Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0406a4c0-9597-33cb-b260-92bc0ff61ae3.roa
File: 0406a4c0-9597-33cb-b260-92bc0ff61ae3.roa (raw, json)
Hash identifier: 3gW3Orq7AarFKgGu/XFq8icFR+gpnwDteyNRygXeKAw=
Subject key identifier: B9:37:71:3D:89:44:B7:00:77:EE:36:CE:EE:19:C0:70:9A:94:C4:C6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5D77B5ABBBB63C3906940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0406a4c0-9597-33cb-b260-92bc0ff61ae3.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396583
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:d7:7b:5a:bb:bb:63:c3:90:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=f514a7d4-db70-4cbb-9ffb-151a1f0255e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:30:31:a1:32:1c:20:92:cc:0c:53:f8:f7:6d:
12:82:06:21:ca:58:19:ae:0c:9e:9a:89:0e:eb:95:
6b:99:95:ae:4b:2f:7a:d2:04:ad:3f:81:61:d5:21:
de:06:83:38:95:02:0f:0b:40:ef:6c:09:ad:00:2f:
06:6d:75:51:b6:bb:13:72:75:16:ba:16:9b:33:0f:
94:2d:d4:14:b0:ee:b7:ec:e7:e8:e9:a9:f3:d1:9b:
2a:0b:93:2b:11:48:8c:f0:df:97:55:8f:bc:50:80:
12:27:2e:6c:08:8f:9f:79:6f:30:8a:81:3c:4d:62:
43:1a:d8:f7:bd:7e:9b:59:c4:79:1a:10:4a:79:c8:
6c:82:13:4e:0a:f2:c4:e7:57:29:98:90:1f:cb:1b:
a7:b4:bd:fb:64:b5:d7:e4:8e:db:81:ed:17:5a:75:
8f:83:fb:e5:45:1b:f9:19:91:e3:45:31:5f:b6:78:
65:6d:3f:05:25:22:c3:4e:fb:ed:47:bf:72:c6:6b:
f4:e9:37:97:47:76:25:23:45:33:f5:92:99:4f:09:
2a:73:c6:cd:c9:92:ef:74:ac:5c:5c:c3:41:3a:61:
48:da:94:73:0a:59:d6:9e:99:db:ca:02:e0:3d:c7:
82:9b:24:40:d1:18:6a:9e:e0:34:ff:c4:be:53:83:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:71:3D:89:44:B7:00:77:EE:36:CE:EE:19:C0:70:9A:94:C4:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0406a4c0-9597-33cb-b260-92bc0ff61ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:16:5a:8a:2c:ed:1b:e8:45:b7:5f:59:9d:24:96:8a:bf:f8:
7e:94:9d:d7:8a:33:d3:84:8d:12:f4:81:ae:6f:d6:30:b8:10:
69:6a:c9:5b:04:a4:53:6c:17:8f:e7:2e:cf:2c:6b:83:15:18:
1d:31:0f:19:07:1d:37:7e:70:c3:95:36:50:d2:72:d1:7b:21:
ea:c9:f7:67:35:2e:40:3b:01:a5:bc:53:cc:38:78:18:1a:b6:
12:08:90:69:df:58:ed:73:81:a2:2b:2d:78:d6:f5:b5:26:ad:
f7:b3:41:b8:ea:16:d4:eb:e7:18:84:9f:4b:09:be:76:6c:e2:
63:99:14:ff:23:38:69:2c:10:9e:83:3c:52:d7:55:03:aa:9b:
87:7d:ad:d2:f4:18:46:d5:26:f3:94:0b:24:57:3c:56:37:76:
ed:3b:78:08:db:57:25:c0:66:84:34:66:43:fe:a1:ac:60:15:
a4:df:02:5b:97:b2:6b:17:e7:9d:a3:59:3a:e4:81:78:08:7f:
ba:fd:e4:88:8b:df:2f:48:f3:9a:b5:2b:e1:36:6f:48:01:f2:
96:7a:0c:cf:b5:11:50:90:fa:c0:84:80:8d:2c:df:0a:6a:5f:
87:f4:da:00:00:b0:d5:58:2d:3e:02:ce:81:d7:d6:94:92:ad:
09:6e:ea:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:39:53 2025 by rpki-client