Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa
File: d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa (raw, json)
Hash identifier: iQQhbSHpxBz8VT9SjAhR0BQwIxxSJe45eWGWn7G75s4=
Subject key identifier: 16:91:B7:30:39:F2:2B:78:79:C4:07:41:2B:09:1B:BC:F9:60:99:0C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5D7015D39360063ED06A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 36616
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:d7:01:5d:39:36:00:63:ed:06:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=8e8e725d-a068-41c3-98e6-600a81414a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:26:32:7e:b6:73:5a:db:b7:a0:4b:24:8b:
83:4f:e4:de:b7:85:1b:d5:e1:be:d2:c7:6d:e2:ce:
f7:67:3e:5b:c3:e9:af:82:cc:c6:28:ee:a6:8a:ba:
cd:0b:ec:50:69:12:bb:a4:c0:5b:10:2b:2e:c0:f1:
4f:0e:ed:b4:96:23:95:83:33:4d:10:f1:ee:26:f2:
7c:fd:a9:fb:15:73:12:51:9d:7b:09:19:fb:50:e2:
f1:c3:e5:a0:9d:00:72:67:cd:56:f5:b3:0f:f0:15:
c0:9b:f3:5a:d3:10:af:91:0d:82:b9:4a:43:c2:c7:
3f:c9:f5:43:d1:78:d2:fe:3a:4e:2b:47:12:e3:9e:
e3:78:58:3e:e8:91:60:22:f5:60:b3:b5:80:8a:e7:
c0:3d:f7:30:19:d7:76:a2:57:10:22:9e:cd:6a:34:
75:fd:75:34:69:05:5b:98:20:9d:0b:6f:79:25:3a:
2f:f3:0d:70:cc:49:ad:4b:ea:de:a1:78:99:d7:5f:
cd:af:9b:36:3e:d3:16:e4:8e:cd:54:e5:46:34:7b:
98:32:87:4a:a7:78:42:0c:bc:1b:af:77:c6:de:2d:
8e:a9:ac:88:97:00:19:69:1b:3d:34:c2:31:e4:51:
c9:a6:6e:29:ed:b2:b4:98:93:c0:dc:c5:19:8b:78:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:B7:30:39:F2:2B:78:79:C4:07:41:2B:09:1B:BC:F9:60:99:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:20:9c:4e:b1:bc:14:31:d3:43:f8:fc:02:ce:3c:72:b4:12:
4c:f9:3c:fa:2e:2a:c3:6e:24:0b:ff:ec:2a:bf:70:ae:46:f1:
f6:1e:e5:3c:64:42:92:14:3e:47:85:5d:3c:34:4d:46:d8:b3:
37:52:8c:d1:3b:ab:e2:1e:5f:9e:44:64:ce:1b:12:74:f3:63:
34:0d:fa:cb:68:a3:b6:c6:fa:ab:13:6f:fd:19:33:ec:32:0a:
a7:2a:eb:3e:eb:f3:c9:9b:3e:0b:df:dd:af:15:bb:66:13:73:
f8:91:44:5e:4b:c4:37:b8:79:3a:20:46:92:43:69:9f:66:91:
d7:c9:bf:0b:7b:91:d1:e4:69:c9:95:cb:8a:5c:dc:a9:5f:01:
d3:f5:00:79:97:ee:b2:ed:42:36:96:58:08:2f:3c:de:55:aa:
63:c2:06:02:5c:cb:2e:06:73:97:b6:1e:d9:00:89:15:e8:b9:
25:79:00:c9:a2:4b:de:72:98:d1:07:60:d9:8c:06:a6:47:8e:
92:39:50:90:48:67:3e:1f:87:52:c5:01:61:9b:21:d7:5a:37:
b6:fa:fa:35:31:0f:9f:b5:80:21:d2:1c:9f:5d:cc:af:91:62:
b5:03:eb:0c:2b:fe:1b:a6:04:81:a1:b3:4a:19:a9:b4:e0:8e:
1c:63:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:48 2025 by rpki-client