Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95d79d8-27da-3d61-8647-801b2cf6de9a.roa
File: d95d79d8-27da-3d61-8647-801b2cf6de9a.roa (raw, json)
Hash identifier: NKEfjtyjmmm87G3W0s5PiGRmFY3yqrTgRo7QBPE+nHo=
Subject key identifier: B1:80:36:66:95:AC:8B:4B:46:39:CA:4A:02:25:6F:E5:6C:12:4E:E9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493ED3F1F193D5073160DFF3A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95d79d8-27da-3d61-8647-801b2cf6de9a.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 36630
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:f1:f1:93:d5:07:31:60:df:f3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=a688ddba-2142-4d12-815a-59514a7eae51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:3c:85:c4:2e:0d:fa:26:96:bb:94:95:75:
7a:2e:35:04:d6:bf:31:03:d2:03:ba:30:37:f3:48:
8e:cf:50:1e:e8:8f:37:90:83:c6:e7:56:c0:59:49:
f5:60:30:b6:71:21:4e:da:0a:4a:02:11:c1:02:2f:
9c:42:28:4b:0b:31:69:19:7f:4d:2b:41:d3:24:73:
c3:61:fc:00:74:29:9c:b1:a4:75:7c:ad:d4:62:e2:
8e:3c:8e:7d:af:20:73:50:e0:35:c7:07:82:63:ce:
e0:ab:12:3b:a2:78:16:27:59:ce:2b:17:fe:0e:66:
8e:58:c3:95:38:c5:15:2b:57:e4:62:61:29:5d:80:
a3:c2:c0:2f:09:7f:ae:e7:48:dd:5d:28:ce:6d:0f:
e9:32:ff:8c:a1:af:85:f9:73:78:3d:c9:41:99:bd:
7d:5b:ab:78:0d:1b:da:1b:e1:35:6b:68:2a:ba:08:
9d:6e:49:00:94:64:a4:7e:03:11:8f:65:95:00:f6:
53:76:ea:7b:a7:31:bb:b0:1b:c4:3a:fa:fd:84:eb:
b7:b7:e4:6a:c7:df:66:08:d5:61:bf:04:60:ac:c4:
d1:67:d0:14:7f:d8:b3:0f:56:91:c6:64:d2:b1:b3:
c0:11:0f:01:dc:5f:21:48:c3:e0:92:ce:c7:44:7f:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:36:66:95:AC:8B:4B:46:39:CA:4A:02:25:6F:E5:6C:12:4E:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95d79d8-27da-3d61-8647-801b2cf6de9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:53:d8:e1:87:5b:a9:a4:4c:cd:d0:78:6b:31:74:1c:e4:4c:
1f:0b:da:69:65:7c:be:e8:06:31:c9:8b:3e:50:4e:06:76:1e:
f5:57:56:58:c4:41:6b:71:b3:c3:35:f3:0b:7d:a8:e5:75:d6:
d1:42:ca:df:fe:6d:1c:f3:78:99:54:5f:31:e0:e4:dc:6e:40:
e9:ae:45:a1:6f:ae:25:42:5c:81:e1:bf:04:47:31:0b:14:f5:
d4:03:48:8b:81:a1:b5:fe:4a:a5:26:18:fd:8d:c9:24:9f:f4:
03:d4:b2:1d:eb:04:10:7a:1c:16:22:65:17:a8:56:d1:58:1f:
d5:ee:74:40:4c:04:e8:4c:1e:2c:1e:3e:80:ee:e1:22:fc:3e:
39:e2:a6:e8:ac:58:72:96:7a:36:46:c0:3c:58:57:e0:66:15:
87:20:0a:79:c7:d3:6b:8e:53:85:38:22:39:26:be:9f:4c:33:
78:96:77:da:a8:9d:ba:64:24:41:c2:78:f1:c3:2a:65:25:2e:
5c:c5:90:0e:ee:e8:8a:67:d5:27:ab:83:39:f3:10:90:7d:49:
68:4c:36:09:10:a9:a4:26:17:66:d9:0a:95:d3:ee:c6:62:85:
a8:83:96:ea:22:3c:58:9f:01:23:4f:2a:cc:41:15:de:fe:12:
60:54:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:07 2025 by rpki-client