Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3568fb27-898f-3a13-a92f-5636f3e720e5.roa
File: 3568fb27-898f-3a13-a92f-5636f3e720e5.roa (raw, json)
Hash identifier: siHACRFPYlsyhtWQHf2XRNxcZnLNfMC5O8Xzpj3sFus=
Subject key identifier: 24:F7:1B:C0:EB:14:F1:28:44:B3:CA:B1:E2:50:6A:A0:98:02:6A:AF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A8EB31941E622D7A1EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3568fb27-898f-3a13-a92f-5636f3e720e5.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 40647
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a8:eb:31:94:1e:62:2d:7a:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=070da261-7abe-47d9-a57f-585f2ee53795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:2b:15:de:f2:95:02:1c:69:61:8f:4c:45:
e2:33:78:80:fd:74:6b:57:0b:d2:ce:7f:20:76:03:
05:f4:17:f8:77:26:46:0c:bd:5d:d3:9c:1d:c3:4a:
1c:aa:70:53:f1:f9:8f:9a:b5:b0:30:f4:68:ee:85:
0d:7b:ce:16:38:4c:6d:d3:c7:71:33:35:ca:f9:62:
a2:7e:a0:5b:1e:8f:54:5f:95:3f:b4:80:31:5a:da:
c7:7c:17:4c:f7:88:24:2a:e2:a1:a3:c9:3a:4a:0a:
2c:bf:45:5b:9c:37:29:09:d0:fa:68:0c:94:df:a1:
07:f8:4e:47:a2:6c:11:ed:f1:5f:c9:ab:27:ef:2b:
a3:f1:99:13:20:17:a1:19:b7:05:61:c2:fb:91:1c:
6b:5c:ba:fe:4b:df:22:7e:dc:1a:51:41:a6:cd:6e:
f7:a9:0f:71:af:a4:e4:e5:76:bf:96:f9:8e:93:89:
80:7f:85:f6:8b:2d:69:da:77:18:84:05:e1:56:f0:
21:50:fb:34:ac:27:b5:5a:aa:5f:4c:98:b1:32:2f:
0b:15:bc:46:2b:3c:b8:8a:68:b0:d9:f0:15:b6:79:
09:26:7d:d6:0f:ad:d7:18:4b:3c:72:5c:66:cf:ee:
bb:ee:3d:0d:f5:47:4a:e6:87:86:f3:5d:f9:55:f9:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F7:1B:C0:EB:14:F1:28:44:B3:CA:B1:E2:50:6A:A0:98:02:6A:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3568fb27-898f-3a13-a92f-5636f3e720e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:7b:28:ba:3a:bf:e8:b7:3d:05:6c:ce:d5:ca:16:ca:8b:dc:
76:24:61:ea:32:be:b1:67:1c:43:9e:20:b3:b4:a9:c4:15:a5:
f8:ea:1a:77:85:22:1c:91:59:d8:64:7f:fc:bc:7f:94:61:50:
bf:ab:b8:11:e0:15:e0:29:a1:a3:43:68:56:6a:c3:dd:18:71:
95:d8:c2:c7:2c:53:91:1a:8a:72:e5:cf:99:cb:3b:5f:13:da:
3c:73:9a:61:59:33:06:37:b8:64:9e:f9:9c:64:67:e4:a9:f0:
51:53:8e:eb:6b:86:b9:de:3a:c3:15:c7:aa:ed:73:f0:49:b8:
b3:0b:0b:c1:77:2e:fb:8a:75:cb:ca:b4:e7:8e:f1:ff:4b:fd:
ac:b2:ee:92:37:4f:74:6c:9d:0d:e7:b7:90:88:3e:95:f3:4d:
f1:2a:39:6c:b7:e9:6f:40:a8:04:34:b1:95:8c:05:9a:2f:4d:
31:62:23:8e:29:8e:b8:ab:58:d0:00:b0:03:ff:2e:54:92:c8:
fd:58:a4:2d:84:81:70:4e:8c:77:75:cd:77:1b:b2:bc:54:8f:
f7:1e:f3:ff:95:8d:f5:bf:c2:82:76:35:dd:a4:14:a7:bc:82:
5a:bc:a8:20:4d:42:ee:96:d5:5f:5a:de:16:9e:cf:bf:de:e2:
a2:63:58:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:59:55 2025 by rpki-client