Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2f1b6fe-0898-3a58-8af4-2c82816cfa10.roa
File: d2f1b6fe-0898-3a58-8af4-2c82816cfa10.roa (raw, json)
Hash identifier: BaD2hf9G4SrCQkESo//rmrgN6qWeCRoZXqQu+cMgY18=
Subject key identifier: 0B:32:0D:0C:53:B7:DD:B6:AF:62:76:BD:FC:69:16:C1:E5:0E:4D:D2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3F565DBF2257A67CCBC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2f1b6fe-0898-3a58-8af4-2c82816cfa10.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396614
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3f:56:5d:bf:22:57:a6:7c:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=1a8f54a6-17d0-4c85-bfac-aff8ea78d739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:f6:63:04:48:09:df:bb:97:97:ac:0f:da:
ba:46:4f:77:80:58:54:0a:47:d6:f9:2a:db:2d:cc:
ea:17:7e:39:57:a5:32:5e:76:74:51:c3:4e:92:57:
41:50:fc:80:70:6b:ce:43:c6:ac:1e:15:92:5b:be:
34:64:63:22:11:4a:12:16:38:83:8d:88:1b:4e:e0:
9a:3a:4e:8d:6d:3d:b9:07:7f:75:e3:2a:ca:04:df:
df:79:57:d0:c4:2c:9b:f3:2b:b3:71:8a:6b:f6:8e:
c0:30:5b:fe:31:d8:f8:e0:3a:90:e1:28:d2:74:bf:
a4:b6:1a:14:27:9a:8f:bb:83:86:01:1f:e1:36:21:
f3:67:26:04:bb:b5:76:c2:a7:43:6b:dc:56:e0:5c:
9a:4a:9d:ce:08:15:48:fb:a3:11:9d:f3:37:64:2e:
9d:8e:c7:83:7f:94:ef:48:97:0e:11:df:27:ce:80:
40:e1:11:26:f2:d9:3a:0e:1a:fd:eb:af:8a:b2:e5:
13:10:8c:86:45:60:c4:93:89:67:d3:5a:58:73:f7:
6a:5d:f7:7f:f2:98:a3:f8:a8:66:05:84:0e:ba:6c:
8f:d2:4e:5a:9b:fe:80:64:d8:0e:74:c3:58:44:2b:
29:20:f9:59:d4:57:65:9b:6f:b8:eb:d0:46:c2:4e:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:0D:0C:53:B7:DD:B6:AF:62:76:BD:FC:69:16:C1:E5:0E:4D:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2f1b6fe-0898-3a58-8af4-2c82816cfa10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:8f:9d:06:58:ea:1f:36:f2:9a:83:e0:4b:e0:1c:25:b7:30:
ec:de:2e:26:fc:66:e7:d7:fc:17:7c:08:e0:c9:f4:2b:c9:28:
0c:17:69:7a:ab:72:ef:30:53:c2:2c:51:6c:13:da:cb:11:72:
41:d1:02:36:f0:bd:f1:37:f5:03:34:7d:c9:57:b4:8c:14:86:
ff:40:e8:0f:ed:d3:1c:7f:46:f3:0e:dc:69:0c:ec:fe:0f:9b:
3b:71:d3:70:03:35:21:f3:0c:8c:40:35:29:30:12:74:fa:cd:
01:55:e5:80:f3:9f:3e:69:90:f7:8c:2b:2c:29:fe:cc:a1:21:
89:2b:5f:24:33:e9:8b:4c:53:02:52:6c:eb:92:28:56:60:7e:
42:29:6a:05:46:d0:ff:aa:1f:3b:57:45:63:44:19:41:c3:12:
35:ea:34:14:bf:7e:fc:ea:80:80:ac:e6:9a:69:44:b0:bd:41:
30:b3:f9:04:a0:5b:1c:8a:db:39:ec:66:6f:a4:a9:85:60:b8:
8d:8c:7b:c7:0e:92:19:f6:23:87:93:13:ac:97:47:0e:2e:9b:
ec:23:76:bb:d1:39:7c:21:71:03:e3:58:49:c8:f1:e7:78:ce:
bf:b0:8f:f4:fd:62:fb:ea:ad:39:f8:70:99:cd:44:90:f3:14:
1d:66:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:21 2025 by rpki-client