Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d2bc47c-b312-31b5-8d1f-979c172f156f.roa
File: 4d2bc47c-b312-31b5-8d1f-979c172f156f.roa (raw, json)
Hash identifier: Ut3/V8XGEAb+AWyw2cy2aZp9GZqCs05tPr2LfHieMcc=
Subject key identifier: D9:17:F9:70:71:A5:7B:79:B0:8E:33:1E:9C:D9:8D:56:8A:71:1C:E2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DBC7444FCF8938CF69C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d2bc47c-b312-31b5-8d1f-979c172f156f.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396566
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:db:c7:44:4f:cf:89:38:cf:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=032db297-769a-453a-b4c2-f84e80e8233f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:7e:06:34:b7:74:a4:10:b0:7a:54:4a:7e:
18:d0:23:03:2d:1b:54:b8:10:93:fa:24:59:65:1f:
a9:46:4f:1b:fc:22:8d:7c:e0:c7:0d:25:3f:3e:19:
12:fe:96:48:47:a3:a1:38:c7:ff:1d:4f:3f:f2:66:
2f:18:90:3a:9f:d0:2f:18:a4:ef:a2:7a:03:a6:d4:
21:e1:b5:06:51:53:af:64:9c:52:19:29:c2:24:7c:
ec:f1:98:55:3c:df:22:8c:eb:b9:d2:7f:0a:4d:9c:
f4:b8:9e:81:c7:91:53:39:77:87:a7:1e:95:37:da:
0a:84:b6:48:e8:2c:3f:7d:57:57:4b:95:a8:db:5d:
e3:c1:6e:27:68:7d:f4:cd:2a:fd:4b:6b:7a:24:db:
b8:3f:2d:58:b4:20:57:f2:3e:20:aa:d1:60:7e:dd:
2d:56:c4:28:66:52:e6:d3:3a:c8:59:da:95:26:c3:
54:1b:66:42:db:93:e3:f9:fc:96:08:17:ce:7b:15:
04:83:31:b0:72:4f:40:37:50:60:c4:d1:ea:51:34:
c9:91:b0:26:fa:55:dc:5d:f4:2c:04:37:05:d1:e0:
6c:89:b8:6b:a5:d3:4b:d6:40:35:3d:98:6e:f4:96:
57:c0:61:57:a2:5b:f7:f6:af:2a:43:bd:93:76:65:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:17:F9:70:71:A5:7B:79:B0:8E:33:1E:9C:D9:8D:56:8A:71:1C:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d2bc47c-b312-31b5-8d1f-979c172f156f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:6a:b2:05:44:c4:68:e3:f2:f4:4f:5b:1c:12:82:21:b1:df:
59:3c:ad:c5:8e:f7:3d:1e:58:21:11:5d:a4:3b:66:a6:c8:14:
42:e1:a2:7d:07:3c:3c:9e:05:82:9d:9e:9c:f4:12:4f:f9:32:
f7:f9:f4:1d:a4:df:56:4d:9d:bf:d2:5c:86:92:8e:ad:73:de:
c8:c5:a1:a9:4b:94:87:93:21:65:35:ea:25:4f:15:4c:31:bb:
78:45:17:00:02:a1:a7:d6:c9:40:0a:a9:10:10:c1:ba:4f:8e:
c9:20:6a:40:3b:c6:6a:a6:26:e0:28:c2:c4:8b:13:f5:00:18:
32:7a:dd:cf:de:77:d0:5a:22:fc:ec:9d:9f:70:c0:32:bc:3e:
ed:d2:5d:98:78:e5:92:ac:fb:5e:07:b0:9b:c1:16:19:9a:ce:
d4:ea:f7:d8:84:d7:b8:2a:f2:56:ad:a7:16:ec:95:9c:f7:fe:
8b:cf:c1:45:67:9f:d5:d7:33:96:de:22:48:9b:ea:07:fb:3f:
37:9f:9b:62:70:f3:e2:8b:6d:79:c3:49:bb:dc:94:2a:1d:2f:
17:b7:92:dd:0b:6c:2c:38:0a:3a:9b:51:6c:ef:88:34:55:d2:
33:40:19:c6:fd:a9:1d:41:3e:76:3b:55:80:76:82:7f:6f:d8:
b4:c4:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:58:40 2025 by rpki-client