Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e39aa6af-fa02-39aa-84fc-c4d815ad6c9b.roa
File: e39aa6af-fa02-39aa-84fc-c4d815ad6c9b.roa (raw, json)
Hash identifier: JythYGhuHozpWG1IAxI2WWM7FdWgjmk1YOzU3P6jZBc=
Subject key identifier: EF:C9:33:B9:3C:AC:02:A4:3E:BB:5C:4D:77:FA:D1:7D:70:A3:72:18
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183FB931DC0C36F680AD100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e39aa6af-fa02-39aa-84fc-c4d815ad6c9b.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396554
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:fb:93:1d:c0:c3:6f:68:0a:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=c2715802-808e-4901-a2ed-ee2570c1fe0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:df:60:5e:82:5d:44:70:32:4c:ac:52:3e:
5c:75:ab:cc:e6:5b:c8:60:7c:db:0b:d3:e3:18:80:
f1:27:90:38:a3:cc:e4:49:ce:c0:8a:76:ff:cb:24:
b6:45:25:2e:5c:d1:40:13:65:23:81:f8:6d:1d:7d:
6e:0f:05:6e:a9:b4:74:e2:2a:9a:e2:b5:ed:bc:73:
27:58:a6:b0:2e:5d:5b:e3:8e:a4:26:1f:a6:5a:d5:
32:40:c4:bb:fa:cb:3f:28:da:93:1c:92:7d:b1:05:
20:e5:6d:c7:55:55:c4:5a:91:c9:cb:cc:b0:17:03:
f9:93:97:bd:4a:7c:25:bb:86:2a:5e:d3:71:9b:32:
76:9c:04:ce:01:2b:5f:8a:1d:06:9e:59:36:e9:25:
8e:3a:3b:07:77:7d:2d:63:7d:04:20:24:5c:35:b3:
9b:09:92:9d:b1:19:2b:d1:d1:f5:e5:e6:2d:9b:cc:
5c:83:6b:a1:02:e5:8d:4e:29:12:9a:fb:93:e0:28:
96:af:c3:8f:cf:38:b3:05:80:db:82:56:84:9c:e3:
a9:c4:80:dc:bf:d6:41:3a:b3:f1:52:01:88:56:a2:
ff:1b:9c:87:8b:77:38:54:9e:d2:90:9e:8e:be:e1:
03:e5:3f:82:92:22:95:1d:0c:85:1f:f6:8a:be:02:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C9:33:B9:3C:AC:02:A4:3E:BB:5C:4D:77:FA:D1:7D:70:A3:72:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e39aa6af-fa02-39aa-84fc-c4d815ad6c9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:46:de:78:35:18:9b:74:f3:af:0b:22:15:9e:39:9a:af:0a:
72:f6:dc:d8:03:38:65:a7:89:27:fb:9b:10:58:63:32:73:a9:
e4:8e:aa:60:b2:f9:bd:c7:a7:f3:57:51:b3:2d:11:ac:8a:32:
b9:d8:3a:38:5c:87:4d:c4:0e:9a:41:32:bf:0e:fd:0e:e3:26:
c1:55:e0:f1:d2:2b:c7:c3:64:ea:29:a9:cf:48:45:2f:ac:85:
55:23:78:af:2c:24:01:2e:ff:83:7e:d1:0f:81:f1:85:92:26:
70:95:a9:3b:6f:5a:d6:3e:b7:05:2c:5a:38:23:55:49:9c:29:
e6:5f:bf:3f:4c:e2:c6:45:46:7c:ce:5e:dc:db:f4:bb:72:34:
78:07:d2:32:cb:14:f9:48:ab:a9:dc:7f:5c:17:8c:ec:be:30:
52:9f:68:00:10:f2:fa:e5:29:24:39:26:3e:a9:f7:09:86:17:
a9:db:9e:fb:d4:2f:20:1d:3d:6d:79:10:21:cf:e6:30:b0:15:
1a:61:5b:4e:4e:ce:bd:5b:02:d5:8d:d2:b9:35:04:58:03:b8:
d4:d9:e1:aa:82:76:59:b5:2e:14:37:f3:e7:3a:3a:be:a7:fa:
27:40:79:aa:bd:b6:d6:5f:39:7a:1e:a0:27:73:59:16:e4:70:
ad:a1:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:48 2025 by rpki-client