Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cc6813a-a68a-3e2c-b5eb-8434855aabb0.roa
File: 0cc6813a-a68a-3e2c-b5eb-8434855aabb0.roa (raw, json)
Hash identifier: sxnOrklTQq5KgLd5+5PmLcfQLVOxeP24ZYjSMFv1nG0=
Subject key identifier: 77:FD:A3:2B:F3:97:0B:5D:30:E4:A6:8E:23:AF:1B:11:B9:EE:62:BF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A60D36A0A6618D763780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cc6813a-a68a-3e2c-b5eb-8434855aabb0.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 36620
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a6:0d:36:a0:a6:61:8d:76:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=2d2bbf57-6e13-4f75-a1c8-7068bd4b4a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:86:46:8d:bf:c2:08:3e:37:12:19:54:59:
95:46:68:2d:ad:19:a4:8f:80:87:b8:fc:32:86:2a:
30:31:ce:be:75:93:5f:cc:80:b4:6f:3c:b5:a4:2a:
13:32:21:1c:dc:c2:34:3d:49:84:14:4f:fc:c2:f0:
5b:db:82:13:96:7e:c6:0d:15:7c:58:8a:6e:9a:b9:
eb:5f:f9:c4:c9:ea:4e:4c:38:05:d0:b2:f9:14:01:
41:8f:70:81:2f:7f:92:04:08:2c:5d:14:4f:f2:25:
5b:41:40:c6:9e:89:ff:55:f6:42:fe:ff:03:9b:83:
03:91:cc:4c:05:f5:ec:7e:a3:78:c2:68:73:4d:81:
5f:c6:a1:2e:28:d2:ef:80:b2:41:d8:a5:4e:07:3b:
6b:90:5d:84:92:3a:8c:48:39:e2:30:c2:59:ea:3b:
66:2a:85:50:a7:ea:0e:6b:14:b3:7a:72:d2:16:b0:
29:9d:62:b9:66:68:6c:96:a2:93:e4:01:6c:0c:4f:
eb:e4:8e:34:93:b1:bf:38:5f:b3:6b:5b:d3:94:6c:
c3:41:60:26:4b:19:2f:9c:59:09:59:3e:2a:b6:ce:
b3:a5:9a:74:67:d9:9d:af:4f:cc:a2:9f:f7:95:26:
9b:8c:92:e8:44:c5:19:09:4f:b5:25:e6:f1:57:4f:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FD:A3:2B:F3:97:0B:5D:30:E4:A6:8E:23:AF:1B:11:B9:EE:62:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cc6813a-a68a-3e2c-b5eb-8434855aabb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:25:0a:de:3a:46:10:e5:18:7f:f7:f8:74:c5:71:ac:ed:ad:
f3:a0:40:07:4c:dc:19:cb:35:f4:1a:68:5e:6f:61:81:c6:19:
58:0b:db:80:6f:01:db:d2:36:82:7f:6f:8a:cf:a0:bb:f6:35:
2e:57:5d:dc:5c:f3:fc:ba:eb:ea:dc:ea:5f:d7:ac:44:0b:22:
7c:fb:73:07:7e:5c:94:1c:d5:fd:a4:f5:77:50:b1:b6:a5:df:
0b:4a:6b:3b:fa:84:94:d4:dc:1c:fb:01:45:55:0b:01:2b:20:
07:e9:fc:22:14:7c:3c:2f:7b:1c:5a:d7:f2:33:ee:93:ff:bd:
53:a4:2e:de:03:2b:64:1d:bb:f0:29:c4:ed:70:d3:7e:fc:9d:
e3:19:9d:99:76:94:e9:47:81:39:60:0f:c9:05:85:e0:2a:34:
3e:bc:71:f9:b6:51:f7:a4:6c:7b:3b:7f:3c:e8:ab:86:14:bb:
72:e5:2c:8e:d8:6e:22:e7:57:5b:9c:ed:f9:de:30:ba:9d:1a:
dd:6c:e7:0d:fa:bd:b2:47:c1:59:a3:ae:0d:de:55:8d:0d:96:
57:1c:fd:e5:b5:f3:43:62:35:f9:a2:4a:a5:a3:5e:65:2d:cb:
23:96:02:52:0e:39:20:e7:fb:33:c9:37:d7:a0:4c:d0:0b:83:
91:46:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:48:49 2025 by rpki-client