Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d2e73b9-0993-3fd3-9257-e690d6820056.roa
File: 7d2e73b9-0993-3fd3-9257-e690d6820056.roa (raw, json)
Hash identifier: 1nUCRsWMq+Rk1xc81cO25FTnL/xwvF3fgoYD4LuVBbI=
Subject key identifier: 50:22:0E:64:87:25:B9:E3:E3:6E:A7:13:92:0C:52:33:4A:5D:06:57
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A2B5C72933CA9A303A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d2e73b9-0993-3fd3-9257-e690d6820056.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 20172
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a2:b5:c7:29:33:ca:9a:30:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=1a088ffd-d14c-4866-97de-0b61c1c92e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:8b:3b:d9:97:13:30:99:02:0f:38:32:4d:
fa:c7:ff:eb:a4:c3:c3:5f:f3:b2:38:23:b6:58:6b:
08:5e:b3:d5:9e:d1:02:11:a5:31:94:b2:81:d6:3d:
c9:ae:55:c3:c1:78:f2:6d:de:51:3e:a9:65:71:51:
ce:d6:4d:c5:1c:5f:63:cb:4a:56:f7:f7:12:63:13:
c2:6c:1c:d1:92:0f:b7:1a:fa:8c:82:0c:08:5a:68:
24:88:fa:65:be:26:a6:e2:86:2c:94:d2:59:3b:ef:
38:be:74:b3:b7:5a:b0:8f:35:04:fa:bc:c0:af:f4:
bd:16:0b:fd:b9:19:01:5f:71:ee:59:d8:30:12:3e:
9a:0a:54:e6:e6:6c:66:ca:ce:16:fb:af:54:f6:19:
81:77:67:ec:1b:af:ff:e9:5f:f4:b8:bb:3d:40:04:
97:84:18:c7:fc:25:8e:d2:b0:ad:15:3b:e0:57:9e:
95:9d:bf:e9:73:69:8f:4b:0e:a2:e4:23:11:65:86:
1b:e2:67:cf:40:fb:1c:a8:6e:c5:fc:13:d5:56:a9:
0c:23:0a:9b:e1:f6:5d:78:8e:2c:5b:77:f8:f9:fc:
fb:d3:3a:32:0e:46:7f:6a:45:04:4c:74:1b:1b:7c:
de:76:4d:7a:3f:8d:6b:09:1b:d1:22:51:a8:9a:1c:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:22:0E:64:87:25:B9:E3:E3:6E:A7:13:92:0C:52:33:4A:5D:06:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d2e73b9-0993-3fd3-9257-e690d6820056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:14:43:47:25:9c:f6:d8:fa:98:96:44:7c:c1:0c:5a:69:1b:
84:9d:c8:93:39:91:86:df:52:c9:29:23:81:d2:03:82:73:f7:
ab:d2:bc:39:f7:31:66:e7:e7:29:0f:fc:a7:b0:f4:95:6b:5f:
b0:1d:ac:6f:47:48:87:06:8f:03:75:e0:17:06:e1:ca:58:78:
0f:1a:30:b2:fb:f9:08:69:8d:e8:98:e1:e1:13:dd:7d:2e:b3:
9b:16:18:4d:f2:61:a6:7d:e1:2a:c2:32:65:c4:79:69:af:b0:
61:0a:0e:bc:a7:11:37:ea:78:b4:fb:cc:a7:44:c9:aa:d3:b1:
55:2c:d7:2c:dd:d2:a5:62:04:e0:e1:14:67:9a:a0:e4:21:13:
dc:69:d8:3e:39:c7:94:1c:e9:e8:6a:5b:df:6b:da:82:ea:3b:
fa:89:e3:c3:8f:32:d2:66:19:9e:cd:a7:4f:07:20:24:31:19:
42:8f:7d:cd:bf:89:2f:a6:0f:19:5d:f5:11:5f:55:2c:70:a0:
53:7a:5a:0d:5f:34:7b:5b:3b:96:e3:07:25:e9:a9:75:c0:9f:
ad:b3:85:2a:b4:b2:9a:c3:9a:4a:78:34:0c:45:76:3a:26:07:
cb:8d:f2:bb:44:5e:82:a6:4d:8a:e6:1f:04:22:98:8d:34:76:
11:79:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:51:55 2025 by rpki-client