Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a846d28-2653-3a4a-b197-d575cf6db4ce.roa
File: 3a846d28-2653-3a4a-b197-d575cf6db4ce.roa (raw, json)
Hash identifier: FkEcf/cRfZNyOqO3jpshJmyG0jniRcvlc+ZK28WMZ40=
Subject key identifier: 7D:90:EF:3C:D6:7D:4D:DC:E4:89:A9:CE:9B:B6:5B:5D:59:D3:25:61
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424343D0C8FE83D0606F68C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a846d28-2653-3a4a-b197-d575cf6db4ce.roa
Signing time: Thu 19 Dec 2024 13:45:46 +0000
ROA not before: Thu 19 Dec 2024 13:45:46 +0000
ROA not after: Wed 19 Mar 2025 12:45:46 +0000
asID: 396604
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:43:d0:c8:fe:83:d0:60:6f:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:46 2024 GMT
Not After : Mar 19 12:45:46 2025 GMT
Subject: CN=716b98b2-f289-457b-836c-02eeca0cc093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:6f:b4:3f:f0:f3:a5:a2:ba:92:59:dd:e1:
04:4e:4d:ff:f1:50:5b:04:bd:dc:b6:56:d6:2e:8e:
2a:f9:a4:e7:52:8b:31:ba:c7:48:07:32:92:ef:27:
d3:74:7d:73:d0:2d:00:41:96:ad:21:f6:e0:62:36:
6c:3c:a8:b3:79:27:fb:78:cd:2b:a4:c7:92:5c:de:
f5:4e:9e:5e:5b:e6:2c:c2:61:80:53:e2:b4:dd:76:
c2:be:f7:22:3d:da:30:b3:28:a9:f1:2f:38:b7:20:
49:6f:46:c3:ec:a6:f0:2d:4b:82:c9:fc:75:45:5b:
cb:17:f7:84:87:8f:87:f5:f5:67:1c:e0:1b:eb:ca:
7e:4b:a0:f0:40:64:d9:d5:41:7d:c1:86:53:12:f0:
d3:a3:1f:30:a8:66:c5:e6:71:85:b7:4f:f7:48:2a:
a3:64:d1:c3:25:85:f3:18:0d:35:c7:58:22:79:5b:
29:4a:79:89:aa:90:26:16:f0:fb:e0:fa:f1:9d:d9:
dd:18:23:81:0a:cc:f6:8e:69:48:c0:7d:af:46:6d:
31:49:bb:df:87:e0:17:7f:8c:24:5e:03:6c:95:33:
a8:c5:b9:29:f9:77:55:af:06:5b:1e:f7:52:90:4c:
45:06:76:27:74:62:7b:78:33:b1:41:97:93:fd:54:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:90:EF:3C:D6:7D:4D:DC:E4:89:A9:CE:9B:B6:5B:5D:59:D3:25:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a846d28-2653-3a4a-b197-d575cf6db4ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:43:fa:1a:21:dc:fc:14:a9:2b:69:1d:a4:03:21:ff:53:db:
34:87:a2:a8:f1:d2:92:85:87:1e:e6:0c:83:d4:db:cf:5b:2e:
5c:f3:20:9e:3f:e6:1d:6c:fc:c5:75:2e:1d:4a:b1:6a:0e:17:
cf:51:85:9e:a4:5a:73:d2:1a:e6:1e:d8:e1:48:2d:f5:f4:bb:
62:ac:b1:f9:96:16:47:21:c7:b8:73:a8:0a:33:9d:d3:4b:3e:
33:dd:ef:ec:de:ed:a8:0e:07:53:ee:77:1f:3b:ab:5e:f7:a0:
1a:c7:3a:0e:88:18:e1:52:7b:01:37:f1:e3:0a:6b:9b:10:aa:
ce:dd:8a:ec:85:07:66:62:ea:bb:27:50:65:87:b4:2b:ed:10:
2c:79:2c:0b:01:a9:3f:a3:f9:7d:19:b0:7f:cf:3f:e1:ed:2a:
32:03:d1:cd:20:4e:8f:eb:87:43:3c:c7:d8:62:8d:8e:cf:b0:
8e:43:a7:e7:04:10:b6:13:42:b0:f0:74:f9:fb:6e:6d:8b:21:
38:07:87:d7:85:51:d1:64:63:08:bb:00:8b:38:4c:8b:62:18:
5e:8e:7c:d6:c6:72:3d:43:d0:f3:e6:12:ca:cd:69:43:65:39:
fe:9f:34:33:35:e8:f7:d4:7b:36:4a:13:69:94:1b:12:5b:fd:
09:4d:89:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:18 2025 by rpki-client