Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/810ea3aa-efb7-3c36-9cff-11ec1fbefbc7.roa
File: 810ea3aa-efb7-3c36-9cff-11ec1fbefbc7.roa (raw, json)
Hash identifier: ZxuFcuUV1mk0lbA6+6RquRegynzQzkASJ0ZhVJgW7ck=
Subject key identifier: C4:1E:FA:42:6C:C3:DD:A7:80:F3:BB:E9:67:AD:2F:F0:B2:3B:CF:E9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5D9AB550EE147A1AD4D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/810ea3aa-efb7-3c36-9cff-11ec1fbefbc7.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396826
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:d9:ab:55:0e:e1:47:a1:ad:4d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=5d39dbd6-3968-4d15-a75d-9d3cb1aa09cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:51:d2:39:6e:fc:fc:8d:60:bc:06:79:56:
28:90:86:7c:3a:37:57:80:8b:46:99:8d:63:d2:a5:
d4:f7:39:4f:cc:c7:d8:78:84:98:28:21:d7:ba:51:
4e:a0:28:06:8d:c0:90:88:ed:7f:b9:38:78:c0:cc:
95:64:37:01:b4:c2:d9:20:21:ec:16:9c:d7:d2:db:
d3:63:b3:f2:ea:d1:d4:48:8c:3f:f9:d4:2c:51:11:
74:1b:0f:46:12:f0:fe:1a:96:c9:d1:58:77:91:02:
69:17:93:63:79:08:da:3b:4f:1e:ce:22:99:1d:ba:
a6:a0:44:68:b9:61:21:01:f7:69:ce:25:aa:e4:a3:
42:6d:7e:fe:2f:a6:b9:ad:ac:dd:99:93:28:cb:c9:
a2:80:6e:ed:ae:e2:3d:eb:ee:92:50:94:a0:73:6b:
30:2b:65:07:09:3b:f6:ea:b7:2a:4d:65:d0:f4:75:
1a:6f:70:d7:1e:d2:16:bb:50:db:c9:f9:58:90:b8:
c8:a5:b6:5c:2a:c8:c2:5b:24:cb:a9:30:06:5f:ac:
99:36:19:da:e1:85:85:f9:70:40:af:d4:46:bb:0e:
71:98:b8:68:3d:ee:b0:e1:5b:0a:5b:5b:77:a3:86:
cc:ec:ca:15:38:7c:ec:c8:d3:54:20:ba:f8:06:5e:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1E:FA:42:6C:C3:DD:A7:80:F3:BB:E9:67:AD:2F:F0:B2:3B:CF:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/810ea3aa-efb7-3c36-9cff-11ec1fbefbc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:79:67:32:73:54:72:09:11:1c:69:79:31:0d:de:cc:55:a8:
64:c3:71:57:5d:62:92:39:8e:f8:e6:a4:61:7c:cd:ef:94:73:
e9:1f:6b:72:bc:68:dd:2e:cb:97:e8:5f:e7:91:e7:b6:77:6d:
8b:fa:ec:64:a0:e0:92:2d:a3:d5:bf:18:8d:94:67:c2:61:58:
87:74:74:6f:aa:8a:52:89:c5:61:41:31:87:23:64:ae:5e:da:
24:41:e3:83:92:01:84:a4:75:92:8d:de:ea:a6:d6:80:a9:c0:
72:dd:48:a3:b6:59:55:5b:4c:76:71:88:d5:26:71:51:ec:d3:
3b:5a:09:50:95:ce:74:30:52:40:a4:e9:72:14:a3:7a:64:91:
36:05:20:99:ae:24:2d:2b:0f:12:b8:d3:b2:34:f7:7f:fa:21:
43:66:fc:da:46:bc:93:98:fa:78:0e:ea:86:88:58:3c:ba:7a:
96:01:48:a8:b3:bc:4d:2c:a0:a6:83:fb:b4:85:28:5d:43:7d:
29:f6:6c:cf:a7:c0:27:66:d4:5d:9c:5e:46:53:90:d3:30:7d:
a7:a6:b3:be:22:f5:cc:db:a1:8f:73:86:fb:b9:ae:78:b6:7f:
ce:89:58:b3:95:d8:27:0a:20:61:55:8e:a0:9b:15:90:6e:c6:
a7:23:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:30:24 2025 by rpki-client