Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35ef49d9-e8fa-32e8-8151-3c0a5791ccd7.roa
File: 35ef49d9-e8fa-32e8-8151-3c0a5791ccd7.roa (raw, json)
Hash identifier: iZshqvBbsiAOTOynm+9XkE0iMiwskujBLMAeT3wkAso=
Subject key identifier: 7A:86:88:AF:03:68:15:57:5B:CE:B4:C5:9E:EF:3F:C1:B9:84:64:52
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484243087DCE36E04DB527D3E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35ef49d9-e8fa-32e8-8151-3c0a5791ccd7.roa
Signing time: Thu 19 Dec 2024 13:45:18 +0000
ROA not before: Thu 19 Dec 2024 13:45:18 +0000
ROA not after: Wed 19 Mar 2025 12:45:18 +0000
asID: 396593
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:08:7d:ce:36:e0:4d:b5:27:d3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:18 2024 GMT
Not After : Mar 19 12:45:18 2025 GMT
Subject: CN=7c7c3c86-151d-4cb2-9235-3b1c80cd9164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:20:e3:9c:5c:46:02:61:67:3f:66:c1:99:
a0:0b:d9:fb:94:f6:47:4e:3f:0d:25:97:f2:00:2e:
86:97:c0:85:5a:71:3b:68:9b:28:1f:d4:d9:37:d7:
0a:05:31:89:14:fe:ee:13:f8:34:0f:7a:36:0f:66:
60:a5:c2:ea:50:4c:8b:66:b6:ad:04:5a:fd:98:bc:
f3:86:e9:7b:ca:88:61:81:c4:57:41:e7:e9:79:61:
5b:7b:c3:6d:db:94:63:dc:41:8e:f9:79:5c:fc:35:
e8:72:e9:7e:ee:40:e2:c4:8b:ff:e6:b6:6d:15:2c:
a4:5d:04:0a:80:1d:14:b9:ec:8e:70:79:ec:57:2b:
61:a0:54:f2:7a:98:d7:8c:fc:db:89:b7:8b:e5:ac:
6b:ef:99:c1:da:05:b1:8b:40:12:5b:80:11:d1:21:
0d:44:d1:b2:3d:30:63:14:a8:b4:89:bf:87:c8:66:
45:0b:04:a5:16:cc:2e:2d:44:c4:03:b9:fa:54:c1:
c7:0b:31:eb:c8:ba:85:8c:22:50:0d:54:59:b6:e0:
88:6f:0a:d6:f8:35:71:7a:81:7a:03:e4:1a:f8:bf:
23:f1:a2:ea:5e:4c:34:77:59:db:fb:09:91:1c:04:
39:bf:d6:60:fa:58:70:49:1f:2f:b2:c8:47:81:eb:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:88:AF:03:68:15:57:5B:CE:B4:C5:9E:EF:3F:C1:B9:84:64:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35ef49d9-e8fa-32e8-8151-3c0a5791ccd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:c7:59:ff:22:a0:5f:8f:0b:63:df:47:aa:5a:20:9c:54:04:
fe:2e:31:0c:42:22:cf:4e:56:59:80:0a:53:10:df:88:0c:c8:
81:b4:01:4f:7f:2b:5f:1b:75:d7:23:f6:9f:de:30:f6:16:6e:
a9:7d:3f:c7:69:c6:d7:d1:fe:2b:89:73:78:de:41:a8:23:41:
db:f0:dc:0f:da:85:7b:b9:7c:2c:21:6f:45:bb:c5:d1:4e:bf:
3f:7f:d6:74:cd:f4:cd:6d:be:f2:46:0b:f6:af:9e:37:93:0b:
51:cc:8f:df:4b:a0:8d:71:be:e3:31:d8:e6:13:72:ee:7f:04:
79:fa:bd:ea:eb:04:af:7e:b9:6e:8c:56:ab:75:22:52:ad:6e:
79:89:02:9d:19:e6:a9:07:08:ea:83:fd:7e:69:52:15:fa:b9:
bf:ba:41:5e:3e:b0:ea:40:c0:52:33:d7:82:88:6e:15:15:53:
08:25:32:1b:94:cf:49:a1:f5:57:b2:d0:31:6e:f7:0b:84:c3:
ed:93:6b:93:46:70:78:c9:65:55:2e:35:07:8a:3c:85:aa:af:
7d:86:b5:87:15:ec:f4:f0:4e:d2:4b:8d:12:de:a5:0e:d1:e5:
f9:67:4c:29:c9:81:f0:76:60:16:9b:d8:91:73:88:f8:6a:f7:
30:4d:01:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:48:53 2025 by rpki-client