Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b4a7e17-8e55-3dd4-809f-b37665e9229e.roa
File: 2b4a7e17-8e55-3dd4-809f-b37665e9229e.roa (raw, json)
Hash identifier: YN/xgyHH90e+1ruTegrEbvyLZHQbVp7v/ofumpJilwM=
Subject key identifier: 92:B6:40:03:1B:9B:18:96:F1:61:93:07:63:7D:18:DC:7A:FE:D1:65
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3E54DE3D136FB3C4CCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b4a7e17-8e55-3dd4-809f-b37665e9229e.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 19836
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3e:54:de:3d:13:6f:b3:c4:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=e8d23396-aac0-4c9d-88ed-d72c65e9ade3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:67:56:c2:2e:b0:8c:8a:df:49:1b:04:2c:
31:16:9f:97:72:f9:20:41:fe:e4:5c:4b:12:b6:7a:
67:25:03:d0:f6:24:8d:fb:da:ca:ed:01:9d:5d:a7:
8b:f7:93:64:e2:5f:ea:9d:29:ab:6f:e6:8b:10:c9:
7e:97:7d:a1:cd:58:08:92:3e:c9:86:62:0d:b0:4f:
dd:4b:7b:7a:bd:1e:2f:5d:1d:93:c1:a1:ea:aa:c4:
42:69:af:e5:f8:72:d6:27:d4:ec:83:9f:c7:78:bc:
a6:3c:9b:15:94:14:c7:b8:6e:3e:c3:e6:da:de:28:
a7:1f:5c:1e:32:ef:b8:a8:91:f1:8a:b5:44:ba:1f:
54:c1:8a:b6:73:68:7d:a7:75:9a:eb:77:0b:05:85:
30:23:24:de:54:c9:cf:ec:8f:1f:98:d5:09:17:c0:
72:1b:9c:94:d5:60:65:c7:6e:6a:c3:46:6a:2c:56:
80:97:6a:54:ec:3f:67:2a:4d:f8:88:3c:83:ae:59:
dc:88:d6:72:d5:25:07:fb:86:f5:ba:1b:eb:b9:42:
a1:70:75:83:a8:9d:0b:cc:f1:a7:0a:74:90:2a:45:
73:2c:6d:74:51:71:e0:40:65:2f:9b:af:e8:57:36:
c9:85:3c:e6:45:4b:59:7d:b6:b6:e5:8b:f4:4b:54:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B6:40:03:1B:9B:18:96:F1:61:93:07:63:7D:18:DC:7A:FE:D1:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b4a7e17-8e55-3dd4-809f-b37665e9229e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:3b:e7:62:87:c7:67:9c:9e:96:bb:64:0c:f1:ce:8e:d5:0e:
4c:fe:f6:b4:dc:95:11:a2:25:c9:27:ac:ed:16:03:e3:c8:73:
6f:07:92:75:90:6e:cd:d2:3c:47:88:d0:0d:37:98:b9:76:93:
42:08:f3:c0:50:7b:6b:df:c5:32:45:99:50:d7:c8:26:37:d3:
90:b0:3d:69:d2:a3:82:40:1f:9d:ed:98:7a:d0:37:89:4c:0d:
d1:05:84:ec:3e:55:8f:ab:dd:2f:a4:e8:29:1d:21:cb:69:ea:
e4:a0:ae:79:98:a2:39:16:65:c5:29:d3:e0:5c:b1:a3:2f:58:
4e:52:5f:6e:9c:0b:07:fb:d2:ce:11:6c:1d:99:c5:70:cb:6f:
77:66:c5:64:e3:7e:30:4e:11:84:4d:fa:5b:48:25:80:3e:a6:
4c:0a:ac:40:9c:eb:07:36:28:7b:b8:04:5b:fc:1d:e5:5a:0a:
ea:dd:ca:98:10:3f:94:6e:81:80:00:42:53:b9:83:c3:53:3a:
29:42:66:c7:23:f1:44:c2:a8:bf:5f:b8:41:24:7c:bf:c9:95:
fb:9c:ab:3a:71:fe:67:29:2f:39:70:bf:40:11:d8:c8:d7:b8:
2e:44:5b:8a:31:b1:0e:48:dc:90:7e:2a:fa:3d:97:a0:d3:5a:
0f:8e:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:48 2025 by rpki-client