Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cf5ca55-bd41-37fd-b2b5-6740acc4dc7b.roa
File: 7cf5ca55-bd41-37fd-b2b5-6740acc4dc7b.roa (raw, json)
Hash identifier: fFcevNqBum8inHMfrK3ehTSueOVzQ7XfaYH4W7vir1Q=
Subject key identifier: 39:FA:F1:5B:03:E0:D3:55:03:AA:C3:D2:31:82:C1:C0:50:5D:46:38
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A99689900099CD162280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cf5ca55-bd41-37fd-b2b5-6740acc4dc7b.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 396610
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a9:96:89:90:00:99:cd:16:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=ccb08a87-1211-43aa-bbd9-cce83306eb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:4f:e8:a8:7b:b7:ed:50:5d:36:36:da:8b:
b3:0c:19:c2:7b:d5:6b:5c:95:60:88:a7:53:88:f1:
a3:1b:e5:c0:f2:87:23:02:e7:8d:cc:2e:83:9c:ca:
fa:3f:e7:ff:7e:1a:f7:24:a9:ff:4a:2b:9c:c3:3d:
1d:3c:38:bf:2e:bc:07:08:d4:ba:35:2d:c5:ec:ea:
07:a0:32:c2:d8:85:69:23:5d:5c:e5:e5:52:3b:e2:
0d:6c:df:de:4d:d8:86:9b:22:7e:fd:55:fd:3e:54:
41:32:a9:e6:9f:99:8c:ab:1d:5a:0f:9a:70:1f:73:
16:ab:3b:f9:ee:ef:6a:98:42:56:e8:55:c3:ad:07:
c7:5d:16:83:46:f0:fb:38:35:36:ec:d4:86:85:01:
1a:27:36:ac:86:53:4d:9e:23:06:45:b1:fb:80:21:
78:f1:17:f8:97:ec:ca:d1:ca:a4:f1:83:71:8d:d6:
a8:96:1d:f8:6f:d1:67:78:79:d9:f8:f4:fc:e6:6b:
18:7f:0a:44:c6:2b:01:04:81:93:c7:13:1a:68:30:
af:2f:d2:30:c4:61:34:33:80:2a:62:99:54:64:4a:
48:7e:d8:b7:64:f4:71:a7:5a:5a:77:fb:7c:04:69:
6c:3c:d6:53:c6:16:f4:61:10:d4:e9:56:35:ff:c8:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FA:F1:5B:03:E0:D3:55:03:AA:C3:D2:31:82:C1:C0:50:5D:46:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cf5ca55-bd41-37fd-b2b5-6740acc4dc7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:fb:88:ce:07:ee:a5:bb:f9:a7:8b:be:dd:18:35:3d:22:ca:
06:ae:69:7e:02:eb:26:1f:ee:05:5e:9f:73:f7:e0:c1:0b:21:
0b:95:e7:be:ca:05:88:8e:b1:0e:a0:ee:75:9f:be:13:7d:7b:
bc:7c:7c:cf:27:bc:22:d5:7a:50:e5:d0:20:ae:e4:d3:03:22:
be:24:07:5f:5d:42:dd:15:4f:18:44:bc:5f:2a:05:0e:c4:1d:
d5:98:8e:ce:df:dc:09:d1:f1:37:42:59:f6:ae:e4:81:54:72:
87:cc:70:a5:27:46:8e:11:29:0e:23:bc:6f:49:cd:9e:5a:31:
90:6d:41:86:32:85:35:79:f3:d1:ac:78:8c:1a:48:10:4c:1e:
9f:44:9f:47:d5:0c:98:27:16:27:5f:84:39:1a:c2:a0:ae:fb:
2c:81:c0:66:8f:85:af:d2:56:d1:18:1e:54:4e:c3:34:25:2b:
e5:fa:f1:ac:82:a3:73:1a:c6:28:0c:b1:46:4b:5f:6f:41:3f:
c9:81:f5:c6:83:45:fb:01:f2:b9:8c:b2:8d:11:9c:19:86:e1:
24:dd:05:e3:51:37:ba:e9:61:19:df:92:ef:6f:1e:59:b1:4b:
18:ef:c0:29:de:c1:61:3a:01:be:7b:2b:b9:7b:90:0d:69:29:
97:92:03:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:02:27 2025 by rpki-client