Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd04b7e4-213a-3709-8b14-1b9d99e1f51d.roa
File: cd04b7e4-213a-3709-8b14-1b9d99e1f51d.roa (raw, json)
Hash identifier: awbV18qMbMOTN2rfaMpbio4Z2pZfmLRl95Rwny7YJCo=
Subject key identifier: F3:33:24:D0:4F:8D:6D:B7:12:26:45:8E:07:26:F1:99:AB:20:C2:4E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848854B3EF240C7E0AEEB043780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd04b7e4-213a-3709-8b14-1b9d99e1f51d.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 20172
IP address blocks: 192.42.175.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:3e:f2:40:c7:e0:ae:eb:04:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=0b9cbd5f-6d50-4efa-b55f-0c54b9f0f2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:16:a2:70:b3:54:a0:7f:95:4a:50:46:f5:
cf:f2:2b:d8:5f:ec:a4:37:6e:ce:94:bf:86:a4:cf:
aa:35:c6:4e:79:54:ce:1f:86:e7:55:aa:bd:28:66:
33:0f:e2:2b:6f:11:95:7b:0f:2d:ee:ea:fc:7c:40:
50:76:e4:70:00:4f:bb:bb:b2:8e:fb:e9:8e:35:d3:
69:5e:ae:7b:80:18:25:68:ab:72:2b:60:c1:71:a4:
27:08:e8:4c:1c:b2:10:31:69:8e:67:fe:2f:06:31:
89:66:86:68:47:31:85:dd:4c:39:b7:fc:ae:07:06:
63:01:be:5d:ea:12:b9:f5:82:b0:67:5d:77:09:12:
18:42:ff:2f:45:0d:6c:05:54:d6:1a:21:9f:f1:50:
b3:4c:7a:c3:6e:40:67:d2:ac:87:02:67:e5:e2:47:
ec:e1:b0:63:58:19:94:e7:3c:8e:f9:b9:c6:c1:8b:
e3:e2:5c:f6:0a:94:8d:55:91:24:0c:aa:f2:67:fe:
2b:f1:87:6b:dd:d5:1c:d6:06:b6:a8:93:9d:cc:fa:
af:5a:3b:fe:93:73:f1:54:94:ce:4f:bc:64:84:56:
3e:d8:3a:6b:36:08:95:08:a1:cb:d3:e2:62:d9:cc:
fc:fb:aa:57:4c:fb:7a:be:13:4d:7e:c2:bb:18:21:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:24:D0:4F:8D:6D:B7:12:26:45:8E:07:26:F1:99:AB:20:C2:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd04b7e4-213a-3709-8b14-1b9d99e1f51d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:ae:76:0b:3e:3f:14:9d:35:20:7c:77:8e:c8:8f:5a:fa:ff:
74:37:a7:e7:5a:93:3f:8d:41:b8:27:3e:7f:e1:0c:13:30:9b:
31:d2:c3:4c:96:00:ea:88:64:2c:2d:df:8f:8a:25:b1:7b:83:
c8:81:3a:17:15:41:17:7a:67:e8:f1:3d:c3:96:32:5c:3c:8c:
66:31:ed:9b:d5:d8:be:5a:40:f8:fc:97:d8:f9:1e:65:d6:32:
71:b7:04:68:52:3e:e1:a3:f7:d9:e5:22:d6:03:ba:ad:f8:aa:
10:3d:e7:27:19:76:c8:47:57:c9:4c:56:dc:82:46:21:fa:c5:
95:40:10:e1:ab:9c:ff:e1:77:21:30:5d:78:88:27:d9:84:1a:
b4:bb:49:44:ba:18:66:da:a8:72:d7:bd:c7:e1:29:71:0f:4c:
f2:bd:2b:12:1d:52:76:ed:26:09:5e:2f:bd:16:3f:1c:8f:12:
3b:a9:82:f4:f6:87:05:2f:21:b6:4f:ea:44:a0:59:53:ed:40:
65:58:ab:79:0d:9b:d2:b0:5e:63:76:ce:21:53:46:2a:5f:94:
44:95:99:d1:58:1c:58:43:d2:e5:7d:c9:2e:76:c4:0b:a6:93:
57:50:ec:bc:ea:d5:d5:f9:17:04:bf:1e:c3:07:95:e2:53:0d:
4d:32:d4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:56 2025 by rpki-client