Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/524ed4f5-7ef4-36db-b92c-4c4337b6817d.roa
File: 524ed4f5-7ef4-36db-b92c-4c4337b6817d.roa (raw, json)
Hash identifier: 9FsPw9yTZfJC2W707YVjVjjmlkZkaIbNzsjPQfyFknE=
Subject key identifier: 2C:5D:D3:04:D9:16:71:2E:AA:F3:D0:08:B3:7A:EA:50:3E:53:BC:5D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A3B5A1839CB9C50AF040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/524ed4f5-7ef4-36db-b92c-4c4337b6817d.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 396580
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a3:b5:a1:83:9c:b9:c5:0a:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=8f450aea-3785-47e8-8798-61f089a44a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:d1:d9:fb:c3:9d:90:18:34:93:b0:22:ee:
86:77:07:f1:ae:88:bc:de:36:4c:48:93:3d:04:d9:
d1:68:1f:6b:fe:0c:3e:84:71:28:2e:a2:4f:30:70:
f9:38:b9:20:6a:21:7c:13:62:db:03:8d:1b:36:07:
da:80:55:81:cd:06:cd:13:55:45:5d:57:bb:2a:a4:
89:37:80:51:14:7b:3b:51:24:bd:84:41:3c:23:0e:
38:45:81:ff:cb:91:e0:31:60:8d:3c:54:59:09:93:
93:af:8f:b8:ae:49:b3:11:e4:28:58:a9:d7:94:59:
63:7b:3b:c4:f0:7d:9c:48:23:90:cc:98:b2:16:f8:
74:3e:5a:2b:d6:33:80:f5:64:29:19:60:d7:51:ad:
c6:47:5c:12:aa:54:83:24:38:eb:3f:b4:ff:15:c5:
1f:58:86:86:c3:2d:d8:fe:7e:5d:60:e6:8c:49:cc:
aa:08:4f:c3:ec:2d:bf:45:39:ec:36:3f:f0:b9:86:
0e:80:09:24:9f:1a:73:f4:35:03:29:af:62:1b:77:
c0:92:b6:66:51:1d:e6:12:2e:f2:c6:b4:9e:d3:4e:
12:fe:e9:a3:aa:35:92:96:f1:95:47:b6:2e:f3:5e:
e7:85:46:b5:03:e8:83:08:96:e1:a2:20:13:70:11:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:D3:04:D9:16:71:2E:AA:F3:D0:08:B3:7A:EA:50:3E:53:BC:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/524ed4f5-7ef4-36db-b92c-4c4337b6817d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:a7:26:ff:c3:3e:9c:f9:a6:61:ca:f1:bf:a4:84:15:66:2f:
5b:d6:0e:4c:4b:df:86:f2:37:14:8a:34:ba:19:57:0d:0c:89:
0b:91:be:68:0e:4b:48:9e:a1:c3:ce:99:d9:3a:10:2d:3f:35:
a6:40:3f:49:e4:06:46:7a:fd:59:48:97:23:b8:29:2c:2e:f0:
82:3a:26:22:b7:44:6a:ba:69:36:80:2a:9e:3d:b6:68:6a:44:
fa:28:fe:53:e6:8b:44:c1:59:7b:0a:b8:1a:62:3f:d4:b4:dd:
5b:29:e5:61:27:0e:a1:6e:09:b0:99:22:5f:52:54:cb:09:a8:
4c:7d:0a:cf:24:9c:d1:f5:5f:ec:b8:fc:4f:45:bf:1d:b0:aa:
50:04:6a:80:8d:90:a5:a7:2c:b1:30:6a:a7:83:d6:e9:a0:6f:
05:ec:5b:bf:92:05:db:58:76:ba:a1:2f:56:d5:f7:15:96:19:
32:eb:f1:53:75:e9:a9:a4:a2:75:11:cc:47:40:91:fe:9f:f6:
c4:87:a0:5b:45:9f:b3:c4:6f:e0:fc:f2:f7:d9:b0:fa:bb:f5:
1e:b7:69:59:0e:53:bc:dd:14:ff:ed:5e:37:1e:58:5d:19:09:
01:c8:f9:8e:3f:9e:7b:ed:2c:01:71:c0:75:59:90:fe:2d:6c:
a3:16:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:52:03 2025 by rpki-client