Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f77ce71e-856b-32ce-9b3d-f2922d376731.roa
File: f77ce71e-856b-32ce-9b3d-f2922d376731.roa (raw, json)
Hash identifier: Zdo2DtXByKp13wwXjeckALS6SpKyABx8AA/NqVbf8dc=
Subject key identifier: C9:28:03:21:CA:90:65:E7:E9:B9:8C:A7:2C:FE:F4:25:6C:D1:E7:97
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C3978CC04AAC029FEC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f77ce71e-856b-32ce-9b3d-f2922d376731.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396558
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c3:97:8c:c0:4a:ac:02:9f:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=1cc7ca4e-f6e7-48b7-b77c-817387e481eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:ed:23:3f:ee:97:f6:0e:35:90:3b:30:ca:
98:e1:11:ff:c2:e8:da:df:da:b4:de:b0:7a:cf:1f:
30:10:83:86:f6:63:8f:60:8f:f8:08:9f:6d:09:d9:
0a:75:46:e6:55:f7:fa:55:48:0f:27:14:76:cb:cf:
4f:ad:0b:9f:70:b2:05:ce:90:cb:f2:1f:12:38:77:
9b:a4:0a:7b:fa:cf:49:bb:50:8b:ec:bb:1c:1b:63:
c0:b9:88:cd:2f:dc:86:46:1b:7a:67:9e:b3:b8:a1:
5c:c8:84:44:bd:71:15:58:01:b3:e0:c3:73:94:57:
16:73:8a:39:3e:39:2f:8b:b5:4a:a8:f5:f9:16:9f:
5c:9c:b7:41:93:e0:ae:41:ed:30:91:c6:95:b2:20:
54:bb:93:65:25:58:5b:ff:84:5e:39:b0:92:c5:3b:
f1:d5:29:05:a9:bd:e4:bb:5e:53:ae:6a:34:e6:5c:
72:6f:f8:5a:2e:d4:f7:b4:9e:e1:3b:c4:29:ac:97:
e9:fd:38:9a:fd:a9:85:fd:2d:ad:4f:c9:95:99:26:
d9:ec:cc:51:5a:2f:89:d4:09:ca:75:c0:92:3a:32:
93:6c:0f:33:90:63:fa:ae:3d:f4:cf:f7:55:1e:18:
f3:50:76:31:8e:bb:1d:bd:4d:f1:20:d6:1d:c1:b1:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:28:03:21:CA:90:65:E7:E9:B9:8C:A7:2C:FE:F4:25:6C:D1:E7:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f77ce71e-856b-32ce-9b3d-f2922d376731.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:07:79:fc:dd:52:05:77:57:5e:3b:b9:24:1e:3f:53:30:47:
e8:36:96:84:11:3f:6e:37:ad:5f:16:5c:e2:e2:dd:be:00:8e:
c0:b3:5e:c3:37:58:98:dc:20:b4:e8:7f:dc:05:67:e1:5d:85:
b9:7f:f7:c1:07:aa:7f:61:b6:bb:85:bc:80:47:83:0b:25:33:
3a:17:31:0c:56:f2:45:d9:17:44:bd:c0:ce:ce:8e:26:42:79:
62:65:6e:a5:70:c9:87:4e:73:6b:40:86:d1:9f:34:e7:fe:9f:
c5:22:9a:bf:6e:a6:71:ef:76:7f:cd:2f:27:56:55:39:56:09:
7c:2b:e1:ae:c2:e6:c3:07:15:40:ca:a1:fd:a5:2d:a9:ea:80:
03:60:1c:4e:fc:64:5e:16:b7:28:48:64:f2:16:a2:94:32:3c:
6b:76:d6:25:23:3a:b0:9b:34:e2:25:22:ab:0a:26:fe:6c:ca:
cc:8f:dc:ce:da:8c:cf:67:04:e1:d1:73:f7:85:fe:10:b6:b0:
41:11:cb:1d:78:03:0f:ed:5c:1f:1a:60:7d:95:85:90:c2:26:
6d:7b:ab:63:b5:b0:eb:ec:94:5f:ea:d4:4e:c0:9b:a0:50:4b:
24:aa:6c:36:e7:ba:cb:2d:df:33:55:6b:c1:42:75:38:d5:58:
37:91:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:03 2025 by rpki-client