Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c129de84-482a-3bbe-8fd9-2cbc185ec333.roa
File: c129de84-482a-3bbe-8fd9-2cbc185ec333.roa (raw, json)
Hash identifier: MfJSivkR7Xc9Nnt1IC3EYvfogfOmibffT0j/347qZdA=
Subject key identifier: 4E:9D:A1:23:D6:6B:4A:90:96:81:51:3E:13:F1:FA:02:AF:29:00:C8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C8566E41A404B6581780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c129de84-482a-3bbe-8fd9-2cbc185ec333.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396580
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c8:56:6e:41:a4:04:b6:58:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=c4b24a62-1b5f-4b8c-9969-6bfb00029d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:40:de:67:05:bf:bd:df:6b:0e:e8:fc:90:
4a:9d:12:3b:ef:11:7f:ee:57:cc:2c:52:8f:d7:31:
50:ab:e2:c0:ff:db:7b:c0:28:50:24:07:77:ef:12:
3c:eb:8f:13:dc:b3:85:6c:a4:99:a4:95:83:97:95:
df:90:78:a4:89:46:7d:96:f7:59:0e:5f:94:1f:f6:
b6:46:1d:e3:e0:bd:99:f8:86:eb:71:4e:7b:46:5e:
1d:34:43:4b:1d:7d:27:9f:2b:18:ee:cf:c8:c5:bb:
c0:7f:00:5e:4a:68:f7:af:31:21:a3:7e:d2:a2:c3:
94:82:34:92:c1:14:15:ce:ed:de:0c:da:5a:36:ee:
df:00:aa:80:ee:ab:34:e9:0d:48:e5:65:61:01:3a:
a0:65:e4:d0:42:88:01:6f:ce:16:d7:bb:32:31:0f:
0b:7e:77:c7:9e:f3:53:72:9c:63:af:36:31:c3:76:
9b:3d:36:c1:6e:a9:2e:d1:ad:5b:95:d1:73:e1:b6:
1a:0b:0e:10:c9:47:99:48:fd:b7:46:26:9f:01:4f:
b7:ad:65:cb:bc:09:5e:0b:57:c6:c3:3c:b3:cd:a1:
97:08:bb:78:cc:0a:ea:30:9d:eb:ef:41:6c:da:ee:
2b:f9:2d:9c:b9:f8:44:72:c2:93:a8:9a:3a:22:2c:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:A1:23:D6:6B:4A:90:96:81:51:3E:13:F1:FA:02:AF:29:00:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c129de84-482a-3bbe-8fd9-2cbc185ec333.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:8e:73:46:8c:fa:bd:2d:88:c8:75:fc:ae:45:c9:48:94:27:
59:92:16:8d:12:6d:4a:97:df:9d:2a:fb:5a:82:11:57:be:94:
ce:e3:33:4a:94:16:9e:cf:c2:e3:f4:b7:34:98:87:00:2b:33:
29:2f:a4:ae:39:93:65:03:ad:c6:53:8b:31:fe:de:51:19:68:
57:d6:4e:af:73:5b:83:51:77:f9:67:0c:e5:84:ee:63:ef:a4:
de:88:34:91:bc:13:4e:9a:47:b8:7a:30:2e:9d:a0:9f:f6:6a:
3f:b2:06:f4:10:53:a2:93:c4:b9:1e:a5:65:40:01:14:eb:ff:
fd:a5:e1:10:00:dc:3c:01:19:97:90:27:91:e3:09:12:2c:a2:
7b:84:32:fa:15:f1:c4:2c:99:44:a0:57:63:84:86:bd:aa:77:
e0:19:28:5f:b3:af:8b:10:44:8e:bd:62:9a:c9:50:da:27:e9:
f6:cf:54:46:2d:00:b4:c8:35:b4:e5:1f:28:46:79:27:f4:7e:
52:ff:71:eb:a2:a8:7c:a5:40:13:9f:ce:df:13:69:e9:1b:99:
53:1d:64:23:ee:29:0a:54:89:bd:d5:39:f4:fe:5d:0d:ac:fb:
b0:b2:6f:a3:d7:7a:49:14:39:63:9a:21:8b:7b:b7:43:d0:93:
06:3b:cb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:03 2025 by rpki-client