Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8594210-c6ea-309d-8a87-887dcd0f0d7e.roa
File: f8594210-c6ea-309d-8a87-887dcd0f0d7e.roa (raw, json)
Hash identifier: gamV6Fw0EVAjr0zc0f27uSDhSIRwWEnptHbMpIX1PVg=
Subject key identifier: 32:0E:62:34:91:AD:68:00:33:AF:03:48:8B:3E:A2:FE:22:60:06:7C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3E1D8BEA3B5002E8E444
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8594210-c6ea-309d-8a87-887dcd0f0d7e.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396553
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3e:1d:8b:ea:3b:50:02:e8:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=74101814-56c9-4cb6-9228-0f92734917c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:19:5f:3f:70:bd:63:7c:bd:5e:99:63:49:
28:d3:c9:5d:fe:69:fe:c9:41:a2:88:86:80:50:eb:
eb:a0:6b:c3:76:b9:01:7c:82:6f:dc:e3:73:d6:9b:
eb:d7:08:a5:52:5e:b1:51:a7:f4:86:2a:de:7f:13:
92:56:f3:2c:5b:42:59:09:ba:c5:e6:bf:1f:e9:b9:
49:73:28:a2:27:c2:b6:9a:03:9e:f3:28:77:84:f4:
bf:36:85:2b:52:41:db:6f:13:6f:02:67:42:dc:96:
42:2a:15:39:15:de:a5:35:88:7d:d2:cf:f9:eb:96:
86:c8:24:51:8f:b7:c0:18:03:14:5f:78:77:5a:9a:
75:8b:97:d5:00:fe:4d:72:9e:7c:b6:d8:db:3d:f2:
11:ce:28:e0:e3:21:ef:26:4c:7a:39:55:be:c8:b9:
79:29:1e:a5:50:f3:66:bb:22:83:c4:34:ce:7f:bb:
2c:c8:5f:c3:c8:08:75:51:f9:98:6b:06:c4:85:39:
01:da:0f:4c:81:45:99:f5:cb:94:f7:a5:1f:dd:e7:
a3:f1:d5:38:e4:67:a5:85:1d:82:bf:af:5f:37:61:
1a:c7:c8:19:9b:96:57:39:b7:49:59:bf:f0:c8:80:
e6:5c:88:ca:27:0e:0b:cc:0f:4a:4c:9c:d2:8b:51:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:62:34:91:AD:68:00:33:AF:03:48:8B:3E:A2:FE:22:60:06:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8594210-c6ea-309d-8a87-887dcd0f0d7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f4:29:31:49:1f:6a:d2:ce:3a:1e:20:94:97:f8:3a:bb:21:
0a:36:a5:13:2c:34:17:e5:3d:0a:0a:af:27:ef:ab:24:75:f4:
41:53:87:fb:77:26:97:77:0d:dd:24:b5:d5:c7:be:d9:77:d9:
98:57:7f:2b:f6:30:a4:43:4c:05:ae:8d:5a:f4:be:ba:60:72:
10:50:be:e0:84:34:fc:99:35:4c:f5:13:f6:f1:dd:8f:1d:f9:
20:1b:df:1b:58:92:19:df:50:75:29:df:7a:81:c2:89:ee:c2:
5a:82:a6:66:e1:86:5e:49:c1:07:1d:84:a5:55:ab:db:65:b0:
33:57:f2:99:a9:6b:f2:34:99:e6:3c:62:7d:25:e1:96:ce:29:
0e:37:96:c5:f3:eb:bd:49:4f:c6:90:51:cf:c4:3a:45:1b:2a:
6a:d3:e1:08:d9:54:5a:5d:47:84:2f:43:94:a3:e5:d0:00:15:
85:14:d8:bd:3e:a7:d7:81:c3:a3:bf:e9:3e:db:85:00:4a:e1:
ee:95:af:76:7b:a9:48:fa:af:00:a1:28:4e:e2:34:1d:eb:56:
bb:4c:ae:4f:d0:c1:e8:4f:a9:60:1d:d6:09:87:87:c4:b7:c6:
6a:1e:99:c7:cc:3e:cc:1e:9e:ca:a5:9f:ca:2d:f5:33:29:4e:
31:ec:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:02 2025 by rpki-client