Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42b271b0-3b56-31da-8af2-3953d996abe8.roa
File: 42b271b0-3b56-31da-8af2-3953d996abe8.roa (raw, json)
Hash identifier: Aty7t1ASGwc3znR8L5ZcSrA21kKstyA25DLEu8mTnIw=
Subject key identifier: D0:EA:14:88:4C:20:0B:91:48:1B:FD:51:37:66:AC:F9:C3:D1:87:11
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484D75A1C4CC4539AA39B9F880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42b271b0-3b56-31da-8af2-3953d996abe8.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 36631
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:a1:c4:cc:45:39:aa:39:b9:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=da67dcfc-8fa6-4e17-93cd-61fbb2b7d682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7c:65:a4:ce:4c:bf:4a:f6:25:08:09:fd:a0:
c0:9f:8d:ce:37:d3:a6:ac:42:63:52:66:c0:79:11:
61:d6:fb:16:ab:0a:94:d3:4a:df:5d:68:7a:9e:a0:
6f:2e:44:63:a7:52:30:1e:3b:03:a7:10:a1:97:15:
59:f4:5f:63:1f:67:94:75:db:fb:c3:9a:e6:2f:98:
1c:60:bc:10:b8:bb:c9:6c:19:bb:9f:79:61:3b:61:
51:e7:67:fa:c1:8d:45:a3:db:6f:75:1e:91:5b:06:
b8:b2:89:8c:b4:bf:d9:13:be:59:d2:ed:72:4a:e7:
94:9d:52:7d:6c:7b:9e:3e:a2:c1:6c:6c:32:61:0e:
19:72:f0:ac:40:1a:14:9f:c9:19:35:9c:38:e6:cc:
1b:16:af:1a:d9:25:aa:a8:99:9f:52:5a:7b:3d:ee:
c7:43:83:df:de:51:0d:f7:bd:95:b8:7a:76:49:db:
de:4e:83:8b:09:c3:8b:65:04:c8:73:00:29:b0:96:
d4:a9:d8:2b:ae:1c:20:1d:6f:36:85:0f:4b:9b:4c:
68:39:11:cd:9c:22:b8:2c:0a:37:da:87:46:73:74:
0d:d3:92:e2:8c:af:4b:8a:02:14:62:e0:04:31:3d:
9a:ff:77:24:2d:cd:1b:39:a9:f4:cf:e7:6a:3b:ac:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EA:14:88:4C:20:0B:91:48:1B:FD:51:37:66:AC:F9:C3:D1:87:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42b271b0-3b56-31da-8af2-3953d996abe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:c6:a3:ed:b5:f3:a2:ed:73:d7:d6:8d:e1:ed:99:64:ce:40:
34:fb:d5:fa:32:ed:73:a8:17:6a:61:05:34:03:41:23:63:da:
8d:94:57:95:3c:02:99:e1:b3:1e:98:5b:cd:2e:26:f7:a6:9e:
f7:e8:7e:e4:5d:43:29:53:1c:7f:db:ba:ca:5e:64:8e:1b:b3:
8a:4c:f4:d7:59:fc:ec:9f:e1:24:1b:0a:55:31:3d:95:86:57:
15:67:75:26:88:5e:17:8b:18:01:91:e6:40:cd:0b:2d:7b:83:
8b:76:f5:e1:4a:4b:59:56:54:11:06:fc:c2:f4:1c:35:cd:c5:
be:d9:59:d9:d8:5c:a7:7d:b7:97:8f:f3:04:04:01:d7:5b:81:
3b:ff:4b:e0:c9:64:7c:06:f3:1f:a3:27:32:62:b2:88:4c:90:
02:98:8d:38:fa:45:16:d7:c8:6f:b6:bd:be:10:74:e2:ac:0a:
81:0a:87:69:d3:dd:99:90:63:c1:33:8f:b2:df:b7:7f:57:d0:
dd:88:47:73:57:c5:9c:d0:1e:72:f2:7d:cf:c0:4d:e9:47:29:
ae:ab:11:15:26:5b:8a:1d:8c:43:89:7a:e7:0f:52:66:2b:dd:
ba:12:c3:8b:a0:e8:2e:64:10:f4:c6:83:b0:0c:e6:5d:cd:fb:
ef:96:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:18:52 2025 by rpki-client