Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2079d73e-8af3-3576-a922-52ed4c2471b3.roa
File: 2079d73e-8af3-3576-a922-52ed4c2471b3.roa (raw, json)
Hash identifier: 74CF5eyx/6YSx7Q+GxjkgqV62nOKiqZt+jthfHu9iII=
Subject key identifier: B7:06:E0:4D:D3:5D:7E:32:47:F7:05:11:5F:C7:91:9D:11:16:1B:27
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842433116770E03D6AF188780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2079d73e-8af3-3576-a922-52ed4c2471b3.roa
Signing time: Thu 19 Dec 2024 13:45:37 +0000
ROA not before: Thu 19 Dec 2024 13:45:37 +0000
ROA not after: Wed 19 Mar 2025 12:45:37 +0000
asID: 396610
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:31:16:77:0e:03:d6:af:18:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:37 2024 GMT
Not After : Mar 19 12:45:37 2025 GMT
Subject: CN=40b903a6-548e-43fc-9351-ca75f1744f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:b5:43:ea:c0:90:13:bf:1e:0f:82:92:af:
c8:67:dd:98:44:83:89:e5:ac:dc:62:4a:10:34:dd:
d3:0a:66:7b:c0:fa:d2:bb:44:46:83:3f:ec:57:a3:
3d:86:1a:49:af:21:02:0a:bb:bf:05:9b:1e:a4:f6:
71:f4:14:e7:07:aa:80:c7:a7:19:b5:79:f6:ec:32:
16:b8:9e:19:08:59:e5:8a:68:bd:13:43:e0:33:1d:
26:33:7b:bb:e6:11:64:18:58:0f:50:81:30:ba:6b:
eb:1c:41:bf:04:90:cf:c5:10:16:a9:75:05:5e:f9:
36:a5:1f:9c:17:a2:ad:4e:93:ef:f4:80:7e:9d:16:
11:92:c2:a2:07:7c:60:2a:8a:a8:39:8c:9f:3f:c1:
ce:c4:e7:01:73:92:36:07:4c:ee:c8:55:bf:97:fa:
01:71:9e:20:9b:47:e8:aa:5f:74:4a:85:1c:09:7a:
a9:72:da:60:76:6c:05:9b:3b:40:95:cb:6c:a3:19:
e3:93:95:79:1d:b9:02:e4:41:59:87:bf:f8:da:1e:
30:f1:7c:a0:d1:e0:89:3c:40:ef:20:b9:54:7b:d2:
3d:5e:83:d6:eb:bc:2f:c0:cc:3c:ed:29:55:29:32:
4a:e3:a6:f7:49:78:de:23:b4:a0:13:0b:8e:c2:3c:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:06:E0:4D:D3:5D:7E:32:47:F7:05:11:5F:C7:91:9D:11:16:1B:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2079d73e-8af3-3576-a922-52ed4c2471b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:fb:ce:84:7f:bb:5c:b0:f5:8e:db:72:65:78:79:48:f9:0b:
6b:44:b9:01:7b:ec:c4:52:c9:25:51:d4:35:cc:00:3f:e3:40:
f3:90:b0:e6:77:1a:a0:fc:6e:1c:d3:6c:62:9e:7f:44:06:fa:
a8:c1:61:c8:89:ad:c5:77:4c:8a:64:b5:10:f7:b0:13:d7:b1:
4d:dc:6a:b3:5b:df:f9:df:81:a5:b7:b8:0d:17:5f:b7:f8:fd:
95:1c:26:a4:3a:81:02:f3:3e:38:6c:f0:a8:a5:fb:f2:3a:e6:
63:63:36:cf:8f:ca:b9:fb:c8:08:94:55:c2:b9:5e:c0:b2:2d:
9f:31:c4:20:41:75:8b:35:92:68:61:89:ea:33:21:0f:a2:17:
38:01:e4:2a:93:67:a5:bf:47:43:da:aa:3c:7d:56:d1:2d:05:
43:16:0a:d8:2d:ad:38:7e:ec:96:33:d7:cd:f5:51:ae:9b:07:
74:3d:70:d0:5b:3d:e0:6c:5d:a2:96:11:73:aa:4c:a9:27:ef:
e3:dd:24:4a:e8:65:e8:88:31:cb:f4:92:9a:77:45:f7:9a:93:
3e:1a:c2:90:bc:a7:52:7b:b5:61:82:8b:9e:b2:93:b9:d9:4f:
71:4c:fa:e5:b3:60:2c:ec:c2:7c:81:0a:2e:d4:a3:54:44:15:
6a:c0:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:25 2025 by rpki-client