Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c9c3794-40e8-35f8-b303-898631ae7402.roa
File: 0c9c3794-40e8-35f8-b303-898631ae7402.roa (raw, json)
Hash identifier: 5iyolh0Y3GBCNEVqBDzo64qGjbCmJZSo4tBh/JH8u0o=
Subject key identifier: 89:BF:4D:E5:82:31:56:53:1B:05:AC:72:6C:48:44:50:E9:59:6D:7C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484243275617895B3C48B58780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c9c3794-40e8-35f8-b303-898631ae7402.roa
Signing time: Thu 19 Dec 2024 13:45:33 +0000
ROA not before: Thu 19 Dec 2024 13:45:33 +0000
ROA not after: Wed 19 Mar 2025 12:45:33 +0000
asID: 20431
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:27:56:17:89:5b:3c:48:b5:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:33 2024 GMT
Not After : Mar 19 12:45:33 2025 GMT
Subject: CN=4be20cac-9ab4-44cc-ba64-b3bb7bf2b1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:b2:de:7e:c4:8e:3e:16:2b:ca:7a:8b:19:
7f:4c:0b:18:59:4e:d2:c4:75:52:17:14:88:07:ec:
9d:13:02:29:fa:d8:53:53:08:44:b4:e4:85:fe:c7:
94:16:e8:4b:11:a7:de:16:28:2e:5f:f3:39:2b:7c:
b3:df:94:18:60:3b:1a:66:20:24:8c:22:9d:bf:d7:
eb:66:fb:06:fd:81:cd:3f:84:3a:90:60:d9:57:d7:
90:00:d3:83:b3:2f:fa:89:39:75:da:30:2d:35:da:
db:67:de:f6:38:e8:96:8b:ad:d3:e5:e5:be:b4:4f:
1d:36:04:ec:0b:01:9b:e0:88:c9:35:78:a6:33:8a:
72:a2:28:af:af:d6:c2:69:89:02:21:64:83:37:fe:
d2:40:e0:c2:15:fc:18:e3:25:f2:6d:13:37:4c:1f:
0d:77:93:61:c3:df:96:f6:d4:6e:bd:96:8e:4d:ed:
f1:66:63:a9:61:1e:07:ac:e0:d4:13:61:4e:2c:cb:
5c:55:8e:25:53:1c:a9:3c:bf:8a:25:39:17:6a:aa:
56:e4:e5:4a:27:a4:43:29:7d:c8:61:a5:5e:e8:43:
4b:69:dd:49:02:cd:70:53:c9:60:c9:01:97:a7:2c:
4d:c1:a9:c3:72:73:3f:4a:1f:82:68:e5:a7:e6:57:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:4D:E5:82:31:56:53:1B:05:AC:72:6C:48:44:50:E9:59:6D:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c9c3794-40e8-35f8-b303-898631ae7402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:3d:da:ed:e6:33:bd:d5:39:5d:8a:df:e8:13:17:5d:b8:3b:
c9:c1:f0:67:1f:4a:fc:5a:eb:e0:d9:30:d9:81:c6:95:5d:7f:
64:e0:47:b2:70:bd:d0:e9:75:8f:d5:d2:c9:e4:b1:49:68:76:
d0:6e:fc:2d:69:fa:d4:82:eb:b4:e3:b9:15:2d:83:eb:4d:3c:
e5:7f:91:13:06:4a:5e:27:14:e3:59:73:c1:18:32:aa:aa:fd:
68:2d:e1:4d:91:82:ea:f3:be:06:75:e9:9f:f5:4a:ab:1c:4f:
44:27:9f:bd:05:f9:1f:04:c5:53:69:9c:a2:2a:88:15:c4:e5:
71:29:e7:87:16:20:c8:a3:b9:04:74:ad:b9:6b:81:f3:72:bb:
9a:80:bd:dc:64:e2:4c:7e:9e:b9:45:41:b9:68:a4:81:8c:c1:
66:b1:a9:86:47:1f:8d:00:a2:a0:0f:4d:db:71:f0:dd:48:5d:
9a:e3:81:39:54:9f:04:eb:59:32:43:ee:c1:56:c4:47:8d:91:
46:3d:5c:b5:92:d7:8d:35:0a:b4:e4:92:0e:4d:5b:b9:00:3f:
7f:b1:04:81:ff:8a:e9:5d:d9:1b:ef:14:10:f7:aa:67:a2:2a:
24:a9:62:26:ad:86:9e:89:8f:a5:56:fd:ec:7d:50:06:45:2e:
74:7e:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:26:33 2025 by rpki-client