Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f39602-0187-3f2d-9d05-25dcdc043692.roa
File: e0f39602-0187-3f2d-9d05-25dcdc043692.roa (raw, json)
Hash identifier: Vr5BBU8i2WvpngKYQT6QnxZF30640Fcj/Pog+4BPkMw=
Subject key identifier: FE:F7:49:CF:19:85:D8:4F:9A:A3:42:64:AF:27:E2:E6:4A:55:3C:0C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B7843D4323100FF5278D5700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f39602-0187-3f2d-9d05-25dcdc043692.roa
Signing time: Thu 30 Jan 2025 13:46:16 +0000
ROA not before: Thu 30 Jan 2025 13:46:16 +0000
ROA not after: Wed 30 Apr 2025 12:46:16 +0000
asID: 396543
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:3d:43:23:10:0f:f5:27:8d:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:16 2025 GMT
Not After : Apr 30 12:46:16 2025 GMT
Subject: CN=4c0134a2-820b-4bbf-9681-55f621d32704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:ee:22:7c:b8:b0:54:2c:cc:33:06:9a:0b:
e0:b0:b9:30:6c:24:db:22:63:e9:7a:59:3a:a6:a2:
f1:30:cb:c4:e5:eb:aa:2f:f1:61:47:b2:fc:e9:62:
d4:a8:d8:b0:24:72:ce:65:d4:52:ca:0a:e0:2c:67:
22:66:f2:dc:4c:3f:95:aa:5f:38:48:a1:fc:ac:15:
81:27:d7:f1:bc:50:ed:c5:be:cf:68:8c:cb:4c:4a:
61:97:01:4a:67:77:da:21:05:b0:40:93:43:f8:7f:
28:08:87:9c:c6:35:ba:a9:a6:6f:cb:48:d7:14:67:
1f:62:02:72:c4:7e:a9:8b:bd:bd:72:37:36:f2:23:
83:99:90:bf:2a:20:40:55:7a:1f:cb:5d:21:bd:f6:
44:06:67:05:c9:58:a5:fb:57:c1:d2:44:c5:ef:9b:
52:72:e1:d4:68:a5:28:22:31:cf:a0:70:82:8f:b3:
01:3f:2e:29:e0:3d:77:2a:8b:ec:b4:1a:a6:ff:d4:
0f:64:c1:58:d1:67:b0:59:11:d5:c0:90:03:63:81:
7c:4f:e7:1e:0d:3f:72:3d:53:11:01:99:d8:85:6f:
81:01:8d:46:65:49:16:05:bf:2f:1e:e0:63:61:45:
d2:14:d0:7f:8e:54:85:92:fb:a7:61:7a:ab:87:97:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:49:CF:19:85:D8:4F:9A:A3:42:64:AF:27:E2:E6:4A:55:3C:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f39602-0187-3f2d-9d05-25dcdc043692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:b6:1c:14:3d:2e:93:28:bd:eb:97:ed:87:ab:b5:81:29:fa:
d5:4a:88:c5:a6:0f:4a:07:e0:44:7d:d7:3c:c5:5d:83:34:ad:
20:43:a0:c3:41:4d:a3:4d:0c:87:e2:a3:bd:7d:1b:c7:87:70:
0b:55:af:b4:20:a8:4f:3e:70:aa:e3:12:79:3c:e1:97:38:3c:
f0:42:aa:e2:b4:65:d1:2c:eb:d9:e1:a3:3a:d3:a3:34:33:01:
dc:fc:a4:1d:41:7e:73:d0:ac:f8:65:1a:94:d6:7b:06:6a:49:
6e:8f:09:28:35:af:df:f5:1d:2a:34:26:4b:d1:b2:e9:37:f9:
0f:3c:33:76:b3:96:0a:e5:55:c0:55:8e:b6:23:99:58:fd:b4:
69:d0:5a:58:70:52:3f:6a:e6:bb:d4:ca:aa:80:f1:b8:b5:18:
ca:46:2a:b6:98:da:7f:75:e5:88:75:e5:62:ed:ad:85:d0:61:
bf:5c:a2:c2:71:95:78:42:71:f1:2a:d7:71:ab:1c:bb:d1:23:
12:47:ac:5b:4a:45:1d:80:06:ab:30:76:65:13:9b:cb:ef:92:
29:60:89:a8:a8:29:57:ef:b6:da:ae:58:35:07:5e:c6:23:c4:
a8:f1:16:70:20:91:57:bf:82:58:fb:87:6e:9c:ca:a1:8d:9c:
02:a0:0b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:36 2025 by rpki-client