Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7a24a43-5189-33e8-b24b-8aea25ca9db9.roa
File: f7a24a43-5189-33e8-b24b-8aea25ca9db9.roa (raw, json)
Hash identifier: 8OeeldZPeHPY82eyJCEw/7sIm3tXI7B6SJAl0pe23hc=
Subject key identifier: 06:63:70:B0:2D:C7:91:51:67:26:59:B7:85:F5:0F:88:29:6F:EB:8D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B390774A2894CD047B180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7a24a43-5189-33e8-b24b-8aea25ca9db9.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 397204
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:39:07:74:a2:89:4c:d0:47:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=b8c20033-0e77-475c-8fc3-2be21f404765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:61:0c:a8:09:8d:89:f8:3f:cd:1f:e5:51:
df:be:0f:27:93:7d:3e:ab:ba:61:ee:4f:1a:6a:20:
48:4c:20:52:0c:24:b2:2e:d5:34:94:7c:d4:ca:3b:
01:f0:f9:32:52:7b:3d:ac:ad:5b:46:d0:88:25:12:
74:3d:a6:77:f7:e1:68:9e:21:ff:b6:4f:fc:db:e5:
2b:f4:28:1e:bb:07:c0:5c:29:80:d4:7a:f8:b0:f2:
56:b2:0b:3f:ec:a4:06:e3:87:86:e7:91:1f:08:6d:
25:5f:07:3b:e9:c1:e0:15:90:a7:65:4d:4e:db:73:
a9:58:23:23:6c:8c:52:0f:03:b6:ef:e7:49:77:ee:
4e:43:44:18:6b:80:6f:4b:e0:12:ff:86:c6:8e:d0:
e7:a3:08:85:2a:3a:aa:05:a7:14:63:07:c3:9a:a8:
d6:41:38:9e:17:68:15:57:32:ed:41:15:62:65:ff:
21:25:e7:17:c5:66:ed:06:87:b6:a0:8e:4c:fe:7e:
69:22:71:39:bc:82:ae:87:c8:ac:af:3b:0a:f3:35:
44:ff:ca:fc:c1:18:be:dc:b8:5d:af:bc:ac:ba:39:
97:6d:78:10:26:ba:63:7a:39:fb:ae:94:89:67:fd:
3f:85:55:4b:29:7c:f4:74:87:ae:9e:f6:51:13:20:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:63:70:B0:2D:C7:91:51:67:26:59:B7:85:F5:0F:88:29:6F:EB:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7a24a43-5189-33e8-b24b-8aea25ca9db9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:1f:f4:38:e7:d4:b0:a3:a6:05:48:9c:75:4b:bb:17:a5:4f:
d1:85:0c:d1:1a:f5:04:1c:3b:10:8f:31:1c:e8:51:6a:1a:b7:
4b:47:e9:3c:af:e6:48:d2:e3:b0:3b:a9:29:c3:b5:a0:8a:ce:
74:b0:b0:63:fa:44:46:55:c9:29:7b:bb:71:8d:86:8f:15:0a:
db:15:e9:27:4f:e7:f0:84:ee:a1:6e:c0:97:2d:c1:35:86:47:
0a:65:59:15:da:cf:38:6b:6a:cd:82:62:92:16:8b:c2:2c:e0:
57:19:f3:7e:17:75:4f:e5:91:ec:54:9e:29:93:f9:80:16:13:
45:13:f7:f9:93:65:ee:f7:1b:71:bb:34:3d:99:b2:ee:51:c3:
80:3a:68:f1:97:ed:d6:6d:95:61:36:29:70:9d:9c:9c:37:54:
e8:a8:bb:a4:7c:07:62:91:6d:8a:de:f1:6c:c6:4d:1d:23:45:
a4:ab:f4:5c:2b:e2:17:61:94:8e:19:ae:60:e3:7e:54:01:bd:
bc:e1:07:e0:f7:c0:cb:89:64:98:7c:ac:18:b3:a6:fc:d7:5e:
96:37:09:f3:97:b6:cc:66:20:b4:96:fe:c5:fa:53:7e:be:15:
08:a4:f4:cc:1e:02:d2:1c:f7:d3:33:6a:2c:a6:5c:09:39:bf:
a3:d0:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:45 2025 by rpki-client