Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba24e507-2f39-3e3f-9b6b-4c719e34e518.roa
File: ba24e507-2f39-3e3f-9b6b-4c719e34e518.roa (raw, json)
Hash identifier: u8fU9n2ZyfHNVYx6cbQVTBA+0HicfLo5i4M/q8hsbgE=
Subject key identifier: F9:B1:03:B4:67:DD:D7:41:34:A7:0A:CB:3B:CF:B6:D0:00:15:AA:5D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C93308F0D6863FD37C20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba24e507-2f39-3e3f-9b6b-4c719e34e518.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396577
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c9:33:08:f0:d6:86:3f:d3:7c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=2159b82b-4b53-478e-8d18-c3bc80de0268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:55:88:ea:25:dd:e0:76:77:ba:e2:c9:38:
d0:a8:ee:fe:e7:43:44:a5:64:48:e1:fb:aa:87:f2:
08:c2:fe:fb:61:10:f6:90:30:dc:ae:99:94:f2:ab:
31:7f:c4:50:b9:60:9b:74:dc:27:58:37:23:11:19:
9a:74:1e:30:fa:97:0f:72:8d:5e:71:6d:d6:c1:9e:
27:bc:30:6e:d5:84:c6:13:a6:1b:40:59:0c:69:be:
95:00:6d:7a:fe:90:12:f2:f0:06:de:00:3f:a4:c6:
de:fc:b7:8b:cb:a9:96:d1:80:3b:8f:f8:86:9a:ee:
99:65:fb:2b:e7:bc:17:fa:96:c0:a1:8e:46:c0:50:
b1:79:88:e7:29:94:f8:6f:6d:1b:8e:35:21:07:3c:
d7:f8:9d:6a:f1:0a:d4:97:d9:98:9f:86:99:af:27:
b0:3c:7c:78:42:c7:73:3a:d3:c4:33:3a:d0:85:27:
d4:e8:17:9e:50:64:6c:8d:13:81:9b:9c:9b:e1:3b:
24:d5:d1:19:c6:36:34:3e:63:ee:2a:59:14:0a:a1:
a5:f6:c7:75:d6:f3:be:50:1e:56:46:ae:a3:d6:28:
aa:0f:13:5c:a0:dc:b3:08:45:05:b0:38:58:ba:a1:
61:78:56:60:53:a8:04:08:3f:29:05:77:cf:c9:a0:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:03:B4:67:DD:D7:41:34:A7:0A:CB:3B:CF:B6:D0:00:15:AA:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba24e507-2f39-3e3f-9b6b-4c719e34e518.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:68:7e:94:07:ea:01:1c:cd:95:7b:8d:0d:24:f7:65:bc:93:
11:e2:ea:b9:f8:08:5a:37:e6:da:78:99:fe:76:d7:8d:d9:2d:
b3:97:aa:e9:6c:2a:fd:e8:a2:fa:8a:62:27:19:7d:a8:5b:f6:
44:bc:67:3e:96:32:af:d0:3f:3c:c9:23:aa:87:6f:d6:e1:52:
64:1d:42:f1:50:d5:b5:75:7c:00:2c:6e:de:cb:80:8d:b4:7f:
eb:cc:2d:75:29:0b:8a:1b:4b:48:62:1a:ac:4a:36:62:b0:60:
7b:12:7f:2a:bc:b9:d8:9e:c0:e7:bb:fb:bd:7a:38:5c:22:a9:
18:24:71:65:48:3d:f1:92:1e:bf:38:57:1f:22:fd:98:0e:7a:
d3:99:81:7d:76:92:99:09:55:2f:3d:02:c8:ba:c8:22:49:91:
4b:9f:6c:4d:2f:75:cb:61:e6:54:ab:37:de:ac:46:59:e0:f8:
eb:76:de:10:24:48:6d:d1:09:e3:65:ca:68:12:4f:91:41:a6:
e8:ea:25:25:07:a5:54:05:bf:20:d2:72:49:40:47:41:d9:05:
ba:8a:79:2c:c8:4e:eb:76:63:d9:01:ff:f6:90:60:e8:59:26:
d5:ed:f9:87:7f:6b:13:f5:2d:64:de:bc:89:29:4f:3d:d7:04:
31:14:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:38 2025 by rpki-client