Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f87b7b64-4d51-3698-8047-74c0728eae9c.roa
File: f87b7b64-4d51-3698-8047-74c0728eae9c.roa (raw, json)
Hash identifier: CKYmU3rx6cSnXgFkD+XU4msoTF/apMU/hP3V8EjYxWA=
Subject key identifier: 5D:40:BE:A6:7D:03:12:B2:97:A2:8F:46:2B:D2:E5:61:BB:82:B8:2A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493ED3EFA4D98749D10405FE70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f87b7b64-4d51-3698-8047-74c0728eae9c.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 396559
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:ef:a4:d9:87:49:d1:04:05:fe:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=3939314d-9916-4256-94c9-6f4222fab6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:c4:95:8b:6c:d8:96:25:39:5b:e6:bf:d2:
99:62:1d:74:84:22:24:75:a4:41:1b:16:f7:ce:c5:
8b:dd:58:76:7d:95:c5:c5:c7:69:60:96:14:24:87:
2b:a1:59:e2:d4:8f:e9:0d:47:0f:c1:ad:8d:54:92:
bc:c3:5f:f2:a8:bd:b1:ec:41:c3:89:9f:e4:03:71:
a0:2d:8d:5b:8a:de:7f:c1:93:ee:71:70:7e:f9:08:
89:a7:88:b7:1b:0f:80:6d:ce:f2:8e:f8:4b:8d:69:
9d:55:63:73:d6:ad:0f:c1:38:1a:fb:a1:fe:b6:d8:
d9:29:ac:43:26:84:f0:15:81:56:93:e4:40:1d:3a:
7c:55:02:33:60:fb:88:e2:8a:eb:16:c0:52:eb:c4:
cb:e6:58:0c:74:23:ac:fc:b4:b1:05:db:d5:a3:96:
a7:8e:8a:21:63:3e:95:c0:51:8e:8b:46:3a:6c:65:
17:96:bf:7e:c2:c0:5f:f4:c4:57:ef:32:60:41:a9:
6a:47:26:75:17:78:ca:69:f9:f2:06:19:df:07:7f:
78:23:81:f7:8a:fc:03:bc:9e:52:d9:63:75:09:86:
c4:f4:39:4e:b0:28:bc:fd:de:26:0c:39:e4:ce:2b:
a8:f8:a9:22:e0:a7:d2:eb:76:c1:90:2c:c6:f4:d2:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:40:BE:A6:7D:03:12:B2:97:A2:8F:46:2B:D2:E5:61:BB:82:B8:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f87b7b64-4d51-3698-8047-74c0728eae9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:f6:e5:c3:ea:c3:5e:80:94:02:77:48:d2:fd:e9:5a:c8:db:
59:57:fd:01:f1:7d:d0:c2:0f:76:57:47:7c:f5:a0:4a:e2:0f:
7e:49:ec:3b:c5:54:10:62:cc:54:41:f1:9e:09:e2:af:b1:80:
17:22:39:83:46:a4:bb:51:3b:04:95:e5:d3:9b:3d:f9:f3:04:
8b:da:97:c9:89:f0:40:51:e8:0e:c9:85:0c:d9:ea:05:c9:de:
d1:79:25:97:83:07:ca:6b:6b:4d:7a:1a:53:0b:7e:11:fb:4d:
3f:cb:53:05:67:b4:45:b7:cf:d5:05:bb:88:63:09:56:91:fc:
51:bb:d2:68:de:a9:6a:19:5a:fb:ee:c2:dd:fd:fb:17:3f:c6:
f1:15:9c:88:f6:81:45:e9:9f:db:ab:73:45:41:1f:8e:e8:fb:
fa:1f:ec:f7:5b:b5:d6:13:51:59:29:ab:61:a9:df:d0:25:81:
ce:cd:e8:35:ea:80:45:ec:4f:e3:a1:97:95:ca:2c:d3:cf:74:
14:65:e2:c4:00:11:7e:d1:cd:89:1f:a1:8c:38:d6:20:65:62:
5f:77:6c:fd:14:98:1c:b0:99:46:2d:f1:6c:7c:dd:d3:af:9b:
7d:90:2f:75:39:c4:0c:60:85:53:07:5c:c1:fc:b8:9b:d5:10:
3c:9f:e3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:31 2025 by rpki-client