Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f73ec1e3-772b-30a8-8388-299730559562.roa
File: f73ec1e3-772b-30a8-8388-299730559562.roa (raw, json)
Hash identifier: ONNWJ/WuwcPpH7IbNy6rExA89LVy4cz2zYievP13wk0=
Subject key identifier: 78:37:07:19:7D:74:2A:06:DC:1B:03:AC:6E:E6:1B:18:7A:0C:D8:A9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3FDE6FCE4B389972CC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f73ec1e3-772b-30a8-8388-299730559562.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396572
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3f:de:6f:ce:4b:38:99:72:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=23daf924-ee7f-4de0-ac62-c7abb697a1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0d:68:73:e5:1d:a2:a4:19:93:a2:5e:38:ba:
98:8f:5f:e8:6a:6b:24:a1:6f:6f:ae:8f:33:dc:9e:
5c:8d:0b:35:27:0b:64:a5:06:92:64:7e:b3:80:15:
46:a4:99:a7:7b:57:e6:58:9d:3e:68:f3:32:dd:59:
17:48:a7:79:01:57:4a:1f:a4:26:3c:cf:7c:b6:f3:
e7:fe:b8:fa:36:a0:22:b2:dd:df:63:c0:1c:ef:ea:
0d:8e:1f:0f:6e:db:a9:8a:df:db:cc:fd:8e:f5:a2:
21:c9:91:6d:d9:9a:85:ed:bb:46:8c:de:69:11:46:
c3:a2:17:77:d0:81:20:04:0b:ae:9b:ca:d6:66:76:
9f:56:26:67:8f:37:c7:4f:58:a6:1e:bc:c4:df:55:
e7:c1:b5:4c:a2:16:12:99:d3:d3:fc:c4:f5:34:4b:
a5:ac:f5:86:5d:7f:27:54:0b:db:c6:8a:ad:55:c4:
46:1b:32:75:60:f4:7d:d7:71:21:28:c5:b8:7c:ce:
ab:ee:26:b2:b6:be:c0:98:6c:f0:e8:cd:fb:05:d9:
00:33:51:16:82:bf:ac:17:f6:cd:fe:3c:5b:f5:9c:
05:a8:68:c7:32:ef:9d:42:25:8b:b9:84:3b:60:be:
f5:72:62:4e:ed:3e:dc:41:62:98:b5:cd:0e:50:a2:
fc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:37:07:19:7D:74:2A:06:DC:1B:03:AC:6E:E6:1B:18:7A:0C:D8:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f73ec1e3-772b-30a8-8388-299730559562.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:56:2c:58:5a:7a:10:39:d5:4f:69:f5:47:ff:e7:a1:e7:50:
5d:6e:47:9c:0c:61:72:b0:d8:6a:f6:75:23:44:e2:89:ad:31:
82:96:f5:bc:05:63:f9:39:b2:cf:eb:84:1d:85:2a:05:0a:6b:
56:5c:9a:bd:80:8c:b6:78:ef:22:e3:7e:0e:32:9e:6d:be:0f:
1c:7b:e9:d4:93:3d:d6:15:4a:f5:6a:48:c5:6f:d1:46:28:e1:
a2:cc:6a:7b:46:23:70:ba:64:a2:05:d4:b6:23:40:3c:51:c4:
ef:34:7f:02:03:97:79:58:d1:16:4a:16:9b:b8:5f:b8:2b:58:
18:40:fe:9e:de:57:f0:db:64:40:06:e0:0e:b7:05:2a:74:b9:
d1:7c:d6:90:e4:f7:fd:fb:7d:c9:9f:da:44:fc:e7:04:89:7f:
3f:4a:28:75:8f:4a:c9:35:5d:db:2a:6d:ad:ba:de:98:91:7b:
dc:24:5b:a0:75:21:fa:25:77:51:95:b2:83:a2:ee:79:84:03:
bf:cf:b8:ab:e5:44:3d:37:f5:81:45:b4:4f:ba:7e:ec:85:5c:
87:f6:f5:1a:f2:8c:96:97:bb:07:ef:da:e9:61:3a:c4:7f:8c:
10:d8:af:35:34:f5:da:cc:3e:a0:3c:bf:42:fa:70:b4:82:67:
48:1b:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:36 2025 by rpki-client