Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18b8eeed-1ee6-3309-aff5-dabaf8b915fa.roa
File: 18b8eeed-1ee6-3309-aff5-dabaf8b915fa.roa (raw, json)
Hash identifier: vooIbAS8ijFA3mm1pWsrTqMbhcyaa3oKAEs7+1q2qlw=
Subject key identifier: 54:88:DC:5C:5D:4A:5E:3F:EB:80:F5:81:B1:BB:6E:4C:36:0E:47:2E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242EFA5E6631CE772481900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18b8eeed-1ee6-3309-aff5-dabaf8b915fa.roa
Signing time: Thu 19 Dec 2024 13:45:06 +0000
ROA not before: Thu 19 Dec 2024 13:45:06 +0000
ROA not after: Wed 19 Mar 2025 12:45:06 +0000
asID: 25485
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:ef:a5:e6:63:1c:e7:72:48:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:06 2024 GMT
Not After : Mar 19 12:45:06 2025 GMT
Subject: CN=74c6500e-eb8f-4e5a-820b-616873909646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8a:1a:9b:85:b3:8c:28:a3:4f:04:7b:30:8a:
65:e5:33:8c:f8:f8:40:03:17:03:fc:43:3f:34:ca:
74:c0:c2:11:87:ac:7c:cb:c7:f8:a4:1d:2c:a5:72:
f3:ff:14:05:65:e2:3d:18:50:a1:71:6d:07:63:f9:
b4:89:07:3a:67:32:9e:5d:f1:c9:59:58:4d:bd:f2:
c9:a2:34:0a:b8:08:a7:86:85:4a:31:56:16:33:3d:
38:c5:44:fa:be:b1:fd:12:a8:2a:86:df:a0:fc:7b:
da:0a:5a:36:68:41:20:ed:f4:73:b4:cd:4f:b4:a2:
fc:f5:92:b9:0b:5c:01:d2:ca:cd:2c:ad:94:11:fc:
fa:4f:fc:8a:3d:19:86:c8:8f:4e:00:d5:85:77:21:
a6:ff:05:c9:f7:85:54:e9:4c:e2:b0:5d:f6:d9:3a:
d9:58:27:9c:4a:6e:47:a9:c1:9e:c5:44:0f:be:89:
50:7b:43:b5:12:c9:8c:1c:4b:f0:67:d3:ef:8e:05:
1a:b6:43:55:37:c0:14:15:47:c6:e5:6f:4b:95:c9:
f5:c7:70:f3:22:2d:f1:2e:97:8a:f7:24:d2:f6:4f:
4d:74:ae:2f:ae:77:32:89:87:c7:0f:83:c2:86:1b:
7d:0e:f1:8a:ac:c6:0a:7f:70:f4:27:03:48:f8:c6:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:88:DC:5C:5D:4A:5E:3F:EB:80:F5:81:B1:BB:6E:4C:36:0E:47:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18b8eeed-1ee6-3309-aff5-dabaf8b915fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:26:27:5c:4d:b1:c8:0f:1d:8c:1c:5f:be:70:64:1c:47:be:
0f:e5:29:43:42:50:9a:ed:e9:35:86:fe:ad:e0:5b:aa:9f:30:
0e:ed:63:c1:de:d4:46:d2:da:7a:c2:5b:50:00:f2:bf:b8:1f:
1f:9d:18:35:06:15:73:76:27:27:6c:c2:49:2e:8a:1d:18:f9:
a6:c1:d5:75:c3:7c:a3:e0:72:ac:e0:b4:ae:ca:43:f9:07:0b:
f8:ae:1c:db:07:25:4b:95:b9:3c:bb:da:59:d8:5f:d8:dc:81:
e3:4c:7b:2d:9c:b9:47:2b:65:da:5c:27:2e:b4:10:bb:e6:4e:
9c:47:36:21:7a:20:41:25:a5:79:28:0f:54:f8:52:27:4a:f5:
ae:31:eb:8c:e9:92:a6:d3:00:7e:66:0c:3e:dd:17:f3:da:8d:
0e:a8:61:92:d3:56:a4:ce:82:c5:a9:a3:1c:d2:59:15:f9:59:
cd:de:80:f8:8a:55:6b:61:34:7f:ba:4f:bb:29:ba:f8:a0:b1:
78:09:eb:0b:a3:23:0c:48:0c:e8:05:07:d7:9a:dd:cc:d2:2d:
63:8c:29:55:04:23:59:cf:9f:86:9c:78:9f:e0:f4:68:43:93:
25:3d:8f:14:12:a9:65:f2:25:ca:a8:61:99:7d:22:0f:a4:0b:
81:ac:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:55 2025 by rpki-client