Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0be1780-5f56-3f11-9c02-82afcb676e54.roa
File: d0be1780-5f56-3f11-9c02-82afcb676e54.roa (raw, json)
Hash identifier: EE5KQDuD5B2/BKGjwjrQNs7ESM4Vgq+p52tIUj/V/TQ=
Subject key identifier: 0F:EA:B7:0F:24:D9:A6:8D:A8:1B:6F:EA:C2:47:5C:1B:A1:0B:67:6F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D2DE420C88105CBF6698
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0be1780-5f56-3f11-9c02-82afcb676e54.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396592
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d2:de:42:0c:88:10:5c:bf:66:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=ee9b2a00-c945-49c2-a1ed-54ad4e0df4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:77:de:dd:28:1d:f0:d3:db:8b:3a:ae:fd:
be:42:8a:f3:0e:38:e0:f1:4c:7c:e2:19:73:ab:1b:
60:7c:15:2b:15:94:ea:b7:bd:ce:4c:8c:b3:47:61:
eb:32:9c:ad:13:29:89:36:14:4b:b6:4f:e0:0a:a0:
72:d1:2a:b6:66:de:65:f2:79:eb:1b:7d:e9:b7:a7:
eb:0e:5a:49:b2:be:c9:d2:0e:df:9a:41:bf:1a:c8:
b7:18:3e:3e:4f:cd:b1:ee:bb:26:b4:21:28:68:48:
68:c2:9b:06:6c:25:60:a6:b4:26:5a:05:da:19:4b:
62:e3:40:e2:57:73:53:f8:a6:41:04:fc:6b:9c:7a:
be:fb:c2:a9:1b:90:a2:47:ca:e4:3e:fb:8b:12:ef:
63:34:f8:5b:be:26:94:5d:1d:05:04:be:46:d2:53:
e1:5b:61:f6:d2:98:85:0b:1a:29:13:f5:84:9a:28:
e2:5a:2f:c6:1e:b0:62:db:54:fd:ca:43:31:73:ab:
48:4a:08:fa:3f:24:ee:6e:52:ae:cc:21:cd:7c:72:
49:bf:d9:74:62:b4:19:6d:05:0f:bc:e7:37:b1:9c:
ef:84:b1:b0:5e:89:f8:94:fb:81:ea:7a:49:01:e8:
85:9c:15:6b:f9:fe:9c:50:ad:5d:ce:cf:2d:15:63:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EA:B7:0F:24:D9:A6:8D:A8:1B:6F:EA:C2:47:5C:1B:A1:0B:67:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0be1780-5f56-3f11-9c02-82afcb676e54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:97:68:d2:d6:83:1d:e8:b3:ed:2d:89:45:fb:93:b6:fb:b4:
6f:b1:93:c9:cf:ab:0b:9a:11:41:3e:16:9c:53:5b:1c:3e:91:
b4:08:06:af:b0:fb:d8:b5:b3:76:ec:04:56:6e:9e:02:0e:56:
5b:37:21:b5:81:9c:2f:96:27:07:98:58:44:12:38:cb:9b:98:
2b:ff:d6:eb:b6:21:3f:1f:73:6f:72:c4:a2:f5:e2:85:d0:a7:
ef:1d:2d:06:af:36:c0:4c:c2:69:a7:b6:73:db:03:ce:7d:b1:
91:08:49:88:af:45:db:91:6b:4b:13:b7:f4:f6:0e:be:83:16:
0c:7b:b8:ba:f0:3e:67:66:13:40:be:b5:91:e2:ba:20:30:84:
b5:e1:02:ce:0c:23:2e:07:56:f0:4a:9b:d5:ae:a7:32:0e:2a:
78:18:1f:b3:4a:dd:e3:a2:d5:a8:1b:32:a3:10:3a:cd:c8:48:
e3:7e:96:a7:14:96:4e:a9:9e:f8:89:d4:57:3a:ef:8c:b6:f2:
b3:f7:bb:99:a2:e4:9d:82:fd:32:18:52:7b:f2:cb:f7:d1:c9:
eb:94:85:b5:1b:b4:59:70:68:6d:a1:87:89:af:d3:14:9c:fc:
8b:0d:e0:90:49:b5:cb:49:c2:82:50:74:de:c2:ee:a3:45:50:
dd:c4:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:52 2025 by rpki-client