Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5cfc836-257f-3be6-89bf-a2dc2bb69252.roa
File: d5cfc836-257f-3be6-89bf-a2dc2bb69252.roa (raw, json)
Hash identifier: u1NX+QCWizB/mPobWVgDktP7zdGj/9241IQwgCRSOHE=
Subject key identifier: F9:72:A4:9D:02:91:2D:29:1B:93:D2:60:9B:25:D0:F9:96:45:AA:FA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848854B3B48ED984D74A26D4240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5cfc836-257f-3be6-89bf-a2dc2bb69252.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 396560
IP address blocks: 192.42.175.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:3b:48:ed:98:4d:74:a2:6d:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=7a93156d-a4a1-4a27-a6d7-25263c311884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:e2:84:88:cf:c5:59:f4:29:c6:55:21:20:
0d:9c:83:31:ce:e4:41:c9:b9:7b:08:be:84:80:40:
21:63:6f:ce:79:d9:6a:28:f9:a0:37:c5:6f:30:9d:
de:08:86:91:ce:a9:58:70:38:e4:b9:06:ab:0d:9b:
ee:6d:80:e2:9c:87:e8:ba:be:ab:2a:2a:d3:b3:28:
cb:56:17:c8:47:4a:6e:53:47:f5:8a:75:9f:f5:08:
ea:a6:48:d3:0b:f1:dd:77:0e:8d:5c:3a:2a:91:ef:
6c:d9:f4:58:13:99:c5:2f:54:8b:b5:15:db:bf:f1:
4a:4c:8e:80:72:13:44:27:44:da:ec:c5:14:09:7d:
b7:30:8a:ef:c8:ac:73:be:9b:d7:7f:26:02:0d:70:
39:9b:62:67:d8:e8:19:b2:20:82:05:8b:ef:34:3f:
86:21:dc:f9:94:91:0b:85:54:14:f1:57:d2:dc:40:
14:65:8a:0e:1b:79:de:aa:5d:35:51:b4:7e:68:a9:
f0:72:7a:f2:a9:e4:77:3d:ad:13:66:df:bc:64:1a:
09:0e:d5:87:7c:93:97:e2:86:ef:6a:43:57:09:dd:
be:22:9e:97:9f:12:87:9a:44:1b:ea:f8:b6:19:4b:
34:83:07:c7:21:51:dc:8a:30:96:c0:91:88:76:a2:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:72:A4:9D:02:91:2D:29:1B:93:D2:60:9B:25:D0:F9:96:45:AA:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5cfc836-257f-3be6-89bf-a2dc2bb69252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:d2:30:f5:b2:a0:4f:8a:4c:b7:80:01:2d:2c:3e:4e:c8:0a:
bd:ce:5d:4a:a3:60:93:d3:5f:bf:a7:d1:2c:a4:51:92:d4:9b:
62:bd:08:bf:78:82:29:52:10:00:d5:e1:fa:3d:58:c3:60:4d:
6f:65:22:cc:20:4f:a6:75:0c:d5:95:f5:fc:bb:57:30:f5:fa:
5a:b9:f7:5b:62:4f:c0:b0:0e:66:71:a9:06:53:5b:79:a3:be:
0e:87:f6:fd:82:19:41:d0:82:cf:63:36:d8:ca:64:ea:4a:32:
1c:17:90:cf:23:06:7f:88:ef:fd:3d:1b:6b:47:69:0a:cb:9a:
ab:20:b1:73:52:d4:d4:99:4a:71:e8:99:67:41:c2:b7:fe:14:
4c:ae:6e:3f:8b:73:6a:74:88:eb:9f:36:55:fc:c1:88:de:de:
94:97:05:72:21:92:a4:61:6a:38:7e:ab:72:0b:38:ba:e3:b0:
3d:7a:40:b6:e7:f3:3a:83:73:78:2f:ac:c6:c4:6e:a9:84:60:
64:f3:22:f7:72:8b:30:80:29:84:9e:6f:ff:84:15:5c:df:51:
96:40:a6:99:1a:b0:c4:bf:b4:80:92:87:0e:44:e1:84:1b:81:
bf:6d:ab:c5:d3:f4:42:87:5b:9c:e4:fb:19:b5:fb:fa:06:d6:
a6:20:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:08 2025 by rpki-client