Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b64aa48-cfa6-341f-b61e-c2f44a48ff0a.roa
File: 3b64aa48-cfa6-341f-b61e-c2f44a48ff0a.roa (raw, json)
Hash identifier: 1fpNsnSlSMde4Y8vGXMLHowk+Bw9QX155OJ+GE6hIZQ=
Subject key identifier: BD:EC:60:6F:84:A3:23:C3:DA:FE:84:CB:EE:65:D8:92:15:95:92:13
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842433BAFA21821D2AA40C23C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b64aa48-cfa6-341f-b61e-c2f44a48ff0a.roa
Signing time: Thu 19 Dec 2024 13:45:42 +0000
ROA not before: Thu 19 Dec 2024 13:45:42 +0000
ROA not after: Wed 19 Mar 2025 12:45:42 +0000
asID: 396560
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:3b:af:a2:18:21:d2:aa:40:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:42 2024 GMT
Not After : Mar 19 12:45:42 2025 GMT
Subject: CN=09736299-6fc2-4ed6-9443-4f7fd3c83fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:67:42:f5:f2:4b:46:d8:8c:e9:79:f9:20:73:
85:ee:af:c6:5f:8e:27:0f:5d:17:a1:8a:47:96:0a:
99:70:e2:91:96:75:73:9a:52:6a:e6:c5:4b:5b:b5:
86:ad:2e:19:57:be:f5:33:4d:ec:84:c1:96:0d:f0:
e3:85:7b:e2:d0:c3:44:21:10:74:b7:e9:3d:13:06:
49:1b:e7:cb:65:d8:1d:98:20:c2:61:ba:be:1e:80:
1f:39:df:6a:24:0e:41:4d:ae:4e:38:fa:b2:dc:ed:
fc:5c:1c:b3:07:d8:4d:83:61:1c:56:2e:46:dd:64:
b4:21:b9:16:93:78:75:37:72:47:bc:0c:1a:61:fd:
40:0f:69:a4:d4:bd:12:43:45:dc:12:7f:52:53:d9:
c4:fb:53:0e:c5:c7:81:4e:d5:eb:ba:e6:39:94:9c:
34:2c:14:48:44:2a:d0:dd:a2:e1:62:af:ff:8a:75:
83:57:f4:04:16:ef:e1:c6:92:13:8b:7d:1c:24:7f:
53:17:36:10:c2:24:07:ec:91:ab:79:1e:57:3d:6a:
23:cb:37:08:5e:9b:9f:18:bd:5e:f6:00:5f:74:dc:
cc:88:14:c1:9f:61:30:9f:ab:ca:8d:3d:1b:cf:a1:
c3:8d:58:b2:9c:61:ba:c1:f9:a2:a7:a7:38:f5:db:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EC:60:6F:84:A3:23:C3:DA:FE:84:CB:EE:65:D8:92:15:95:92:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b64aa48-cfa6-341f-b61e-c2f44a48ff0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:c6:30:59:2f:3d:4c:f7:7b:66:70:d9:f3:56:ca:73:0d:41:
a4:fb:a1:06:9a:7f:6d:fd:35:da:05:e2:47:bb:18:0e:7b:c0:
6b:89:9a:16:7f:ec:5a:35:c3:20:ed:49:e0:6c:e7:d6:70:03:
0b:e7:4b:fd:b0:97:c8:0c:49:19:c4:6b:1e:9f:d4:6e:7a:07:
ea:14:65:3c:58:a4:63:db:e2:a5:0c:35:89:87:5b:8d:74:40:
ef:f6:5b:05:0f:8f:dc:e5:36:22:49:37:f7:aa:ec:83:5d:4f:
b0:dd:14:04:11:18:3a:e5:52:4c:62:f1:fb:ad:38:03:51:f9:
96:36:46:e3:d3:01:43:0c:73:74:82:7d:42:fc:32:84:74:8c:
3c:92:7a:7b:2e:6e:81:9e:59:ec:6c:cb:0a:8d:18:64:b8:0e:
a3:05:ec:bc:74:0d:8a:f9:56:99:ff:50:97:d2:59:6d:54:69:
0e:a3:fb:b1:ec:02:1e:09:0f:db:6d:b0:fc:f4:6e:f7:7b:6f:
b9:c4:bd:a4:63:3e:54:1b:9a:72:bb:ab:bd:cc:ac:24:67:de:
99:b1:a5:3a:d3:a8:7d:c6:cd:52:33:2a:56:f1:ca:67:eb:17:
06:dc:07:eb:a5:cb:8d:a9:9b:49:c8:0d:3e:33:47:cc:3e:91:
29:29:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:38:33 2025 by rpki-client