Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12472ae2-1aa2-372d-8e1d-46eab9d6b6c3.roa
File: 12472ae2-1aa2-372d-8e1d-46eab9d6b6c3.roa (raw, json)
Hash identifier: LoLI0MHCELuEapHprM0sf0XPMY+la+QNRaI8ejWKpdo=
Subject key identifier: 73:87:30:8A:74:D9:EE:03:A5:9C:99:81:AC:95:35:F5:40:60:DC:44
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842431E63B64A251F2A8C2480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12472ae2-1aa2-372d-8e1d-46eab9d6b6c3.roa
Signing time: Thu 19 Dec 2024 13:45:28 +0000
ROA not before: Thu 19 Dec 2024 13:45:28 +0000
ROA not after: Wed 19 Mar 2025 12:45:28 +0000
asID: 211369
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:1e:63:b6:4a:25:1f:2a:8c:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:28 2024 GMT
Not After : Mar 19 12:45:28 2025 GMT
Subject: CN=333bf9b2-3d00-4028-8533-5426858753d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:88:3f:ec:69:79:45:df:11:6d:49:e3:7e:8f:
cd:f3:06:de:43:0c:73:ed:e6:9f:68:f8:e4:9c:3e:
18:66:9c:3a:f2:f5:56:10:60:ea:93:c9:0d:39:38:
02:13:c0:58:f1:55:d8:e1:03:db:c9:aa:d9:2e:00:
72:37:23:24:27:9f:de:95:08:d6:00:86:9b:13:0a:
93:85:60:e9:63:57:d4:1b:0d:00:56:a3:3f:34:da:
ff:1f:ab:2d:51:cf:7d:e2:03:de:c7:6d:92:a0:3b:
37:dc:9f:64:51:77:07:c0:a6:14:92:aa:ab:2e:e2:
39:27:a1:ca:b3:1d:3a:ff:8c:d2:52:3f:43:7e:cb:
78:c4:8b:76:62:94:5a:06:18:51:be:74:44:85:eb:
d5:b6:b6:31:2d:88:32:4c:4c:5c:2f:58:1d:16:f7:
e2:d3:46:00:4f:70:cd:96:75:78:44:6b:a0:f1:97:
ef:8e:47:a9:4b:28:ca:2a:14:f9:e6:6e:4f:d7:e0:
34:31:79:ef:27:55:35:64:cf:2f:eb:17:cf:9b:2b:
09:5a:6b:b0:39:88:c9:b1:1a:37:ba:48:78:72:f6:
0f:13:a2:b7:67:e7:26:17:ca:a0:b4:8e:53:a9:2b:
ec:10:8e:91:39:ef:d5:3a:a8:14:7f:d7:e8:d4:8e:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:30:8A:74:D9:EE:03:A5:9C:99:81:AC:95:35:F5:40:60:DC:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12472ae2-1aa2-372d-8e1d-46eab9d6b6c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:d3:33:7b:3b:bd:f5:53:e6:03:29:e5:73:02:ee:14:db:67:
af:6c:29:af:4f:2f:59:63:de:cc:46:2e:1b:2d:22:57:04:f1:
52:7d:24:9e:79:f1:60:79:a7:d3:a6:36:4a:e3:83:e6:4c:4e:
69:ca:6e:f4:0e:83:3d:2c:e1:e1:fa:2d:09:90:53:fa:30:51:
4e:6b:4f:60:91:c8:36:d8:af:89:0e:86:4a:c4:fe:30:b2:bc:
ec:64:81:f9:9e:4d:89:a5:26:92:e5:77:10:d0:80:9a:eb:ab:
cd:9b:dd:fd:fe:b3:95:88:ce:7c:7a:76:07:01:d0:5d:ae:22:
66:36:ef:44:a0:32:a5:99:93:4b:35:1c:76:57:99:0a:15:39:
02:1e:70:14:aa:bf:a8:18:f4:a0:d9:72:f9:c6:80:d2:d6:0b:
75:f0:93:4f:74:08:61:d0:eb:51:f0:70:37:2f:dc:3c:05:55:
47:36:b1:20:1a:b0:f5:21:8a:4e:49:47:91:62:56:fb:1c:9e:
9b:fb:30:64:35:b3:9e:7c:a0:c0:37:6e:13:59:6a:8b:83:e1:
d8:49:0d:d4:d6:06:12:15:c7:ed:ce:8c:7a:ba:b6:d4:15:80:
13:10:0d:b1:e6:05:d0:17:e2:38:87:28:8b:ac:bf:30:a3:a0:
c6:f6:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:20:16 2025 by rpki-client