Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f4e0245-e6da-3e42-a585-d5c1af3b32eb.roa
File: 3f4e0245-e6da-3e42-a585-d5c1af3b32eb.roa (raw, json)
Hash identifier: VgCI7pGhQtbla6BEmQRAIndUJr28h9i3qq187uikAv8=
Subject key identifier: FD:35:AE:29:38:DD:CA:B8:D6:84:A5:5A:E7:91:5D:E6:93:9A:D8:3B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DAED5A3CEA7203B7A880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f4e0245-e6da-3e42-a585-d5c1af3b32eb.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 20362
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:da:ed:5a:3c:ea:72:03:b7:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=a0927bab-e1d7-4fbe-841b-e132d86717ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:0f:a8:46:b2:99:a7:e8:08:23:04:de:05:
d0:e6:68:6f:b1:8b:e7:ad:19:b9:ee:e5:75:80:ca:
d6:f1:29:25:84:1b:9d:76:44:6d:45:36:d5:89:70:
1a:fc:67:57:4b:f3:f0:04:f5:7c:24:bb:02:d3:c3:
6e:e0:e9:d6:20:1d:ef:a8:1c:43:65:27:78:47:4a:
fe:36:ee:73:3d:77:e1:c3:4c:49:54:eb:1d:6d:63:
a9:6e:36:bd:40:95:d8:c5:88:d5:de:be:42:96:bc:
bf:02:74:66:3b:b8:01:40:0d:0e:13:f2:77:79:48:
03:b7:64:ce:69:b3:57:a6:28:e8:c8:7d:a1:4f:0a:
41:d6:79:8c:cd:da:93:b1:bd:04:51:d5:2e:28:02:
d5:dd:7a:ca:27:2f:fb:f6:44:7f:21:f7:59:cb:5c:
3c:ce:66:36:90:d3:5c:95:04:d7:fd:73:b6:34:8a:
e9:cd:99:55:87:2e:45:8b:fc:83:4e:fa:3d:ff:aa:
52:b3:0a:57:23:a7:21:78:83:ff:af:34:2e:5d:ae:
5c:f8:fe:e6:ca:b2:f9:75:c4:3e:1e:a9:ca:b3:90:
0a:bc:52:b2:7e:60:99:76:1d:b0:6d:8d:56:c9:ce:
98:57:b4:93:48:8f:33:fd:99:05:bc:84:bf:c1:7c:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:35:AE:29:38:DD:CA:B8:D6:84:A5:5A:E7:91:5D:E6:93:9A:D8:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f4e0245-e6da-3e42-a585-d5c1af3b32eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:ae:85:c8:ef:77:5e:3d:25:83:ee:61:7a:80:48:b1:06:ea:
2d:cc:c9:72:e5:a4:7c:3b:61:06:96:f2:fc:c2:02:30:21:ca:
df:0e:f8:d1:d0:1d:3f:96:a6:9c:27:8c:9e:59:57:ee:98:ea:
16:fa:6e:23:e3:f9:31:85:41:af:67:db:45:75:a8:a6:9c:86:
6c:6d:50:7b:a5:44:11:46:eb:b8:7a:8c:23:88:31:10:66:0b:
c2:a1:4f:cb:8b:7f:2b:2b:9d:6d:6c:c7:3e:75:c8:7a:04:ab:
03:02:fa:2e:aa:86:10:21:08:9d:78:20:ea:ff:62:20:b9:28:
c2:7a:82:03:aa:3b:4e:81:3c:c9:0e:88:07:1f:58:d0:e5:40:
24:2d:20:a3:ee:a3:b3:4c:1c:51:90:05:11:ba:d7:e3:8a:7b:
e8:6e:c2:de:2d:38:70:ed:a1:9e:50:35:4c:15:0f:41:d8:bf:
c3:d6:42:ff:fd:2c:90:da:61:ce:d4:c7:62:5f:15:b6:6c:6c:
29:37:e4:d5:2c:9f:fe:de:b0:28:20:58:08:f8:3c:6d:32:33:
9e:98:df:f1:07:7d:16:26:56:4a:e6:85:01:2f:a3:01:29:c7:
57:f2:cd:43:2e:bc:a6:01:09:5a:69:9f:1a:62:d6:4c:63:03:
e9:a3:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:54:12 2025 by rpki-client