Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e5895e9-07c3-30ed-b7bd-b3d9e7f7896b.roa
File: 4e5895e9-07c3-30ed-b7bd-b3d9e7f7896b.roa (raw, json)
Hash identifier: ED//cEuDHiRBylsx3sY+IcmtzUOJj5yVNyjPrU6g3pw=
Subject key identifier: 64:C4:20:5A:CF:26:C7:3D:1F:C9:A5:9B:14:29:EF:57:F8:35:28:72
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35AA1A45599562D46CCD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e5895e9-07c3-30ed-b7bd-b3d9e7f7896b.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 397212
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:aa:1a:45:59:95:62:d4:6c:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=d9d119c5-cc6c-4e45-9d3d-7a1d103a7d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:94:ea:02:e5:34:72:81:c5:bf:fe:87:03:
00:24:0b:73:51:29:b4:dd:89:71:dd:14:0a:b9:81:
24:91:08:54:ab:c1:50:bd:80:53:5a:97:33:fe:5b:
ec:27:22:f7:e8:89:51:57:ed:b3:d2:40:e1:ba:38:
84:85:c2:64:38:b8:d6:f8:df:96:24:a2:aa:70:05:
84:2b:67:2d:83:f0:c8:85:24:b6:f7:8c:0c:47:ee:
d2:7e:c9:a8:65:ec:c3:2d:b9:95:54:41:02:5e:24:
91:d7:2f:f2:8c:d6:76:29:13:89:01:60:e7:62:b5:
fa:39:b5:44:d9:e0:bb:00:54:94:d5:28:b3:95:0f:
f8:7d:d9:dc:0f:74:fc:f9:b2:39:a2:ac:fc:6b:62:
27:c9:cb:0e:e7:6e:20:dc:51:74:75:a7:da:84:ad:
0c:ad:78:9e:d0:59:ba:25:14:b5:e8:1c:11:4d:59:
80:3b:88:cb:4f:7c:1d:33:05:aa:13:1f:15:0b:1f:
56:d1:cd:96:a1:d7:27:a5:12:22:40:09:a6:1d:1f:
f5:7d:99:c1:11:b4:fb:b6:a4:cc:2f:6a:ef:9f:5b:
4d:bd:31:c4:da:e9:45:98:76:cd:9b:22:58:5d:79:
79:2f:b4:d8:2e:d2:44:ca:a6:9e:10:bb:17:4a:98:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C4:20:5A:CF:26:C7:3D:1F:C9:A5:9B:14:29:EF:57:F8:35:28:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e5895e9-07c3-30ed-b7bd-b3d9e7f7896b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:79:c2:6d:60:fd:d8:6f:08:7a:ef:90:08:95:6b:df:a4:fa:
28:4d:a0:b6:e0:1d:e6:44:00:ff:5f:e5:71:3f:bf:6d:22:15:
7d:3d:86:b8:b3:b6:75:ca:41:2f:09:fc:a3:21:0b:fa:9d:bc:
b3:4a:95:f9:00:6c:d8:a2:f0:2c:51:31:95:ee:ad:c4:2a:de:
11:2d:cb:30:8f:44:86:23:2c:92:f6:13:fa:2e:e3:9d:ab:cd:
0f:4a:94:44:67:12:eb:85:fe:a9:b9:39:4e:8e:22:31:63:ca:
24:6d:fb:1f:8b:73:a9:a6:ed:2b:70:bf:fc:93:53:58:a1:c6:
d8:b5:f1:b1:35:4e:3f:3c:76:10:22:ee:3a:3f:6a:db:87:af:
22:0e:27:d6:3e:e3:7f:f0:fe:a6:de:06:89:8c:02:07:96:e4:
f8:fb:a8:5c:32:28:21:bb:42:1e:17:0d:3d:84:b5:19:79:13:
d5:f0:4c:0a:87:55:b2:1f:3b:e6:ea:18:e8:0d:c4:11:01:f7:
c3:fd:d0:29:eb:ef:9d:f3:c4:38:5e:b8:0e:71:53:48:b3:13:
ea:fc:ae:24:36:a0:e4:dc:cb:61:32:25:b0:14:c9:4a:80:cf:
db:55:dd:7d:d1:9a:a5:fb:d3:fb:23:fa:bb:56:24:ff:5b:6e:
69:ff:bf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:45:50 2025 by rpki-client