Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ede2747f-9c5a-3dec-a604-ca16550c07d3.roa
File: ede2747f-9c5a-3dec-a604-ca16550c07d3.roa (raw, json)
Hash identifier: xAf/itfWMUjDEPnzISedX/oeBMfzy4xJdU/BV0McNPg=
Subject key identifier: E2:32:03:22:C2:00:18:C5:E1:60:56:97:08:39:33:E8:E2:97:CD:6E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AF2BB0A46BCEEE2FE0F84380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ede2747f-9c5a-3dec-a604-ca16550c07d3.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 396547
IP address blocks: 192.81.185.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:b0:a4:6b:ce:ee:2f:e0:f8:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=c9c2b6f9-33a5-4971-99f9-43959264893f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:29:7e:47:f8:5d:1e:40:24:18:54:ac:ef:
fb:34:04:06:e9:58:d9:c4:7f:d4:bf:3a:1a:09:f2:
fe:10:38:bc:57:bc:f6:fc:a5:50:6c:d8:bc:26:0e:
d1:65:37:c3:2b:ff:4c:ea:e7:01:5c:cc:ee:ea:98:
b2:31:1b:4b:57:18:fe:5d:0a:e0:5e:a0:c2:4c:e4:
ec:98:8c:46:04:66:fa:ab:7d:13:a5:3e:95:39:b0:
1c:23:08:ca:8f:ae:b0:6e:14:2a:5b:e3:33:1a:dc:
fd:e6:49:f1:ab:27:4f:d9:66:b8:50:5b:e2:86:a5:
b9:d7:fc:28:f2:ce:55:78:44:f4:d9:8e:41:0a:80:
4f:aa:ce:2f:3a:a4:c4:98:24:8e:66:62:45:90:0b:
11:ac:80:e0:79:14:0b:23:c4:7e:8a:e7:10:80:42:
b3:f3:cf:31:6b:47:81:e9:85:6b:7f:47:9c:2b:4e:
bc:0a:f5:a0:8f:bd:56:c4:cf:7e:86:12:f6:58:ce:
4e:76:1d:ed:44:f2:b1:26:9f:15:37:89:b2:8d:40:
f1:0c:4b:b5:f0:b1:b5:92:63:e6:e8:f3:d8:16:fb:
c8:97:5e:34:66:a4:59:70:77:98:87:0e:5a:e7:a5:
55:d4:a1:9b:22:fc:30:aa:31:d2:85:96:7f:c3:3d:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:32:03:22:C2:00:18:C5:E1:60:56:97:08:39:33:E8:E2:97:CD:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ede2747f-9c5a-3dec-a604-ca16550c07d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.185.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:9a:d0:a1:7c:d5:a9:07:a3:be:35:30:c7:08:ef:71:40:fc:
0d:03:d2:be:1e:df:a6:78:45:47:54:7e:5b:1e:d1:9f:73:90:
c4:6d:ad:dd:7c:11:c1:48:40:3b:74:7e:ea:ec:5c:b9:6e:5f:
55:4d:c9:8a:89:7b:ac:26:2e:2f:a0:d8:5b:f1:63:4e:84:8a:
84:30:ac:80:85:38:44:1a:e3:c9:a2:fd:54:9b:de:94:76:1c:
fa:e4:da:99:28:1f:db:02:1f:35:7b:13:50:ac:45:0a:a2:7d:
62:74:18:b6:e9:b8:6a:2e:1d:f8:f3:e7:68:66:b1:15:a9:1b:
34:60:9a:19:4e:89:9e:2f:88:c3:91:23:6e:3e:a9:a9:8f:08:
a5:e9:44:c4:17:50:44:c4:ce:6e:c0:66:8f:f6:c8:be:1e:08:
a6:7b:6f:31:a5:04:c1:54:7b:74:a8:fc:ed:a5:1f:42:03:56:
e3:ba:03:64:ee:c2:4d:29:df:b6:a1:44:73:67:a0:78:aa:dc:
c9:68:79:49:1d:4e:09:ce:65:42:c3:ad:76:2e:46:ae:60:c1:
77:85:26:be:cd:a1:01:a4:e5:27:43:97:55:05:f0:dc:ba:61:
98:1a:f5:47:75:12:76:3c:82:c0:66:a3:e9:15:db:63:f6:9a:
c8:47:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:47 2025 by rpki-client