Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22aff6bc-3216-33a6-acd7-f06e640b0458.roa
File: 22aff6bc-3216-33a6-acd7-f06e640b0458.roa (raw, json)
Hash identifier: AhnUGYECu6jicyCyvyw48qN1Ps2iX50LsuQb5kTvnq0=
Subject key identifier: 60:45:93:E0:8B:D3:B3:4A:EF:8D:45:F1:95:55:07:0F:7C:3C:AB:F3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3B6A66825B8D23ED0A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22aff6bc-3216-33a6-acd7-f06e640b0458.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 20172
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3b:6a:66:82:5b:8d:23:ed:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=61e9d885-2e13-4b25-a2c0-de0a5573001a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:00:37:ad:90:1d:95:2f:ca:1b:34:f2:8c:
0c:91:42:e6:2e:7c:58:63:f1:68:d5:3c:42:90:49:
8e:d0:d6:a7:0e:14:14:9f:ab:45:71:a2:fe:3e:18:
b6:71:3d:1e:f0:e9:d7:87:f7:72:2d:f2:02:77:8e:
d2:33:a3:7d:49:5e:de:ff:e8:a3:4b:bd:65:69:97:
0d:b1:09:89:78:5a:c9:e4:cd:81:38:d5:0e:b3:c9:
89:69:56:ce:2f:68:4d:ba:f2:54:fd:ab:63:36:71:
7c:56:56:44:dd:15:90:5b:bb:dd:ac:e1:a0:f5:5f:
55:32:3e:92:87:51:8b:c3:81:cf:ae:a9:59:87:48:
3d:b6:6e:55:b8:db:1f:1f:de:86:74:7d:e6:d6:89:
c6:fb:6d:22:e9:b2:ed:0b:52:78:1d:3c:1f:56:11:
77:c8:7e:01:04:5d:d0:d3:9b:30:ee:ee:0c:9e:24:
33:df:93:b2:32:61:bf:6e:0f:dc:af:22:92:f5:47:
da:66:af:43:47:14:06:10:f3:62:f9:40:e5:43:6a:
04:d6:a1:61:19:15:a5:a7:95:72:69:38:ff:2c:69:
38:0d:96:79:41:0b:d1:a6:40:19:25:47:d6:7e:e2:
72:29:3c:9e:1c:af:64:f8:20:3e:c1:eb:f1:75:8b:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:45:93:E0:8B:D3:B3:4A:EF:8D:45:F1:95:55:07:0F:7C:3C:AB:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22aff6bc-3216-33a6-acd7-f06e640b0458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:26:59:4c:4c:b3:36:c0:8d:a9:c7:b9:d9:85:7f:40:23:2c:
34:34:47:43:9d:a4:7a:65:b3:61:39:93:15:92:39:0e:5e:a4:
94:4e:c5:97:95:c0:18:03:21:8a:1a:ca:a2:81:81:1e:ff:91:
bd:ac:f0:b1:be:b1:3e:3d:48:b5:a7:c6:28:60:a2:17:83:40:
63:38:6b:fc:68:99:e5:b5:5c:b3:dc:9f:ce:3e:9a:5f:c5:af:
31:d4:0f:59:3f:61:64:9b:dc:69:b4:48:de:84:b3:15:c3:df:
0a:cc:ed:1c:43:86:0d:27:65:ef:16:a2:e5:27:cb:db:8d:de:
5d:08:a7:d4:02:73:19:c7:71:a1:3a:51:b2:61:0e:88:04:57:
39:57:1b:85:88:8a:64:58:ed:38:d6:ff:a5:0e:08:08:c6:1a:
a5:6e:22:28:77:8f:e9:c6:ef:7d:2e:19:60:f3:2f:3e:0e:d3:
74:90:bf:1e:bf:cb:39:87:4a:92:6c:f2:26:32:99:84:3e:99:
74:16:06:02:3c:3c:29:a1:96:58:a1:81:9c:18:7c:de:02:3b:
70:30:da:2c:37:a1:d5:17:68:da:bb:16:0b:3e:a1:93:74:4d:
6a:d7:af:d6:4e:3b:48:fb:9d:c9:3f:bf:ed:1b:a9:c2:9e:50:
bb:fd:eb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:15:59 2025 by rpki-client