Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fab7b0d-1dc8-3923-a899-cde989f07591.roa
File: 5fab7b0d-1dc8-3923-a899-cde989f07591.roa (raw, json)
Hash identifier: no+jANAiaRZdU4uoqS4vDWzCD8+WcG8LRH3Cjd208V4=
Subject key identifier: CA:D3:66:C3:55:75:5B:F0:4F:D8:E4:6E:F7:16:14:7D:BE:ED:70:1D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A3C5EAB172077D7E8E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fab7b0d-1dc8-3923-a899-cde989f07591.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 396597
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a3:c5:ea:b1:72:07:7d:7e:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=e672cdac-dcca-4fe5-b848-4e6ad0330d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:06:a4:c8:ba:86:28:61:e8:86:4f:38:ae:
7c:f2:f4:d3:ba:ef:7a:33:9f:6d:d8:9f:e2:79:70:
13:34:2d:c1:cb:ec:04:85:d2:62:e4:5f:30:4e:47:
93:d4:89:5b:d1:6d:cc:f6:9a:04:a5:48:4d:60:43:
3f:2b:66:dd:11:b7:cc:9a:b7:05:81:cf:95:fb:02:
04:14:3a:ff:d5:bc:1d:2a:e1:a3:e2:07:ae:ab:1d:
d8:5a:a1:f2:9f:7a:8d:87:e0:1e:2f:20:60:41:c6:
a1:1a:6b:1f:d9:12:c5:e2:1f:ea:bf:76:6a:41:c9:
46:74:22:65:10:ee:c3:31:e1:43:e7:21:1e:08:51:
b0:56:39:6f:3d:e4:94:cc:1c:e5:87:3c:14:0a:2a:
bc:dc:69:97:37:35:08:4a:ba:9e:58:9b:db:dd:89:
c4:96:83:50:cd:26:e3:09:78:4f:77:43:3e:ca:57:
8a:48:db:9b:94:6a:ea:52:04:87:ad:e7:12:3d:95:
85:fe:d7:d0:55:ca:16:8b:24:9a:c6:73:96:12:8e:
0a:16:40:34:16:3b:a9:18:b9:dd:f5:d5:25:70:93:
04:3f:44:f0:16:f9:f2:d8:27:c4:18:cc:d5:02:83:
55:b7:6e:c8:24:70:da:d2:09:d9:cc:18:63:3e:b8:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D3:66:C3:55:75:5B:F0:4F:D8:E4:6E:F7:16:14:7D:BE:ED:70:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fab7b0d-1dc8-3923-a899-cde989f07591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:84:9f:2f:b6:f7:d3:a3:a4:32:43:24:af:04:70:76:d7:fc:
92:77:21:0c:0a:e0:96:10:dc:9c:12:ec:44:29:e6:83:ba:0e:
bb:db:13:89:05:ee:3d:d7:6f:f8:f8:7f:ec:b4:1e:f5:a5:58:
d4:e0:c5:dd:95:34:c2:59:43:d5:cc:c7:cc:f6:26:93:92:0a:
13:89:56:9e:b9:37:50:02:36:b7:3d:17:67:07:d8:0f:d9:86:
38:3d:09:b1:49:7c:61:9a:e4:99:7f:db:fd:82:fd:7e:94:f3:
5d:ad:f5:6f:2c:14:5e:86:18:cd:8d:40:b3:ba:44:10:20:b3:
66:30:54:a9:d4:c8:94:ca:c6:39:7f:6d:83:ef:36:a9:05:46:
74:17:3e:77:1d:cb:33:21:ff:fb:25:f1:de:f3:20:10:b4:2b:
af:a8:5f:72:6d:e4:14:3f:b2:45:0f:26:56:03:da:8a:2a:e3:
af:e1:e3:4e:e5:1d:77:32:87:9c:7b:de:fd:2d:8e:d6:0d:e7:
25:03:27:8f:5e:84:b8:4b:ee:c3:27:24:d8:44:0f:57:81:b2:
3a:82:08:dd:0d:50:2a:25:a4:b5:76:c6:90:de:9e:92:08:cf:
3d:bb:9a:3d:db:66:d9:04:bf:bd:27:e6:04:f2:ce:db:46:56:
8c:35:fc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:45:46 2025 by rpki-client