Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b0d10cc-e1f3-3656-95fa-f32c79ac6ea0.roa
File: 3b0d10cc-e1f3-3656-95fa-f32c79ac6ea0.roa (raw, json)
Hash identifier: eT0iZ8C09JpYpk1XBfHNX6bbPaK5zwTJDZJZXyg88DA=
Subject key identifier: 91:7D:04:8D:67:7F:3D:2E:3E:E3:0E:0A:D7:82:32:49:FB:F7:4A:87
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842430FAC113FABB2DAB9DFE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b0d10cc-e1f3-3656-95fa-f32c79ac6ea0.roa
Signing time: Thu 19 Dec 2024 13:45:21 +0000
ROA not before: Thu 19 Dec 2024 13:45:21 +0000
ROA not after: Wed 19 Mar 2025 12:45:21 +0000
asID: 396596
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:0f:ac:11:3f:ab:b2:da:b9:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:21 2024 GMT
Not After : Mar 19 12:45:21 2025 GMT
Subject: CN=dcb8b478-7cef-4a27-97e4-9366b1670518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d5:8f:ce:07:19:a4:5e:1f:b3:ab:29:9f:2b:
4b:4d:ac:3d:c9:8a:d8:17:de:79:92:1f:7c:28:ff:
4e:03:cb:7f:55:f8:e6:1d:0c:5f:45:6e:34:69:98:
f3:a6:5c:ec:0d:49:af:52:8a:cd:9a:4b:78:8f:8b:
fd:20:8d:ba:93:51:a1:80:26:ce:d0:28:76:69:ba:
51:88:6d:e7:1e:a5:77:7b:f7:86:96:86:ff:35:78:
a0:21:b1:a6:b2:9a:f0:bd:c3:3e:df:e8:b5:6d:1a:
5b:87:9b:63:72:b5:21:a6:a5:ed:2c:e5:da:dd:01:
10:e6:fd:df:74:25:20:87:83:72:7a:94:4a:4d:f2:
25:82:af:63:e7:45:48:8d:76:0a:b2:00:e4:83:a7:
0a:eb:0d:55:62:18:8e:9f:ce:b6:b6:8a:48:dc:29:
45:6a:bf:d7:c5:5a:c1:74:bc:b3:76:f8:03:37:77:
f8:2d:fb:86:24:ce:ea:75:c5:a9:2b:82:4c:aa:5d:
b4:ac:76:33:0b:ed:78:b4:b9:2f:44:7d:c7:71:e7:
25:0e:72:a8:1a:60:97:5a:26:77:60:f9:d2:b4:e7:
15:fb:b8:f2:05:6f:22:e7:07:19:07:63:1b:d9:83:
47:72:6c:2b:11:c0:e7:67:e0:9e:d8:21:80:26:c8:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7D:04:8D:67:7F:3D:2E:3E:E3:0E:0A:D7:82:32:49:FB:F7:4A:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b0d10cc-e1f3-3656-95fa-f32c79ac6ea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:86:8e:f1:22:8f:cf:3b:02:f0:3d:49:8f:e3:b0:23:4b:b9:
00:ff:04:d4:04:59:46:9d:0a:e3:12:9c:88:4b:13:f5:64:2f:
91:d2:52:17:2e:67:e9:19:8e:a2:fc:d8:4b:ed:0c:42:d4:87:
fc:9d:ec:77:71:d5:d6:de:12:a9:c2:0d:8e:bd:f7:d4:41:9f:
8a:da:b0:42:e5:a7:a9:08:bc:f8:f4:9f:dd:3f:13:81:65:99:
9c:52:07:58:f9:ae:57:ed:fc:c2:d9:24:85:59:67:39:cf:e5:
eb:e5:01:e0:b1:2b:bf:86:11:43:cf:fb:6a:48:98:0b:5d:b9:
22:c0:12:a7:de:e2:19:51:ab:d7:5f:53:21:bb:32:49:3f:1e:
c4:0e:62:9b:2e:12:74:72:a7:64:55:73:5a:ba:60:7b:b3:32:
b7:74:4b:53:0d:01:75:05:e2:53:cf:10:e4:4b:0c:05:94:a7:
52:61:24:cf:a6:90:81:e8:d2:8b:eb:fd:01:16:e7:ba:79:c4:
61:88:52:d1:ea:ca:99:e4:b7:e8:d7:bf:ca:12:9a:f6:c5:51:
7f:8e:0d:f9:64:a4:5f:de:f0:59:10:5c:21:ad:a8:dd:ce:dd:
21:82:a0:0f:16:f0:00:8c:86:c3:64:38:c9:63:de:f8:af:ac:
b8:96:ff:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:02:57 2025 by rpki-client