Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52974fa8-c594-30a9-9d44-e92edd0e1f6e.roa
File: 52974fa8-c594-30a9-9d44-e92edd0e1f6e.roa (raw, json)
Hash identifier: 4DA9pzPUzqqVLp70R+U8RtaDqSnVV7BZvZ9vI4uV95Q=
Subject key identifier: 00:03:76:C8:6D:14:B3:CE:88:3E:36:53:6A:AB:E4:BA:1D:5E:74:FB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3BC9D19817DB06F4EF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52974fa8-c594-30a9-9d44-e92edd0e1f6e.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396574
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3b:c9:d1:98:17:db:06:f4:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=0f7fc5b2-f28b-488d-9653-0a6018a2198f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:9f:88:5c:4b:63:5c:5a:18:38:9e:c4:02:
df:d7:15:03:72:c8:93:e5:7a:50:a9:6d:b2:c9:12:
d9:80:1d:d6:15:34:1c:53:b5:2c:26:9d:a2:6a:a3:
77:a5:ad:c0:43:d7:1f:e5:d9:3b:24:c5:aa:f2:71:
41:3c:4b:54:0e:ec:93:17:53:ae:c8:b9:3d:71:5a:
5d:0c:d8:1b:67:11:4c:59:2a:5c:47:d7:39:c5:f1:
32:de:cf:d3:6c:86:d4:ec:92:b7:ea:de:d6:d1:18:
f1:c8:14:0e:10:6d:fa:3f:f2:9e:db:90:65:b5:a0:
7f:71:40:88:c6:65:6f:5d:45:1d:e9:4a:a7:c4:be:
2e:ef:1c:cb:d0:a7:32:41:57:53:7e:f8:39:f3:41:
31:32:47:51:2e:ec:27:26:a9:cc:f6:26:b1:81:b7:
8b:97:c4:01:e9:0c:bb:05:c2:9f:7d:8f:a6:c1:0e:
86:82:68:44:a5:b6:dc:06:c5:63:62:36:75:48:55:
89:78:65:f9:cb:aa:0a:da:d1:bb:f6:bc:8a:b9:99:
fa:bc:72:f6:df:6b:d2:67:4f:b4:ed:c1:b6:36:9d:
b7:0e:4f:49:98:87:48:e7:1e:3b:bb:a6:68:2b:2f:
54:54:1c:01:0a:25:49:15:d5:d9:d7:8a:f9:f8:b2:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:03:76:C8:6D:14:B3:CE:88:3E:36:53:6A:AB:E4:BA:1D:5E:74:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52974fa8-c594-30a9-9d44-e92edd0e1f6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f9:6f:cf:3d:6e:b1:73:d3:e0:c2:40:57:0c:3c:39:63:d6:
24:e3:25:70:36:f1:27:42:7b:ff:f2:ce:fb:47:49:14:f8:43:
f3:a0:35:df:f8:59:60:d5:2e:12:35:7c:0a:65:11:63:cd:41:
0e:38:7a:8e:15:82:a7:1f:8e:ba:bd:2f:2f:9f:f0:6e:da:ac:
7d:34:cc:b2:97:6a:31:38:e8:5f:6c:b5:ea:ee:46:b3:ba:ea:
0c:ba:3d:84:0c:aa:3e:83:04:2c:2e:f1:29:da:d3:ed:57:cf:
78:b0:c9:27:e7:73:d2:67:45:4a:47:c2:fc:89:72:b0:60:25:
d7:25:e9:61:e7:72:01:1a:80:bc:c3:25:33:8d:d8:f4:e0:4e:
17:31:0a:f3:85:96:d4:49:84:3e:d8:dd:32:4d:15:bf:b7:bb:
f3:76:22:0d:0b:44:93:09:dc:83:c1:c4:80:bd:d9:d6:a2:2c:
01:9d:74:02:95:07:89:8b:3d:27:93:cb:fb:b8:4e:3c:97:cf:
2d:78:a3:e2:8a:d8:f8:92:f7:09:0e:ad:f7:3a:27:fd:c6:de:
19:19:c8:da:64:d9:d5:77:95:6c:72:98:fd:b9:29:d4:e3:4a:
90:49:dd:e1:4e:ba:72:ed:c5:05:34:25:65:20:4e:1c:ff:05:
ca:55:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:14 2025 by rpki-client