Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33fdc32f-82b3-369a-a3f2-d2798fb84607.roa
File: 33fdc32f-82b3-369a-a3f2-d2798fb84607.roa (raw, json)
Hash identifier: FAL3ymMSt8AmUZUpPSG4p1HZHjbu1LflM4bAXq+VeQc=
Subject key identifier: D4:EA:9D:7D:80:89:93:A1:F6:CC:3B:70:75:91:05:0E:18:02:E5:6A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3D066AC26AA117578680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33fdc32f-82b3-369a-a3f2-d2798fb84607.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396590
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3d:06:6a:c2:6a:a1:17:57:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=bd60e18d-ab28-4a04-ae9f-492faa897e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:c8:b9:1c:0f:e3:5a:52:54:10:e1:19:78:
37:77:33:ef:b2:89:b5:b4:2d:7a:15:dc:b0:37:88:
d4:04:38:59:de:8a:87:c3:e0:89:52:bc:d4:c0:7f:
e5:7d:dc:9c:2d:2d:71:db:76:77:06:74:99:26:1f:
ca:e9:ab:da:a4:a1:6f:9e:ca:98:45:87:05:2d:1a:
57:63:03:8d:ee:da:b6:e5:24:4d:68:8c:ec:ce:8e:
23:f9:af:af:65:0d:20:79:97:10:f2:7c:10:7e:5c:
37:fd:97:e4:89:e9:79:c0:ee:af:35:55:3d:f4:c7:
37:67:e7:f5:98:fd:b6:29:f3:6a:33:e0:cb:f2:14:
62:0b:5b:1a:65:88:b2:45:92:14:f5:9f:b9:b6:82:
f0:e1:ef:6b:1d:af:ad:29:b9:ec:52:78:ec:2e:e5:
f4:78:c2:6d:b3:81:27:42:5a:a8:fa:d3:f0:35:1f:
ba:94:c1:30:07:5e:0d:d0:e3:a8:48:ec:4d:b9:85:
53:4d:90:75:d9:d2:11:2f:b0:d3:69:70:c4:6e:9b:
4a:e4:e5:7a:de:68:3f:bf:8f:07:35:b3:e5:09:61:
7f:6f:65:bc:43:54:3f:4a:b9:fb:de:66:f0:62:eb:
7f:29:86:6b:55:1b:1a:77:2d:93:68:05:96:a5:ff:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:9D:7D:80:89:93:A1:F6:CC:3B:70:75:91:05:0E:18:02:E5:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33fdc32f-82b3-369a-a3f2-d2798fb84607.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:78:55:30:60:68:4b:7e:36:7f:1f:89:75:2b:61:7e:4a:a1:
fd:27:63:b8:f2:ef:cd:ca:a9:fc:c1:91:e0:16:a6:17:e4:f5:
fd:1a:c5:5f:aa:23:bc:2e:b9:3f:39:6a:67:d2:cd:83:2c:f9:
3b:4e:e7:6e:1e:3c:f2:e5:21:59:5c:ea:5d:47:d4:f1:eb:74:
9a:32:88:35:76:3c:29:99:f5:c1:11:b1:fa:e6:8c:c8:fa:b6:
9f:37:6c:d4:6e:aa:1c:a4:8a:be:85:72:b8:78:09:41:a6:65:
cf:ec:6b:1c:ab:49:8c:59:35:ce:e1:a9:75:e9:25:49:b0:cc:
2d:2b:9d:80:ca:1a:d0:af:ae:1d:6d:c5:27:9d:c9:6b:1c:ae:
38:0d:40:f6:a8:64:e9:2e:d5:7a:20:b4:6e:52:06:92:ac:0c:
b9:2d:05:2d:9e:d6:46:96:71:5b:be:05:8b:61:3d:00:0f:2a:
b7:01:cf:8e:1c:7d:63:94:65:68:65:70:98:b8:78:da:8a:3a:
b4:db:81:a1:9d:ee:23:ce:8b:37:fd:6f:b5:b4:b7:79:90:4f:
1b:f9:68:6a:9e:9b:76:00:72:7a:5a:f9:c4:1d:34:cb:1e:f0:
d2:14:20:04:b5:82:66:02:7e:ac:d1:67:89:ab:49:e1:e5:12:
ce:4b:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:51:08 2025 by rpki-client