1d:c5:88:c9:
53:79:57:20:04:3d:18:b6:63:31:c5:ab:42:1f:d8:
9b:f2:85:c1:cc:08:0b:97:62:3d:8a:64:40:fd:67:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B1:28:94:27:E9:E1:09:AE:AD:02:4E:5F:5A:0B:5E:A7:DC:06:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b88bdb35-3e75-3a55-928f-7d12e69fac1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d8:1e:5a:f9:6b:d9:bd:a5:1e:91:44:16:46:d8:64:8a:5d:
4a:f6:7d:ee:6d:75:2d:0d:65:b5:db:d9:05:40:08:4b:59:4e:
79:63:d1:08:a5:24:c8:f8:86:d5:a3:a3:0a:6a:f0:e7:39:83:
d3:f7:f3:a0:ea:91:d2:54:20:f0:41:b4:95:7b:f0:68:b1:14:
d0:7b:20:a9:5a:b0:7f:40:b6:40:76:9d:e5:dc:78:8d:09:81:
8a:1a:59:ea:ca:2f:7e:ee:00:24:54:e5:bf:0a:05:0a:80:cb:
7d:51:f0:ca:d7:ff:36:7d:d3:15:23:51:71:b8:9b:df:46:a2:
59:26:bc:81:d9:53:86:e4:71:a4:9f:3e:a4:7b:51:a5:2f:57:
37:32:16:45:ad:79:0f:28:99:29:9a:4a:b3:8c:47:a1:24:20:
06:1e:5f:93:cb:94:72:14:39:7e:9e:b4:b6:b3:d7:f1:2c:62:
6c:20:e4:fc:16:11:1c:49:25:85:9f:0b:2d:b7:c5:ed:ce:7c:
06:23:d1:df:85:22:41:37:fc:4f:4d:ca:21:15:a2:d5:f9:01:
ae:67:03:d1:ca:86:55:9a:66:26:a7:fa:72:59:64:fb:0f:eb:
72:ef:3f:4f:35:79:65:ae:fa:32:d2:71:b1:8c:7b:86:af:dc:
b6:f4:cb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:35 2025 by rpki-client