Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbc77340-2ce0-33f3-be19-a2edddaef980.roa
File: fbc77340-2ce0-33f3-be19-a2edddaef980.roa (raw, json)
Hash identifier: 9XlCFOPC6AN9J48Qb8rgY5ngLk9Rkw+1yNBLpOYbckI=
Subject key identifier: 36:69:40:6A:31:61:C8:38:F9:B5:12:9D:EC:29:BC:9C:FE:4E:3B:7F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5D5FF5DFD48D5A7094980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbc77340-2ce0-33f3-be19-a2edddaef980.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396559
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:d5:ff:5d:fd:48:d5:a7:09:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=8c89f2b1-1b98-4074-b86a-bcb1247d29e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:8e:a1:46:4e:9e:34:00:8b:c0:40:9e:12:
77:57:42:3d:f8:b8:ed:c0:57:b6:c7:31:a7:ee:fb:
a2:8f:2d:73:f6:5e:63:a2:d9:f5:f4:f9:f0:3b:a7:
54:e0:ad:06:32:45:7d:2c:1a:28:b8:7c:67:53:35:
c3:18:b7:f7:bd:ab:7f:32:5a:29:97:f2:ef:9a:fb:
0d:91:6d:7d:10:3c:3b:1c:ec:ba:e8:a5:a5:d7:3a:
7c:79:8a:31:35:11:3d:a2:40:b6:39:ea:0c:01:2c:
cc:a3:6a:d0:a9:92:ce:47:de:43:b4:b1:4b:5e:2c:
58:12:1a:d9:93:12:05:90:14:d0:49:09:5f:db:29:
f9:fc:58:11:91:17:e4:87:5d:33:f0:3e:5b:94:ed:
90:45:bb:6f:19:dc:71:8d:2c:8b:82:e9:4c:45:8b:
16:6d:90:37:53:44:13:8a:ea:e5:bb:e2:27:27:3b:
19:b0:6f:c3:45:cc:e0:20:69:66:c2:44:30:45:2b:
90:a3:92:86:7a:74:a1:24:13:dc:1f:97:1b:d6:cb:
c7:1e:ab:8e:59:6f:84:1a:80:3f:45:2b:49:fb:2a:
9b:fd:1a:61:e9:7b:89:4e:d8:06:7d:bb:35:b5:1b:
a4:36:f4:63:46:87:87:e7:6b:a9:8d:a3:bf:c7:52:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:69:40:6A:31:61:C8:38:F9:B5:12:9D:EC:29:BC:9C:FE:4E:3B:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbc77340-2ce0-33f3-be19-a2edddaef980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:c8:55:32:4a:54:55:85:5a:54:b1:23:f3:b3:12:ad:2a:4e:
4e:40:43:22:0e:12:4c:6b:43:69:43:78:00:02:4f:36:14:58:
d4:e9:e4:4e:cf:6b:e0:09:ac:0a:b5:1b:c9:c4:ed:6e:01:61:
e1:cb:30:a7:57:dd:e4:78:40:3e:e1:ce:99:c4:d1:25:0f:00:
a8:65:6b:a8:e9:95:54:67:0f:4f:82:c1:ac:22:9d:bc:54:84:
8d:8d:d5:4a:da:8e:21:57:f8:25:f1:b2:d3:13:e8:ad:de:c7:
96:86:6e:aa:a8:38:5b:9d:b5:79:d7:35:04:86:c7:d0:72:04:
84:0e:a5:7a:b8:d4:03:c2:67:b5:75:4c:da:e4:2c:80:2b:dd:
b0:77:8c:15:9f:7f:c8:96:cf:cc:d7:c4:c1:eb:3c:ff:48:b9:
9d:da:d1:8a:2c:f7:52:86:0d:1a:2f:ee:27:38:1e:7b:49:8d:
03:a1:46:bc:12:67:46:ee:53:28:d3:a7:de:f3:c3:64:91:c2:
41:8b:00:35:f9:9f:6f:72:38:b9:0c:bb:97:bc:9c:b3:e1:80:
69:fe:b6:e4:73:42:72:79:6b:13:22:68:60:91:38:26:65:5f:
8c:53:66:13:99:a4:41:81:3f:18:31:fe:59:1e:2e:a2:9b:e9:
9b:75:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:10 2025 by rpki-client