Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d1a3100-457f-3375-930a-6bc39c62a667.roa
File: 1d1a3100-457f-3375-930a-6bc39c62a667.roa (raw, json)
Hash identifier: tlwPN1rJ3HF4DciXE8AI6MIDjd/xOlAlc/F/ye2piQQ=
Subject key identifier: FF:4C:D6:EC:E0:59:13:63:14:7B:1C:3B:8E:C2:F5:AC:F1:8B:4C:DD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A04D6D80A6E12316F200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d1a3100-457f-3375-930a-6bc39c62a667.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 397194
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a0:4d:6d:80:a6:e1:23:16:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=0b2706da-a74b-4644-a690-9b260f307806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:41:97:d2:f6:aa:37:f4:d5:f5:63:02:73:
f3:50:4d:77:7b:fb:b3:6f:3b:94:1e:b0:43:82:3d:
df:54:04:40:e6:9b:07:f5:a8:3b:85:09:59:f2:20:
c9:68:73:24:82:a2:96:4e:82:1a:90:51:67:8c:48:
93:43:17:ad:b7:b8:53:49:e1:5b:86:a9:40:c7:a5:
f6:27:34:a3:5b:51:5a:36:b8:6b:a2:5e:15:4b:fd:
68:d1:b9:a3:bd:2b:84:07:ca:8c:a6:a4:4d:73:8e:
3b:db:54:d9:f6:e8:94:46:66:e8:7a:18:b0:7b:bb:
2a:17:aa:70:8d:86:05:96:0f:78:7b:34:40:77:c3:
8a:20:56:c5:5b:99:51:ad:79:77:ff:76:b2:79:a6:
02:3d:bd:a4:64:d0:1a:ee:40:13:df:ac:27:0c:13:
23:a3:f8:b1:26:ab:38:4d:d5:e9:84:ac:25:f9:89:
ef:67:f7:26:6e:cb:2e:93:0d:6f:36:49:13:b6:12:
8f:da:38:0c:d6:bd:b5:74:12:19:a1:85:ef:16:2e:
30:91:66:e9:5c:11:b5:29:42:c1:73:e5:c6:42:c3:
6c:bb:53:25:93:ea:fa:eb:38:4e:d2:f9:42:b4:c0:
0b:16:a6:88:7e:9c:f8:93:83:e2:09:07:22:75:a6:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4C:D6:EC:E0:59:13:63:14:7B:1C:3B:8E:C2:F5:AC:F1:8B:4C:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d1a3100-457f-3375-930a-6bc39c62a667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:ab:56:32:54:c1:8c:18:ba:e1:98:ef:7d:4c:a2:d9:26:53:
f0:e6:58:e0:b9:11:71:89:cb:25:6d:36:a8:7b:63:5f:04:f5:
1a:bb:7e:c9:2a:f7:3b:53:3e:67:d3:d0:68:f6:9a:4d:4d:01:
da:24:dd:a5:f0:6a:93:f2:69:2c:c1:05:d9:f3:7a:a0:7c:83:
7d:fc:bd:af:a4:2a:6d:e6:57:74:82:0d:a6:6b:48:73:7a:4b:
3f:ca:71:95:6e:20:86:83:54:08:7d:8e:b2:12:b0:9d:a2:dd:
48:24:13:e3:f4:65:1c:a1:68:bd:f7:a5:8c:68:20:6f:57:5e:
b6:30:47:dc:28:bc:9a:b0:c8:f4:b0:58:ef:24:31:22:02:b4:
70:2a:c5:de:00:99:a2:71:bd:a7:7d:be:30:66:99:3f:70:12:
61:27:d2:d1:1b:82:95:24:ed:cb:9c:47:57:a0:29:e3:80:ae:
96:4a:79:2a:e9:99:dc:79:b9:ff:19:77:54:51:9a:a9:4f:07:
d4:a1:ce:de:55:c2:07:2e:a4:da:84:9e:16:55:1b:6c:37:d2:
82:c1:02:05:c7:cb:d2:14:a0:88:67:35:b1:97:10:88:b0:9b:
e9:2a:38:bc:32:a7:24:30:e6:07:33:50:19:55:b5:f8:5d:4a:
70:e0:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:51 2025 by rpki-client