Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b4e509-3817-3ae3-bd43-c133943fcdae.roa
File: 63b4e509-3817-3ae3-bd43-c133943fcdae.roa (raw, json)
Hash identifier: W5zibHhZVJf9up1f0nX6nbJOd/mcgGF3deJ/ovTozq4=
Subject key identifier: 69:6E:E9:83:D4:2F:AE:28:33:AB:7B:49:A5:E4:E0:40:2A:B7:52:4A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3D3F498FF0E81D2FB118
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b4e509-3817-3ae3-bd43-c133943fcdae.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 36622
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3d:3f:49:8f:f0:e8:1d:2f:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=e35dd2ac-fa6b-4dfc-aeaf-2d904964dcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:0c:ae:ed:09:b3:8e:23:30:82:82:ba:4d:
07:13:fb:a9:07:3e:16:16:1e:6e:11:ae:2f:3b:ee:
f6:bd:32:e1:7d:8a:25:de:c4:ca:99:45:e2:5e:9c:
7a:67:95:47:85:9a:95:02:24:2c:83:ad:2a:78:b3:
a9:24:75:8b:6e:b7:96:b6:22:d4:a8:d3:a0:c8:be:
26:53:36:42:ea:bd:62:2b:bb:29:5e:98:0b:36:7a:
76:ed:0d:d2:8a:8d:c1:bf:1e:c2:4e:b1:dd:5a:f1:
b6:9f:7d:4c:25:77:b6:34:ab:e9:ba:4b:89:76:1f:
78:ed:70:02:4a:7d:d9:a5:48:f7:6d:1b:99:0d:b3:
7d:10:b2:cc:df:f1:21:57:b9:96:79:1b:29:1c:43:
04:f3:7a:56:f8:5f:4f:36:6c:1b:40:a5:3b:61:06:
54:6a:b3:d1:b4:39:85:ac:48:4c:68:f9:75:e8:65:
00:cc:3a:66:97:93:c7:62:ee:c2:65:e2:0e:b2:76:
10:b1:c0:fd:d2:c0:9b:21:f5:cd:ad:ed:0b:af:b3:
50:fd:3b:87:9b:5c:42:35:fe:85:ce:70:57:84:6f:
79:b7:7a:15:57:cc:a8:d3:c4:09:45:f7:b2:ea:20:
7c:a9:ee:a2:7a:65:31:a7:56:be:a2:2d:e8:91:ac:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6E:E9:83:D4:2F:AE:28:33:AB:7B:49:A5:E4:E0:40:2A:B7:52:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b4e509-3817-3ae3-bd43-c133943fcdae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:eb:b3:1e:76:5a:b4:d9:d8:b9:61:67:55:a3:a5:7d:f0:19:
7e:b0:b9:52:01:9e:12:1a:e8:52:03:ef:e1:13:2e:43:43:21:
03:54:00:ad:c8:75:17:0e:23:e1:3c:4c:7d:fc:e0:c9:8a:ea:
83:d9:d9:4f:3c:4d:ad:8a:cb:95:21:b9:b6:85:90:71:4b:4d:
d1:f3:25:1b:94:73:e6:5d:a1:c1:e5:6a:02:a8:6a:6b:b5:22:
78:e7:e0:20:af:b0:54:a6:0f:2f:f6:ea:79:27:75:b3:25:6c:
85:f2:5a:c2:bc:35:b5:50:81:1d:3c:a1:d2:c9:c2:0d:12:af:
e7:7c:8c:b9:bb:b2:86:af:ff:8a:d6:18:f5:6b:34:0c:0c:c3:
d6:ea:0b:c9:0c:c0:eb:35:52:ab:3e:2c:0b:f7:66:9b:c6:bf:
16:37:6d:c7:eb:b2:14:9d:3c:4b:11:cb:73:51:71:ae:b1:f8:
e1:0c:8e:3e:0f:4f:4f:54:df:7e:9a:7d:39:7d:d6:b6:28:df:
ea:e8:c3:60:74:15:ea:30:10:d6:27:92:27:72:7b:d2:d6:d9:
4b:1d:57:84:36:be:3e:bd:c1:1a:4f:1b:df:27:4f:56:e4:8c:
96:ae:5e:ee:3b:84:34:7f:99:8b:e8:51:c3:9b:5c:6f:a2:cd:
70:89:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:30:05 2025 by rpki-client