Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2696bd32-e932-38be-b4d6-17757f5be7e0.roa
File: 2696bd32-e932-38be-b4d6-17757f5be7e0.roa (raw, json)
Hash identifier: eeuROhHcujCM3UOVq2RBHZ4CW2PowF+RqrdnAtnbXSo=
Subject key identifier: D0:E2:97:AF:E0:68:15:F6:56:4E:AB:22:21:F4:8F:68:43:CB:6C:99
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A31E6B75787574636B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2696bd32-e932-38be-b4d6-17757f5be7e0.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 36619
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a3:1e:6b:75:78:75:74:63:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=a88116a3-d525-40ab-8419-4ddae4c8dcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:51:00:38:69:24:fe:36:54:13:3a:90:21:58:
06:1c:c4:51:c6:c8:4a:ca:44:16:82:3c:cd:b8:13:
e0:b0:bb:ae:51:75:99:e0:53:cd:6a:83:c8:4a:d7:
a1:6b:0b:bb:3d:a3:60:92:fa:6a:e4:ba:e7:06:1e:
8d:f3:ae:65:fc:5b:a6:3e:26:a4:aa:4d:0e:66:5d:
40:2a:1d:98:f4:13:73:5d:dc:10:22:66:d8:db:32:
be:67:49:69:38:0f:5c:25:c1:ad:d4:98:b8:f1:5e:
b2:f1:52:d5:1d:25:9e:5a:da:5d:37:ad:79:21:4f:
dc:bf:d5:c4:d4:bb:eb:51:15:17:68:f1:90:51:6c:
4a:23:58:77:83:02:bb:8a:21:3c:47:e6:b1:ad:c3:
14:e3:5c:9a:0b:dd:00:73:48:32:ee:8f:da:49:8a:
20:29:cb:97:8e:d7:09:c9:6a:39:db:79:7a:ab:60:
22:d9:0f:db:a4:7c:10:ee:8e:85:2c:3d:b3:c5:62:
c8:70:6a:5e:f3:58:06:31:42:f1:ba:bf:e8:83:da:
f4:7b:67:20:b5:40:38:3f:7d:99:d5:3a:f7:8e:af:
35:a4:32:84:b6:8a:6f:86:84:db:65:bc:c2:f4:cd:
64:5a:73:a5:e8:48:74:3e:f6:06:14:e1:d7:5d:1a:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:97:AF:E0:68:15:F6:56:4E:AB:22:21:F4:8F:68:43:CB:6C:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2696bd32-e932-38be-b4d6-17757f5be7e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:96:1f:9c:55:0d:5f:0d:a1:c8:3b:6c:45:52:4e:0c:e4:96:
cb:5b:35:99:2e:28:85:85:25:5e:09:05:39:19:44:ad:5a:a5:
22:d9:ef:2f:00:78:a4:d9:a2:88:7b:75:78:eb:19:f0:56:a5:
dc:1f:b9:53:71:0c:04:e0:10:ac:d8:8e:d0:9d:1e:7c:09:32:
96:4c:31:13:8a:43:59:5e:4c:a1:7b:42:f5:c7:a5:e8:83:18:
1a:75:af:6c:22:a3:5d:52:fb:b5:8c:64:d7:b3:0e:d5:4f:aa:
c8:12:76:35:21:b2:b7:6a:4f:4b:4b:08:e0:08:43:9d:d4:b8:
f2:88:62:e4:1c:ec:41:3e:d9:b7:48:46:46:a3:aa:95:ff:a8:
f6:67:5a:9b:3a:b9:cd:34:a3:e6:eb:ea:38:ec:45:58:92:d9:
ad:33:d0:93:07:27:6a:51:de:ee:28:2a:4a:3b:c1:4d:c1:05:
53:70:18:06:6b:41:7e:b9:41:77:32:7e:cb:07:16:74:28:89:
37:23:62:47:df:91:17:1b:fd:f8:77:d3:74:68:81:af:cf:f4:
7f:16:51:e1:b6:2f:02:20:ce:ef:99:be:b1:39:8e:f8:cd:22:
b7:97:dc:79:a1:0e:9e:79:b4:56:2c:82:8d:7e:41:0d:cc:02:
eb:a4:88:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:32:22 2025 by rpki-client