Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/127347bd-187c-31a9-9d40-18e793363208.roa
File: 127347bd-187c-31a9-9d40-18e793363208.roa (raw, json)
Hash identifier: Hjq41LxfOhlrjIjCedpEiASgKBU97v3eLPmoGrb4dic=
Subject key identifier: 16:EF:93:67:9A:FF:84:CB:66:7A:51:1D:5C:7A:56:B9:9B:F0:F1:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A0842DD0E034C9E92F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/127347bd-187c-31a9-9d40-18e793363208.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 36616
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a0:84:2d:d0:e0:34:c9:e9:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=84b2afa7-fa19-4b1f-aff7-e8006ef3ff26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:6d:7e:02:c9:08:a7:15:89:d5:97:ea:e2:
90:ca:be:c9:d8:1b:79:93:4a:84:d9:ad:20:f0:e5:
9b:c1:11:fc:ab:97:c1:43:8f:88:1a:fd:98:23:43:
78:ff:81:b4:43:ad:19:f1:c1:d5:82:fd:8f:0e:9e:
ae:a7:70:b8:c0:04:c2:c4:7b:c7:cd:2c:24:99:c7:
89:98:6c:73:ae:f6:d0:0a:8b:40:88:00:de:81:10:
50:25:08:30:e5:50:9a:e8:53:54:27:b2:d8:cd:59:
6d:73:68:bb:d3:e2:c9:fd:78:fd:22:dd:e7:ba:a4:
71:99:63:a8:06:22:9b:f3:13:33:56:43:ec:bd:3e:
bd:1b:44:54:e4:95:5a:cb:d9:e7:3f:b4:dd:c4:dd:
90:5c:c7:d3:47:1e:f0:7d:85:9e:22:76:96:2c:22:
8e:52:6a:e4:e4:f1:36:43:a5:a5:ff:41:a9:98:38:
ea:d2:3d:7c:fc:40:5f:f7:9e:79:50:c6:bf:fb:8d:
5b:85:4b:c5:45:fa:41:60:30:48:31:c0:e8:fe:c9:
1b:d2:fe:78:46:54:ec:eb:6b:2b:36:52:32:57:da:
73:54:fd:85:f2:22:4b:fd:76:df:09:b8:60:5c:51:
85:ea:d1:5a:11:9b:aa:61:aa:54:d0:76:fe:2e:08:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EF:93:67:9A:FF:84:CB:66:7A:51:1D:5C:7A:56:B9:9B:F0:F1:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/127347bd-187c-31a9-9d40-18e793363208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:c7:1d:6d:da:10:c4:3f:6f:96:7e:4d:d8:f7:33:c1:f7:51:
37:5a:00:1e:4c:0f:75:d3:e5:6e:98:49:9b:53:af:3d:bd:4d:
01:fa:35:3c:a0:87:f9:d1:33:9f:f4:84:03:a0:78:09:76:61:
b6:2d:91:34:42:44:59:e7:9d:7d:b5:87:e0:8c:cc:b5:45:0a:
9b:61:d2:95:d3:87:5c:97:0c:1d:d4:73:da:2d:47:6e:9e:90:
1d:d0:94:01:9e:ed:9c:aa:a9:ce:6b:fe:8d:f0:c5:02:b9:b2:
1f:8e:25:25:d3:05:e9:d1:d7:46:16:92:b0:a1:b8:49:c2:52:
87:a4:fc:50:ef:27:8b:24:ea:d1:82:85:07:b8:c6:bd:59:d7:
18:03:a3:5f:5d:ce:38:cf:d7:b8:7a:ee:81:cd:01:51:fc:04:
da:a5:94:68:89:70:c0:2a:8f:b1:d1:38:ff:14:bd:60:ae:88:
e5:39:1d:90:52:d7:40:46:b2:44:29:50:e9:4e:89:fb:b5:de:
57:13:70:1c:69:d0:7c:31:8a:19:ad:6c:67:02:30:89:b5:88:
4f:d1:68:5f:d6:49:85:76:d9:f6:a4:60:de:81:02:f3:dd:79:
8f:5b:e0:68:94:7d:25:fa:8d:9b:da:23:3f:8b:d6:e8:5e:03:
2f:b7:1b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:24:16 2025 by rpki-client