Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e35278bb-0441-3f7c-92fa-d4eb1029ae77.roa
File: e35278bb-0441-3f7c-92fa-d4eb1029ae77.roa (raw, json)
Hash identifier: BGfScX/Bf911xAPyq4fzJKLd0uTxyYxLCzZlmpGD13s=
Subject key identifier: F1:5E:B7:F6:97:BC:4A:70:2C:93:61:67:14:F5:78:1A:4E:98:29:A6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DE45DE4B49C9BF35BF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e35278bb-0441-3f7c-92fa-d4eb1029ae77.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396546
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:de:45:de:4b:49:c9:bf:35:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=c9914087-28aa-4732-8079-723aa12ad836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:84:ee:c0:14:62:a5:5a:4a:42:50:9e:7a:
b6:66:ec:9a:6a:c4:cc:fc:9e:30:16:60:72:ce:41:
70:c9:fe:78:9d:ab:8e:e5:d5:32:05:fb:4e:2f:12:
fc:b9:5a:8a:69:c3:44:06:b8:4c:86:e9:13:a2:6b:
9b:48:bf:66:cf:1e:2f:78:b4:7b:e7:cf:91:8b:e6:
5b:40:a3:c3:05:2b:b7:6a:eb:d9:9a:05:a6:ab:55:
8f:78:f5:58:a3:bd:45:04:98:5e:2a:e1:78:2d:e9:
77:2d:8b:e3:68:33:b6:5a:4d:6b:46:17:8e:18:f5:
9c:ac:61:b8:64:a6:f1:43:04:99:16:8b:51:f2:ff:
9e:e6:ca:86:ca:55:12:b1:85:f8:b5:22:61:fa:35:
c9:c2:ba:b9:09:88:29:5c:b1:73:62:62:59:8b:d5:
9b:9f:c5:f7:c6:0a:51:96:ca:2c:81:d3:94:b9:8e:
25:fe:78:e9:41:8b:a3:4c:fd:85:8a:e8:ae:25:eb:
a8:36:cf:0c:4d:3a:5f:98:8c:7d:ec:de:3f:40:78:
4e:76:f0:fc:36:39:a9:4d:62:c6:36:f4:5c:a4:42:
5b:e0:dd:98:3f:23:36:59:93:cb:23:9b:f6:a5:45:
ba:d2:ad:7f:93:c5:9a:16:58:87:7b:23:ff:db:2d:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5E:B7:F6:97:BC:4A:70:2C:93:61:67:14:F5:78:1A:4E:98:29:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e35278bb-0441-3f7c-92fa-d4eb1029ae77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:bd:c2:fd:0c:c2:1c:63:88:c5:00:00:e0:0f:dc:d2:43:97:
c4:73:8c:a0:21:c7:53:ea:b4:e1:05:29:09:d5:fd:fa:9f:cc:
f3:c5:41:a0:d0:df:6d:56:f7:af:fa:d3:a7:3b:a5:b6:b2:06:
29:fb:67:59:f2:16:47:12:2a:e3:45:b9:05:3a:ae:a0:59:b0:
7c:5c:cd:12:43:4e:54:4e:59:29:ba:6c:8f:9d:51:06:2f:9f:
ba:70:db:cc:78:56:6e:fb:35:1e:1e:39:d9:fc:ea:64:59:fe:
ef:8f:e7:06:d3:b0:3a:53:b2:27:96:e4:7e:75:60:0b:68:9b:
d5:fc:86:3b:c9:8b:b7:6c:77:d7:86:01:26:fc:a3:48:ef:4a:
a5:a5:a6:af:05:ea:e9:76:9b:27:1d:01:ae:3f:7b:59:72:81:
c5:a9:1e:3f:f8:50:9e:5e:52:d9:6e:a8:55:5a:aa:e2:5f:cd:
d1:19:0b:cc:00:9e:2b:fb:ed:d2:86:8e:ae:48:0f:ab:8f:b6:
8d:ec:c4:b7:8e:c7:e8:3c:95:ac:25:e8:25:37:31:df:c5:31:
70:ab:44:90:67:f0:9f:ad:db:78:30:4b:f6:6a:ac:2b:4b:29:
36:0f:5b:f3:39:35:28:d6:4f:42:bd:e6:6c:24:ec:7e:f5:3e:
d7:5e:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:59 2025 by rpki-client