Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb5afa5-719c-3395-8671-000202a7f9ff.roa
File: ebb5afa5-719c-3395-8671-000202a7f9ff.roa (raw, json)
Hash identifier: VfWUCFsOLKHHMJ3mdVoUIuMS9Lq3VITQfQL06h2wqU8=
Subject key identifier: 1E:F1:6B:99:A7:18:80:77:8C:82:B4:44:65:7C:A8:CC:E3:A1:77:02
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493ED3F48A32B5AF4206206500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb5afa5-719c-3395-8671-000202a7f9ff.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 396604
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:f4:8a:32:b5:af:42:06:20:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=09e71087-7b6f-4902-b5ee-be483243d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:be:76:e2:5b:3e:62:2b:b3:75:6c:f0:0e:
f9:e2:b1:23:8a:0b:f2:91:90:66:10:80:75:b4:9c:
3e:8d:75:98:5d:73:83:50:a8:d7:fe:44:2f:db:cc:
f5:32:ef:8b:2c:68:ff:9d:ea:35:1a:bb:5c:cd:5b:
94:32:3a:e9:aa:5f:c7:b4:61:65:69:82:7a:d4:7e:
72:e7:46:06:bd:82:cb:cc:d6:bd:07:9f:35:4d:d4:
5f:6f:31:f3:68:78:65:dd:09:68:de:ed:05:b3:45:
dc:3b:b6:01:08:fa:42:19:26:b3:6b:9e:c6:41:9e:
eb:b2:d7:25:e2:a0:2e:2b:4c:a5:5d:66:86:1d:b9:
d3:94:cb:6f:26:77:be:11:34:59:92:ec:de:54:1e:
e5:e6:cc:fb:87:40:ee:97:f4:7c:fd:23:4c:3c:08:
0a:63:06:87:53:fd:4e:92:40:1e:8b:68:41:17:25:
d0:6d:aa:97:cf:95:d1:ba:be:64:ae:37:41:23:d7:
f4:20:ff:3b:c7:4c:d5:ba:af:ca:de:ba:d6:a2:9e:
7c:96:3c:bd:12:63:27:d8:81:74:2b:59:d7:1a:a6:
ba:ed:15:c0:fe:05:ec:d3:90:88:5f:68:68:de:04:
13:88:b1:8a:e9:98:87:b2:b1:02:09:65:e0:4f:93:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F1:6B:99:A7:18:80:77:8C:82:B4:44:65:7C:A8:CC:E3:A1:77:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb5afa5-719c-3395-8671-000202a7f9ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:29:18:13:f1:ec:5d:e5:d4:b2:92:95:bf:05:55:ed:1c:22:
f9:84:7a:2a:48:a8:6d:65:27:6e:3c:23:17:8b:d1:f4:44:e9:
b4:28:00:22:6b:b5:d7:b8:6c:91:79:f3:49:ca:a1:ac:fc:7b:
84:1f:29:2e:6a:ca:64:e1:a6:d8:ef:c4:b4:18:4a:4a:06:05:
e5:e1:9f:e7:73:62:7a:80:a8:c4:3e:1c:5b:2a:19:0d:8e:5d:
e3:1c:80:19:1b:15:25:81:61:f9:fd:97:ad:3f:c2:93:2d:c9:
0e:f5:39:60:09:0b:f4:05:f7:61:24:84:6e:8d:9c:14:ac:19:
7c:30:b5:79:77:20:12:72:0a:d2:90:58:3d:1d:cd:6b:01:e8:
b3:84:58:da:b6:e1:55:57:4e:61:e6:2d:df:db:18:1b:ea:c4:
b9:54:ac:e3:dd:74:1e:9a:f8:74:1b:78:f8:c5:2c:6a:84:cc:
dc:75:08:e9:13:59:2a:a3:37:08:10:97:22:f1:ae:be:47:bd:
24:5f:dc:12:f8:7d:40:64:5c:bf:02:98:bd:18:59:97:d3:a1:
8e:86:e2:00:ea:d3:1e:05:63:86:4c:ee:bc:73:a6:8b:f8:7a:
8f:27:a6:9b:b3:31:02:1a:83:60:6f:be:5f:e5:5e:1b:af:c7:
5c:19:94:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:23 2025 by rpki-client