Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4b99f96-becd-3a78-9ea3-37cb4d2be776.roa
File: e4b99f96-becd-3a78-9ea3-37cb4d2be776.roa (raw, json)
Hash identifier: pkCEgx6XKiJuu8+12m9TZ2iEHVDiWmiHoW+IzM3JVw8=
Subject key identifier: 90:E8:5D:9A:77:98:67:5C:61:CD:E4:98:1E:C3:7C:54:70:41:29:A4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B395692E3B48B77B419A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4b99f96-becd-3a78-9ea3-37cb4d2be776.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 397198
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:39:56:92:e3:b4:8b:77:b4:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=94b0dd34-a5f4-419a-8a5e-8739b24069f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:d3:3f:30:4c:a3:e7:10:8b:5a:8e:8c:a5:
e4:ff:44:e5:23:04:34:ee:22:7b:5a:99:0f:69:04:
0c:6d:09:01:e1:82:94:8d:30:18:5c:69:2f:ea:57:
09:a9:5d:6b:ff:38:38:0e:ae:95:f5:b2:16:be:1c:
e1:21:f0:68:b1:6d:12:ce:2d:8c:b6:e7:8c:a9:5d:
07:1b:39:c1:07:51:5b:3f:00:0a:0c:db:3f:96:30:
23:94:4c:a2:0b:8b:b0:21:52:be:f1:8a:9f:71:da:
8d:94:d9:6b:74:1f:0a:1b:f2:6d:5a:62:27:ee:65:
b3:09:21:4e:45:cf:c7:b5:d8:03:20:0b:08:4d:53:
1a:33:14:be:0c:e3:c4:a0:dc:15:34:32:a1:44:23:
53:05:18:e1:eb:77:a7:e7:44:77:df:37:2c:4b:ee:
76:94:98:5a:7e:82:8e:d6:19:17:e7:17:24:c4:2c:
3d:96:09:5b:c9:61:98:08:bf:16:3a:23:58:3e:ce:
92:fb:40:b8:80:4f:07:64:c6:2c:72:6e:ce:2f:f2:
02:df:d8:7e:3b:5c:8f:3a:2d:2a:d9:4b:96:18:f5:
e7:d4:2d:9b:18:ba:70:98:73:bc:68:ed:02:17:14:
57:f5:46:9a:56:a3:cf:93:65:61:ef:40:96:a2:8a:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:5D:9A:77:98:67:5C:61:CD:E4:98:1E:C3:7C:54:70:41:29:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4b99f96-becd-3a78-9ea3-37cb4d2be776.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:65:5d:58:ab:d3:ed:0a:fe:36:ee:98:d9:04:f4:91:5a:f6:
cb:8c:f8:5e:e9:bb:78:0e:b3:19:79:6b:ff:09:33:62:b5:1b:
e2:7e:65:12:19:ca:8e:de:54:51:d0:4e:86:29:f1:a2:e0:b3:
0c:e7:62:b6:dc:15:5f:34:50:99:11:22:9c:c6:bc:dc:30:ec:
11:91:03:a8:60:d5:d4:2f:80:99:92:54:34:e8:9e:10:67:26:
37:4b:8e:b4:d2:83:2c:7f:60:be:54:c0:30:e0:00:03:27:43:
06:8c:db:3c:6e:2b:f0:c0:96:4b:6b:36:02:07:57:af:5c:70:
49:a7:97:56:25:af:50:ea:02:60:27:3e:42:3d:5e:c6:46:16:
5b:f3:c9:e3:fc:36:7e:68:75:ca:0f:a0:bf:48:e5:a9:b8:9f:
70:8b:b0:c7:a2:1d:b2:19:9a:95:73:85:a0:2c:b7:9e:9f:83:
bf:cb:fd:65:53:7e:0d:76:41:83:f6:ef:9b:ad:2a:7d:27:b8:
e0:06:e2:37:4f:c7:2e:53:03:d3:ca:35:96:a6:2d:52:11:bd:
40:b3:3a:19:1a:ea:7a:47:27:84:cc:c7:19:77:65:1d:16:7f:
ed:4c:04:34:45:c9:d9:50:b6:13:ce:8b:50:bc:f8:4f:77:ec:
b3:2b:86:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:06 2025 by rpki-client