Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c77d03f7-dfd3-3c72-8964-cb2b3985d172.roa
File: c77d03f7-dfd3-3c72-8964-cb2b3985d172.roa (raw, json)
Hash identifier: /rRznTct2MDpFiZVUaHro6xtQ0sF6wUQOsh/oMPPAYg=
Subject key identifier: 19:92:A0:A1:C9:1F:5C:F8:43:7C:F5:27:D5:8C:27:44:6A:E9:BD:95
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B37B989BEC2CD144C3500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c77d03f7-dfd3-3c72-8964-cb2b3985d172.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396552
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:37:b9:89:be:c2:cd:14:4c:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=682e2112-957d-427d-89a5-2f614d2851a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:a3:92:e2:6e:9b:94:6e:1e:de:42:1b:86:
27:5f:b6:e1:de:02:ce:14:4b:ed:03:7d:80:a9:de:
b4:64:ef:c7:7e:85:e4:f9:d3:e6:60:6f:ca:9c:25:
36:9b:89:be:92:7c:ed:67:72:2e:15:81:6e:50:41:
ad:cb:fa:89:11:88:ba:31:73:10:62:6d:b3:b3:b8:
b1:34:9c:8b:c7:39:29:fe:2e:1e:33:40:67:0f:aa:
65:cd:6f:d9:22:15:4f:17:06:39:1a:7d:2b:5b:68:
20:1f:fd:20:1a:10:c5:4b:16:51:cd:5c:37:59:e0:
e6:3a:e9:5c:8e:49:80:70:25:e0:23:96:00:9a:0f:
a9:89:d3:c7:42:9e:75:81:f9:da:7d:b2:6c:82:f2:
c1:a9:bb:09:64:19:99:74:ab:e6:62:ce:9e:27:c0:
2d:f0:77:6e:e7:6a:d8:97:a1:bb:08:b5:51:dd:99:
58:49:17:79:f4:32:36:87:9e:42:ad:79:1b:be:7d:
97:b9:e0:d8:2a:26:73:d7:7d:61:31:f2:94:e8:27:
75:f0:7c:88:a6:9b:6e:fe:17:79:e6:c7:91:1f:6e:
f1:6f:83:f6:77:25:fa:69:42:0f:8d:c0:4d:bb:a8:
a5:58:cd:d7:ca:81:6d:28:12:d1:68:c9:7e:6e:8f:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:92:A0:A1:C9:1F:5C:F8:43:7C:F5:27:D5:8C:27:44:6A:E9:BD:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c77d03f7-dfd3-3c72-8964-cb2b3985d172.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:36:d9:fb:10:36:05:84:c6:24:aa:f1:9c:be:61:cd:26:8e:
87:02:5f:f2:13:c6:ee:87:2d:26:3d:6b:78:6a:d8:d6:fa:84:
0a:52:5d:91:f0:a8:5c:86:29:0a:6e:be:ba:a8:01:c5:50:9b:
0e:86:bc:f1:1b:d3:88:17:94:91:e3:2d:c5:c8:11:54:c9:d3:
d2:0a:b3:4f:c6:1f:da:ae:b2:18:c9:8b:51:32:0e:3a:a1:f6:
b9:2a:19:28:d2:55:d7:ef:88:c4:43:ab:8c:c5:0b:d5:5f:43:
b9:0d:1a:b2:75:7b:59:ce:81:64:11:ad:f6:70:1b:ca:84:75:
cc:c5:6d:cb:84:77:01:a1:18:41:be:8a:7b:bd:11:5c:2b:ab:
61:43:49:04:bf:e4:83:ff:6f:1a:6c:5b:9c:32:8a:52:a6:49:
05:59:e7:b2:4b:98:be:24:e5:94:c4:e3:1d:ab:a5:10:a7:b1:
95:ac:cd:bb:e9:a0:cf:38:87:24:ad:1c:32:0e:36:e4:bf:82:
30:1d:e9:02:ac:6a:b4:a2:41:72:67:4d:75:25:f6:f1:b0:f6:
61:e1:4c:ef:50:1d:04:3c:53:ca:e2:eb:49:0b:9c:d4:c0:04:
75:cd:bb:d3:e6:b6:fb:38:8c:81:df:30:d0:e8:3d:9b:f0:4a:
cb:33:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:02 2025 by rpki-client