Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa0003f-0d1e-394d-a3a2-f358e705b762.roa
File: 3aa0003f-0d1e-394d-a3a2-f358e705b762.roa (raw, json)
Hash identifier: gNrvpOMyefD9TCy6fbkBZBc0Jz3lDNMsqQtoip02TDY=
Subject key identifier: 19:28:65:AB:4D:F9:8F:30:D4:77:2D:36:DC:9E:D4:20:13:C8:39:BE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DEBFD9ADE874E45B7880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa0003f-0d1e-394d-a3a2-f358e705b762.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 397198
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:de:bf:d9:ad:e8:74:e4:5b:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=76ffb9ee-cffa-44b0-a792-36746c1354ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:67:dd:1a:38:2d:d5:f4:6b:c9:a5:60:b9:
5e:cb:9d:d9:7f:2c:bd:a3:15:fe:91:61:0f:91:7b:
f6:8f:9e:d0:63:b4:84:5e:99:a9:fe:5c:1e:15:bc:
ae:57:bf:94:8c:fd:82:e1:17:8f:69:df:6b:d6:bf:
9a:29:35:47:62:d2:ea:5c:7c:26:a7:34:f1:05:cc:
25:c7:6e:1a:8e:e6:43:de:df:a5:7d:15:d9:5c:38:
51:2a:17:1b:c4:be:e4:e3:0d:f6:b7:7b:4f:46:26:
00:46:df:d0:4f:9c:e6:f8:61:b8:86:1d:1d:83:84:
78:7b:34:5a:4f:8f:e7:3e:4b:5c:60:86:e7:a6:0b:
95:3f:09:54:13:90:d5:16:cd:97:12:3a:87:5b:18:
85:cb:c3:55:8a:28:a1:ba:e3:92:99:07:d1:13:ca:
16:6f:96:92:5e:98:7e:84:b0:3f:ff:46:2f:64:40:
16:a7:e9:f6:31:0d:62:40:79:45:21:29:fb:27:5f:
3c:be:d6:74:dc:73:b9:69:9b:c7:8a:c6:ce:43:08:
29:b8:3a:c8:80:bf:be:60:83:5d:1e:a6:bd:7c:20:
bd:31:c5:17:15:b5:a4:bd:40:7b:c9:65:b6:60:8b:
36:d8:f1:5e:e7:d0:8f:26:95:4e:1c:e4:15:a9:2d:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:65:AB:4D:F9:8F:30:D4:77:2D:36:DC:9E:D4:20:13:C8:39:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa0003f-0d1e-394d-a3a2-f358e705b762.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:39:df:31:ec:a3:59:1d:4c:70:7c:ad:c5:cc:63:9a:4a:e7:
39:68:f6:c0:50:a5:55:fe:50:3d:35:85:d6:5e:b5:76:56:66:
e1:6e:d8:3b:dd:62:f7:6d:65:f5:38:ba:54:5c:e8:b6:a5:30:
d5:c6:f8:80:b3:94:e3:c4:17:82:4a:08:b4:da:ae:a2:1e:fe:
d0:ae:54:e0:92:dc:bd:de:7f:5e:17:99:d1:e0:42:cf:b1:f9:
ab:29:84:11:5d:f3:88:10:e4:9e:b7:5a:97:07:b2:66:a5:c8:
1f:a6:e8:86:fb:73:50:06:19:1a:66:52:dd:f9:80:2a:76:e5:
63:a2:d0:bf:9d:eb:f5:e3:81:4e:f9:84:72:82:12:ba:43:86:
66:1d:b7:59:f2:51:3d:b1:e8:3b:ae:07:0f:52:f2:15:0c:2a:
a9:14:96:4c:52:7e:81:15:f9:b0:ac:82:26:65:0a:ff:60:8f:
a0:0b:b2:4f:a5:00:d8:9b:9c:5e:6e:83:59:da:59:68:45:91:
9f:0d:2d:26:01:33:b9:ba:ca:ba:4c:07:cf:e3:24:fb:be:2e:
12:0d:91:3d:ac:4e:4d:4a:c6:99:28:d0:20:1d:0d:0e:a0:a0:
73:a8:d2:a0:dc:19:4b:33:bd:28:85:0b:20:61:3e:ba:0d:9b:
cc:4a:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:53 2025 by rpki-client