Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1c30235-155d-318d-8f14-3d6b80290aee.roa
File: d1c30235-155d-318d-8f14-3d6b80290aee.roa (raw, json)
Hash identifier: oG0j/sm/j4K2/0O3wP6BjVi3d1VnIKTpnSklFqoDJf0=
Subject key identifier: 3E:5C:29:A3:48:2D:D8:77:E9:A7:F0:D9:D9:F2:30:B0:6C:E8:18:5C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3CF61A5D7C80D8EDADF8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1c30235-155d-318d-8f14-3d6b80290aee.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396593
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3c:f6:1a:5d:7c:80:d8:ed:ad:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=bb22abbf-273e-4439-b7b3-9fe0e3ddfd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:e5:ec:74:c5:ce:c7:c3:00:9f:85:0c:03:
b1:ff:a8:36:b3:19:84:8b:d7:fa:7d:99:1d:48:71:
b3:d5:0b:f0:ef:38:c2:71:b1:c8:59:b0:37:e3:5b:
a5:6a:84:95:47:57:86:26:a1:06:69:98:34:f6:67:
fb:8a:5d:7a:55:20:39:a9:ae:cc:a8:c3:9d:e2:52:
9a:91:75:ce:37:24:c1:64:2e:90:9b:28:c0:ba:0f:
48:04:5c:6b:10:bd:e4:ea:ef:cc:31:e5:eb:fe:b6:
6d:a8:86:0e:c6:26:f0:1d:c8:8b:25:87:86:78:94:
39:b7:dd:61:c6:5c:1f:a3:66:07:a1:c1:4f:12:a9:
82:17:af:08:8d:7b:12:71:f2:bd:3d:12:ad:bf:7d:
37:c0:f1:40:41:3b:78:c5:b3:c4:a7:7d:be:d9:e9:
a9:b3:c3:0b:d6:ac:df:b2:86:30:c4:94:15:05:ce:
0f:5b:ff:44:f2:dd:64:83:85:54:43:c6:c6:49:a8:
60:18:40:8c:97:58:8a:ac:7d:5e:2a:96:22:d6:9b:
00:0f:02:40:64:c1:9b:fc:e5:18:bd:cd:66:72:64:
63:7f:1f:60:0f:e2:4a:ab:ba:2e:e0:db:e4:ad:f4:
a9:07:2f:c2:97:57:41:13:04:03:74:ae:93:66:aa:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5C:29:A3:48:2D:D8:77:E9:A7:F0:D9:D9:F2:30:B0:6C:E8:18:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1c30235-155d-318d-8f14-3d6b80290aee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:fb:95:3b:b2:9e:85:f5:d1:41:7a:82:d6:d2:72:35:e4:e4:
87:bb:c1:83:ad:69:5f:bd:39:5a:a1:96:0c:b1:89:a4:28:5b:
3d:b5:53:db:0b:c6:e6:f7:a4:f3:c0:ff:71:13:7e:df:7f:00:
eb:c8:76:3b:09:ea:a8:49:78:72:4a:c7:71:6c:6b:db:01:9b:
3d:9b:94:01:6c:a8:62:4d:e4:8f:58:e2:10:4f:c6:dc:bb:c0:
0c:c0:7b:4b:f6:0e:23:07:3d:73:4f:ec:b9:97:01:2b:2b:e8:
74:58:fb:c7:c6:c0:78:57:76:81:74:f6:69:f1:ab:0f:15:6b:
18:eb:b0:af:d5:76:f2:8a:2b:6e:34:86:e9:81:7b:2a:c8:a1:
c0:fe:67:b7:da:99:e3:ca:78:82:b9:26:6d:d7:1d:a1:65:d5:
a0:b9:33:d6:10:f5:fc:ad:9d:75:95:2e:f6:c3:77:2e:f0:00:
74:98:68:b4:0a:69:ef:e8:c3:db:b4:0c:85:3a:3c:24:31:64:
c2:b6:61:1c:6d:bd:e9:ff:3d:fb:cd:50:70:d6:05:dd:f8:f5:
27:5c:78:6e:e6:8f:1a:45:53:26:32:87:67:b0:ec:86:0a:9f:
5e:95:48:50:4f:f6:c5:5e:b5:e9:49:b4:45:6b:dd:ba:92:2b:
36:84:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:48 2025 by rpki-client