Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8bc2c1a-f5ef-3289-b116-97055d58b2e7.roa
File: c8bc2c1a-f5ef-3289-b116-97055d58b2e7.roa (raw, json)
Hash identifier: SQFF8FTgfzpWXCUSmZ8VWjEnSEh4xiPo6cBkNM1B2Vk=
Subject key identifier: 2E:A2:43:BA:7D:EB:C2:8A:AC:9A:B3:EF:E1:21:4F:32:1D:E9:E9:B5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B78443E474ABDF646D9D8400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8bc2c1a-f5ef-3289-b116-97055d58b2e7.roa
Signing time: Thu 30 Jan 2025 13:46:19 +0000
ROA not before: Thu 30 Jan 2025 13:46:19 +0000
ROA not after: Wed 30 Apr 2025 12:46:19 +0000
asID: 396568
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:43:e4:74:ab:df:64:6d:9d:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:19 2025 GMT
Not After : Apr 30 12:46:19 2025 GMT
Subject: CN=b8e92c31-b099-4528-8d4e-3433a62c76b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:10:60:56:5c:d7:2b:ec:ea:0e:33:39:0d:e6:
61:b0:a0:98:9b:ac:77:f3:fa:36:14:40:78:26:00:
6a:10:39:8b:4a:f3:58:57:cc:ca:d6:07:ca:31:ec:
ff:11:5a:39:a7:5b:59:a6:2e:67:1a:a5:63:de:c9:
b8:bb:67:e7:79:e7:de:4b:a7:da:e9:91:94:c1:8a:
d5:01:81:29:4f:c7:93:75:74:e9:f9:18:6a:6a:77:
67:29:14:f2:6f:37:63:09:6b:e3:cf:ff:a7:c2:d2:
46:23:c7:27:25:fa:b4:69:e0:10:83:13:ab:e3:1b:
48:64:4d:58:09:0e:dd:e8:c6:28:cf:c4:aa:aa:64:
0c:36:9c:8d:8b:b1:db:a0:20:b8:7f:55:13:2d:16:
d7:e5:44:de:a1:14:08:7d:6a:c6:f3:8d:1a:98:ef:
be:55:c4:eb:87:e8:81:46:7b:63:a9:4a:6a:e1:3d:
52:7c:85:04:6b:22:35:98:1f:e9:f1:4a:30:61:38:
e5:53:b7:ec:7e:8b:5f:02:2e:08:fa:53:0a:2a:d4:
36:41:82:e3:6d:42:a6:a0:87:6b:bf:1d:4b:27:e4:
0e:bf:af:63:63:63:34:0a:cf:1a:ea:ae:75:3f:e5:
04:a2:f0:0c:0c:6b:98:e9:c0:83:66:4a:a8:4e:dd:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A2:43:BA:7D:EB:C2:8A:AC:9A:B3:EF:E1:21:4F:32:1D:E9:E9:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8bc2c1a-f5ef-3289-b116-97055d58b2e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:46:a2:cc:5d:1a:c2:d5:aa:f6:cd:47:16:78:31:3c:10:4d:
87:d7:43:89:96:5a:af:92:35:6f:4d:56:0a:5b:28:4b:41:e6:
d7:07:59:e9:22:d6:cd:db:7b:42:40:71:9f:89:e1:3f:31:54:
08:4e:56:86:d6:85:91:ce:7e:38:20:d5:1f:27:07:cc:58:ee:
30:ee:1c:bc:ad:8d:b9:e9:30:98:53:0f:01:7a:94:8f:fb:53:
c6:6f:07:db:6f:a9:3d:e6:05:16:ed:32:9d:d2:a1:d0:c9:b8:
2a:4a:35:76:99:11:67:1e:f4:26:ab:44:ef:70:f2:53:b3:a3:
3e:30:00:7a:e7:ec:b4:8b:be:47:64:0f:40:21:d8:e1:cb:c1:
9e:b6:9f:e2:39:36:d9:50:60:07:65:5f:33:24:61:06:09:83:
02:5b:d6:17:d7:f2:24:40:de:4f:4f:02:a4:98:11:ea:61:e4:
d8:75:ad:41:38:3b:cc:a8:fa:87:94:36:c2:f3:be:23:7c:a3:
fc:15:69:28:97:ed:89:96:04:e6:78:9e:02:b6:63:58:55:8b:
3c:b3:a2:f2:5c:fe:68:d1:5e:5a:52:29:e3:39:7e:44:7b:41:
ef:a6:c5:80:c0:6c:b1:de:f7:22:64:0d:36:58:1b:d9:17:31:
a1:7e:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:06 2025 by rpki-client