Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cbae656-659d-335d-8f31-9104f1931e43.roa
File: 2cbae656-659d-335d-8f31-9104f1931e43.roa (raw, json)
Hash identifier: GZjCY6ALdgYZtSghCvqD3DfVFFXKJ0VGN49ur8J4ev0=
Subject key identifier: 86:C1:1E:AA:31:19:39:37:C9:6E:F7:5C:37:4D:FC:0C:EF:E8:43:8E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A49FD5BCE451453D9F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cbae656-659d-335d-8f31-9104f1931e43.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 36618
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a4:9f:d5:bc:e4:51:45:3d:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=5efb9475-3fca-4d99-8385-61e02879b014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:17:b7:ce:e4:b7:b9:7a:3d:d5:f4:df:28:
0a:fd:2f:55:66:97:56:82:f8:f1:7e:09:5a:3b:16:
61:bc:51:3d:aa:c0:d8:44:5d:13:dc:02:99:3b:75:
09:88:44:87:a4:04:d5:60:29:f2:99:f6:62:f9:31:
de:07:91:45:05:f9:59:f4:30:a6:74:5e:3e:eb:3e:
76:07:fb:82:75:88:a9:8f:1f:a2:33:17:61:24:9f:
21:1a:45:8a:2e:f7:f4:a9:a4:c7:27:53:24:f7:67:
71:30:f7:22:b0:e8:26:ee:d3:a1:23:57:4b:17:64:
41:d8:66:0c:c4:a5:32:69:cd:54:70:9a:80:17:6c:
2a:ab:b4:e0:7b:36:cf:02:a7:cd:cc:a5:ac:2c:e8:
90:6d:14:11:4a:33:9f:8d:5b:63:67:24:6b:77:03:
8d:3b:7d:e4:d3:00:5e:0f:f4:ea:d9:2d:66:57:3e:
8a:e0:9c:d3:5b:a6:b8:ae:79:23:d5:80:a5:2a:6f:
9b:8f:d2:a8:1f:20:ee:ac:45:0a:89:96:cc:a1:ae:
2e:0b:8b:ff:73:61:f2:37:88:70:7f:6e:fe:49:a7:
63:63:89:5a:07:30:a2:5c:92:56:2c:59:a2:4a:05:
58:ef:91:05:05:db:a9:fd:89:97:2b:df:39:33:0a:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C1:1E:AA:31:19:39:37:C9:6E:F7:5C:37:4D:FC:0C:EF:E8:43:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cbae656-659d-335d-8f31-9104f1931e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:22:58:31:0a:69:89:0b:df:67:f5:7c:a1:3c:15:f4:58:69:
b1:20:5a:64:b0:75:07:4c:33:f3:71:3f:65:79:0e:5d:82:37:
09:16:43:54:ef:66:75:b5:a1:23:e3:cf:5b:d0:35:cb:a1:aa:
ef:0c:0c:eb:a5:9a:94:ff:6e:35:e4:02:03:38:c5:c1:46:9b:
7f:b2:3d:45:cf:17:b7:b7:b4:d9:2b:62:fc:bc:fe:bb:cd:72:
81:91:cd:3d:7f:a1:14:59:55:52:53:48:d3:80:ef:66:24:aa:
6a:47:ef:87:e7:1e:16:ea:28:d6:b1:41:ec:fb:28:78:95:9f:
ed:05:bb:92:d1:95:3f:69:43:cc:64:b5:6b:58:0a:d6:8d:b3:
18:96:ad:4e:f2:a8:cb:1f:53:a8:55:7c:0f:4a:6a:33:57:99:
17:c2:b2:cc:f2:ee:ea:d7:d1:db:c9:71:01:cf:ba:b4:0f:34:
07:dd:a0:b2:16:38:9c:7d:b6:92:1d:50:af:bb:f9:d3:bd:13:
ea:ba:85:f6:20:f9:a6:72:82:1d:66:92:08:76:c9:c9:fc:29:
83:57:1d:2b:1b:91:9e:55:45:a2:84:53:5d:e3:fb:01:4d:ce:
33:69:1e:4d:5a:71:b4:fc:ac:7a:9f:3e:72:f4:1d:e7:5b:6b:
3d:d4:67:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:39:55 2025 by rpki-client