Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3d46d84-8f57-3a5d-8f23-df4648ccfcd8.roa
File: e3d46d84-8f57-3a5d-8f23-df4648ccfcd8.roa (raw, json)
Hash identifier: 3ggFOWrJ/8Urr9VxUoX1zsyfdK42nuCPEbXfkA82lp8=
Subject key identifier: A1:02:EF:81:87:B3:4C:47:D2:B0:A1:4D:B2:57:28:A5:E7:DF:F3:C8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493ED3F18EEA8A20D93440BC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3d46d84-8f57-3a5d-8f23-df4648ccfcd8.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 396569
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:f1:8e:ea:8a:20:d9:34:40:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=e30662c2-8c18-43dd-8c5a-e081eea7ef5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3c:26:28:f3:38:5f:4d:47:93:73:40:c4:75:
98:b8:67:e1:5e:94:7c:6a:aa:ed:ff:8c:b8:f2:6d:
71:de:28:44:57:d3:4d:dd:89:da:54:14:b8:71:d0:
c9:10:9f:0d:af:49:d4:82:82:47:98:20:26:07:17:
4c:1e:94:86:e9:68:89:7c:c5:ce:05:a7:9f:16:b1:
31:60:a8:5e:40:b9:58:01:04:93:76:c1:0f:b5:37:
2c:34:94:8b:2c:c4:c2:88:73:9c:4c:34:6f:00:de:
76:44:da:ce:65:cb:34:89:9e:1a:81:15:2f:71:b4:
90:fe:b8:b4:00:98:84:c8:fd:99:0e:20:89:8c:39:
b6:e6:25:b1:f9:e4:c7:21:31:a5:a1:21:d0:a1:8b:
09:33:91:51:18:08:77:8d:5a:29:8a:4c:18:40:b8:
93:a8:e7:48:6d:90:ff:0a:5d:ab:49:77:d1:35:97:
e3:7b:0e:0f:9e:e0:56:aa:be:0e:e3:9c:bd:f1:b4:
a4:b6:0d:de:2b:ab:32:92:97:5e:1d:72:8c:ff:6d:
70:6d:90:19:ba:fc:fa:7c:25:72:b6:0c:f6:cf:96:
60:23:ed:af:cf:59:0b:a1:69:5f:29:71:7b:cd:9a:
c5:f4:a8:9d:90:69:b9:95:ed:6e:a9:75:ef:54:bd:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:02:EF:81:87:B3:4C:47:D2:B0:A1:4D:B2:57:28:A5:E7:DF:F3:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3d46d84-8f57-3a5d-8f23-df4648ccfcd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:6e:50:0c:ff:70:51:74:42:04:82:88:62:ae:ef:a3:01:58:
65:39:ec:dd:cd:9b:e2:91:c0:3b:a4:c8:78:97:4b:28:fd:d3:
3d:97:7b:60:3c:05:62:cf:8e:b1:1b:3e:46:7f:3d:d9:d2:85:
53:82:5d:96:46:b1:e6:ae:0b:92:2c:5c:9b:90:32:58:51:81:
1f:64:49:77:c5:27:7a:37:4e:10:b3:05:21:41:d8:0a:f6:14:
be:69:b4:d4:39:96:ea:c7:b8:44:0f:01:59:29:70:de:5d:9a:
f3:f3:13:89:8b:24:98:af:9b:40:3e:76:ce:bb:42:27:e4:c5:
bc:7d:ac:1e:b1:92:d1:68:1e:93:47:bd:66:22:b0:0a:8c:45:
de:9f:b3:b4:0d:e3:7a:c0:51:fb:78:36:c1:fa:07:d2:52:ef:
02:68:d7:32:10:2e:f0:16:ad:04:3f:d5:64:d6:4a:90:19:b1:
12:db:7e:69:ba:09:7d:51:82:56:08:9e:9c:72:9b:a8:fb:3c:
e3:3b:d6:41:db:ce:c5:ab:67:35:fa:8b:ea:00:23:75:bc:39:
3e:73:d4:61:06:f2:ca:44:ef:fa:33:e9:d7:48:08:c7:e6:e0:
ea:d1:f1:f7:33:68:ae:a1:05:99:74:56:a5:f1:e0:1f:be:d2:
6a:ad:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:35 2025 by rpki-client