Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041ba7a4-6bcc-3a8e-a6fc-5ec1436c23f8.roa
File: 041ba7a4-6bcc-3a8e-a6fc-5ec1436c23f8.roa (raw, json)
Hash identifier: bpkpugNMb2uE1sjFArncr12TKmPadz8cACtR1OH8NjQ=
Subject key identifier: 2C:06:54:5F:B0:1F:B8:57:BE:D0:B5:09:F8:5A:EC:F8:8D:82:61:E3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842433B0EA5C6E771D7126FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041ba7a4-6bcc-3a8e-a6fc-5ec1436c23f8.roa
Signing time: Thu 19 Dec 2024 13:45:42 +0000
ROA not before: Thu 19 Dec 2024 13:45:42 +0000
ROA not after: Wed 19 Mar 2025 12:45:42 +0000
asID: 36621
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:3b:0e:a5:c6:e7:71:d7:12:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:42 2024 GMT
Not After : Mar 19 12:45:42 2025 GMT
Subject: CN=6082b7f1-2207-4edb-9f0a-bd33aa5e49ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:05:1c:c6:91:e8:77:16:a2:95:2c:c6:88:
e8:2d:43:22:dc:35:82:4d:31:91:7e:c8:34:88:3a:
dc:9f:c9:ed:05:cf:7d:4c:38:41:d5:e4:88:d0:14:
49:b6:6a:8a:a6:81:03:54:da:e1:1c:22:e5:d4:49:
cd:bf:ed:80:94:2b:4a:32:07:c5:42:3d:aa:fb:72:
da:b7:c8:09:ea:92:22:7f:0e:d4:2b:f7:89:18:c0:
ca:92:ab:e3:24:d9:79:4b:f5:cd:2d:f4:00:0b:86:
66:4b:23:f6:84:30:1c:14:4e:b0:22:35:8c:b2:d7:
b5:0f:55:95:fc:2a:92:95:20:1b:52:ff:6a:a2:d2:
38:6d:8c:2a:47:23:6a:26:be:54:bc:4a:23:94:87:
d5:30:47:3e:0a:d7:5b:03:ab:a3:06:1a:9b:cc:e2:
11:e4:e6:ac:6f:1d:13:e4:ac:17:db:d9:60:c2:03:
23:bf:27:77:c3:b9:17:92:8a:02:0d:ec:65:67:3e:
42:54:94:10:ba:28:e8:d0:59:1a:b1:4e:21:9e:66:
5b:2d:24:5f:fc:ac:d5:b1:be:29:9b:15:c0:c4:8b:
4f:7a:49:5a:5a:9c:62:20:c9:f8:3f:0c:67:bd:5b:
d3:36:95:f5:21:21:80:15:25:4e:44:52:5b:03:70:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:54:5F:B0:1F:B8:57:BE:D0:B5:09:F8:5A:EC:F8:8D:82:61:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041ba7a4-6bcc-3a8e-a6fc-5ec1436c23f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:5e:b6:64:9a:db:92:83:03:ae:ff:b3:89:b0:c7:9c:c7:d2:
66:7d:f9:24:5f:99:d1:b9:9d:bd:f3:c0:9b:45:9e:7c:7e:f8:
a9:27:f1:6b:f0:a1:c3:25:25:45:ec:cb:91:2e:e8:04:b1:0b:
9e:5c:c4:92:08:e6:fd:25:b5:1a:5c:dd:95:18:3a:00:a2:2b:
0c:1b:88:17:a6:a9:cb:76:85:f7:66:cb:b9:50:ca:20:57:8b:
dc:37:1d:3d:1a:a3:29:30:02:36:f9:0d:26:20:a0:8d:bc:4c:
79:53:8e:2c:ac:9a:bb:a3:49:2e:13:ab:4d:9d:8b:e0:82:a3:
af:7d:39:48:5c:fb:7f:58:c6:26:ca:6e:a9:99:03:14:71:db:
57:82:34:af:ae:63:06:47:95:5e:ee:56:53:3b:a0:85:98:69:
10:b6:86:17:62:cb:cd:47:66:f3:a3:6f:b1:05:1b:e0:c4:d7:
7f:c6:33:f5:c6:33:cf:8d:2b:c0:6f:03:00:59:2b:00:2f:cf:
a3:1b:b5:06:de:5c:9e:d7:3d:11:04:b1:09:43:69:d6:78:fc:
31:08:1d:31:a4:06:61:c9:46:fe:64:60:d0:9d:57:56:17:de:
32:c5:b7:04:d0:a8:40:c8:d8:3c:e1:6e:2e:94:99:fd:fd:00:
d4:77:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:37:02 2025 by rpki-client