Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044ed238-be93-3ba4-936d-cb1beca6933f.roa
File: 044ed238-be93-3ba4-936d-cb1beca6933f.roa (raw, json)
Hash identifier: 6N6xXFbc72FyjFlKw1ZYlrsB+jmeYtKSuAyziOhfZfg=
Subject key identifier: 29:47:62:B1:A1:3E:CA:7A:A1:7F:6D:77:F6:47:4B:AD:60:49:DC:0D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3F67B7357AABAA2A5300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044ed238-be93-3ba4-936d-cb1beca6933f.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396606
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3f:67:b7:35:7a:ab:aa:2a:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=a6d58aac-2661-4705-9a93-40beaa4f199c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:50:36:de:a3:fd:35:81:3a:a4:22:7c:ac:9b:
cd:d7:c4:b9:b0:f8:78:72:41:40:a0:27:28:c5:10:
de:44:88:3c:ab:f4:eb:0f:c0:78:52:24:f8:63:d8:
74:e4:c6:0d:51:e8:c9:cc:f7:f8:94:41:21:31:4a:
de:ae:98:96:b4:65:ec:a0:b4:35:8b:2c:97:34:3e:
22:f8:fa:bb:de:7a:5a:09:36:69:28:69:e7:8c:3b:
d5:79:4d:3f:76:ed:5d:30:99:d6:d7:be:3a:68:e8:
29:c6:b2:78:1a:ac:3b:ee:ff:33:33:ba:f2:08:9c:
dc:ec:5f:2f:4b:e3:01:ec:b6:cc:49:ef:de:bc:2c:
66:ca:ef:70:89:a0:f6:f0:d2:99:22:64:4e:7b:f2:
cf:6e:fa:a4:c2:70:b4:b1:1b:4c:1b:69:85:93:60:
bf:f5:85:52:ee:3b:09:9d:a4:32:6e:b4:77:fd:e1:
38:eb:41:16:9f:95:8a:a5:a8:2b:68:b4:1c:37:b0:
f8:84:51:fe:29:f9:71:6c:7a:2c:3f:e6:aa:50:c3:
31:c2:48:2f:0d:2d:46:22:7f:a1:8c:15:32:a7:07:
44:22:39:ac:a7:33:10:ff:60:00:e6:0f:21:e3:e7:
29:1c:9e:f2:20:7d:a6:ec:9d:e5:dd:10:ae:60:20:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:47:62:B1:A1:3E:CA:7A:A1:7F:6D:77:F6:47:4B:AD:60:49:DC:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044ed238-be93-3ba4-936d-cb1beca6933f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:b3:e0:07:76:65:21:92:28:06:3d:6f:29:d3:82:7d:6c:6e:
99:43:be:81:c5:ef:9c:99:b0:9e:76:8a:d6:12:d7:14:11:a0:
d6:2f:02:41:1b:dc:db:6a:2e:48:4f:63:d7:03:e3:99:aa:81:
f7:79:6c:fb:e3:02:ca:30:9f:59:6e:9b:e7:87:8a:93:76:94:
51:e1:47:5f:03:d4:c1:fe:ef:26:68:35:10:08:98:8d:22:b0:
df:39:18:8e:d1:6e:1b:da:55:d4:7c:dd:71:cb:fb:b7:28:7d:
b2:6f:96:48:ad:bf:a2:59:12:e5:ab:ce:5b:85:a5:16:61:ed:
8e:d9:c6:98:24:36:ce:23:48:0d:69:8e:8f:4b:13:8d:98:5c:
de:c0:ca:0d:50:fd:ea:81:81:4f:02:10:33:f9:2c:4e:4e:7e:
59:2d:c0:9d:70:dd:75:dd:9b:75:95:fd:13:a6:6e:1f:ce:10:
5e:b2:85:6c:ef:23:8e:15:52:a5:92:b6:2d:34:fe:fa:45:03:
ca:37:4a:59:d5:62:bf:6c:b9:ed:5f:c7:68:54:51:a0:12:bd:
cd:f1:55:08:45:b5:c4:55:fc:1c:45:a4:a3:f2:fd:4a:7c:85:
17:a4:47:64:ae:d1:5f:0a:39:6e:b3:8e:a1:3b:d3:ea:8f:48:
c5:c6:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:36 2025 by rpki-client