Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa
File: 4f517faa-b251-3707-a347-8a25c9ff0965.roa (raw, json)
Hash identifier: 5SVBh+SjpFOuWEr/5U7rpC73oFEDSRq25BeqEm/RR4Q=
Subject key identifier: 62:48:7E:D8:91:12:4A:E0:6D:65:9F:CD:5A:AF:DD:E9:5E:51:62:C4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B7843D65D6172E1FBA418780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa
Signing time: Thu 30 Jan 2025 13:46:16 +0000
ROA not before: Thu 30 Jan 2025 13:46:16 +0000
ROA not after: Wed 30 Apr 2025 12:46:16 +0000
asID: 36631
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:3d:65:d6:17:2e:1f:ba:41:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:16 2025 GMT
Not After : Apr 30 12:46:16 2025 GMT
Subject: CN=489a0a8d-0c28-459c-9592-d1d9b32ba9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a0:bf:37:a0:c6:fb:87:50:a2:7f:c8:1c:99:
66:79:44:76:89:0a:32:39:e8:16:6c:09:4b:75:70:
49:88:17:a2:ba:db:fb:7d:06:b9:f9:7d:9a:cd:3e:
14:29:5c:13:75:19:e5:f0:51:87:ba:cc:6e:d0:81:
53:15:47:34:40:2a:7c:14:90:99:fe:53:6a:4c:3b:
04:fb:32:82:73:54:8a:df:92:f1:24:5c:97:26:91:
a3:65:bc:21:60:23:5e:96:cd:45:b4:7f:60:d8:ff:
28:70:2e:e0:4d:62:cc:66:34:df:7d:99:39:60:70:
54:62:86:db:b4:64:82:ff:01:3a:73:99:7e:5a:42:
47:51:b6:78:0b:b7:8a:c5:23:57:55:c1:c9:4a:66:
5d:87:a9:fb:cf:7d:57:f9:b2:dd:be:13:62:21:44:
81:c6:b3:74:c1:d4:77:5d:f8:a1:73:29:c1:5c:a8:
f4:4b:56:e5:e3:9e:fb:e7:db:4d:0d:de:9c:b2:1b:
6b:be:d1:2e:d4:54:d2:1d:b2:2f:b3:d9:27:80:07:
20:19:75:a1:9e:fb:48:1e:55:52:73:b5:ff:2a:aa:
88:ac:9e:68:33:47:02:9b:f4:d1:ee:cc:88:63:c6:
10:c0:ca:2d:a1:21:3c:52:47:9e:54:3b:3f:b9:7f:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:48:7E:D8:91:12:4A:E0:6D:65:9F:CD:5A:AF:DD:E9:5E:51:62:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d4:d8:2d:31:80:25:3f:dc:d8:84:03:d5:e3:06:77:a0:50:
b1:a9:88:96:88:37:62:3c:61:da:22:71:50:a2:7b:e8:e9:0d:
80:e3:7c:49:05:0b:e3:ed:e8:fb:f4:b2:0f:09:ba:17:5b:ae:
17:83:4b:68:36:79:13:61:49:8f:63:92:67:70:86:99:e9:16:
97:41:d8:14:3a:4a:eb:40:8f:a8:ac:61:5e:85:29:b2:3c:b9:
b9:e3:2f:bf:dd:78:65:b6:65:fe:04:62:86:1f:74:57:72:91:
60:c2:b7:86:db:6d:84:1f:fd:af:f9:fd:e3:7b:e0:ac:fa:d4:
55:f1:ff:aa:db:ef:15:a5:c5:2e:9c:a6:0b:2f:c3:27:0b:31:
43:ea:16:d7:3a:08:60:63:b6:cb:b5:42:c7:e4:26:5f:c0:db:
ea:2b:12:15:35:b8:09:65:03:6c:44:a9:ad:0f:20:67:c7:6c:
4f:3b:cc:20:24:91:07:78:76:e3:0f:59:4c:06:7a:5d:21:5c:
f3:ff:18:c9:52:e2:27:a0:60:15:c8:55:c4:bc:9b:78:57:44:
21:d8:38:b4:bc:98:f5:ba:a8:7b:c9:ea:4f:f1:02:d3:db:1b:
ae:b9:d4:9d:2e:e3:a8:de:13:47:0c:dc:5e:1e:de:4d:36:50:
9a:69:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:57:44 2025 by rpki-client