Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8485d8aa-301a-3bf7-ac15-360740514ac0.roa
File: 8485d8aa-301a-3bf7-ac15-360740514ac0.roa (raw, json)
Hash identifier: /8HOGNWPXyHCi/y2GpCOrljUvwuei8+LCynngG18+40=
Subject key identifier: 37:19:0F:B3:62:A3:C5:08:BA:A1:31:C3:5E:12:CC:F5:A5:BF:3F:B1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B38BDB1F973985B550AE8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8485d8aa-301a-3bf7-ac15-360740514ac0.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 36632
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:38:bd:b1:f9:73:98:5b:55:0a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=9e12ab87-54e0-4d39-85c7-8b7f6f01445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:e5:a0:2a:39:50:e2:02:34:6e:6a:7d:cf:
d2:fd:b0:cc:d7:f7:ad:0c:3a:05:88:5d:80:7c:ce:
dd:dc:6c:91:94:15:f1:2e:16:0e:8e:8f:83:51:83:
a5:e2:81:d4:de:fa:2d:73:23:68:c0:a7:71:19:61:
36:ef:8b:55:e8:e5:40:26:82:94:74:5d:26:30:98:
fb:06:80:9c:2f:88:57:de:fa:1f:f0:3a:4f:63:c9:
8c:45:2c:3e:92:4d:bb:90:20:f3:ad:26:c8:71:95:
9d:8d:64:6d:5e:97:c2:c8:9e:90:07:68:3d:67:b4:
be:ac:62:70:9b:bc:50:03:ef:69:44:ce:3f:a6:34:
0d:1a:57:69:6e:22:8c:fa:da:f2:31:3d:2f:79:1e:
58:4c:67:3d:cf:d4:93:51:b4:f7:45:30:cc:fd:77:
bd:74:8b:ec:97:71:ed:bd:78:dc:74:3f:11:bb:67:
a2:5d:fb:59:28:80:67:db:47:3c:68:b3:c1:ba:01:
8e:8c:e6:2e:2c:4e:c6:95:55:01:dd:66:7d:fa:84:
c4:4c:00:c2:46:f2:cb:6a:05:60:77:36:2a:78:21:
53:f0:19:f8:12:e0:20:e6:6e:fd:a7:83:d7:a4:90:
32:81:d6:f7:e6:d6:9c:b3:1c:2a:79:11:ec:50:0a:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:19:0F:B3:62:A3:C5:08:BA:A1:31:C3:5E:12:CC:F5:A5:BF:3F:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8485d8aa-301a-3bf7-ac15-360740514ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:de:dc:21:f6:c0:df:65:68:1d:71:b3:f4:ab:ac:96:c6:af:
36:f6:e5:47:49:4e:ac:21:b9:0c:ba:55:0f:89:54:3b:ad:3c:
18:be:b1:c7:ec:97:73:5f:da:84:2a:31:82:c1:ba:60:51:79:
de:82:cc:78:e6:66:73:67:24:db:83:16:60:ab:10:49:cd:2e:
ba:c9:ef:90:6c:b3:3b:cd:15:28:51:4e:ce:2b:b4:95:6c:4b:
05:cb:2e:32:cf:ce:f9:bb:f6:d4:62:67:02:c6:16:30:9f:16:
8d:ed:40:88:7a:8d:8b:65:db:3c:6e:e6:ef:bb:e7:f2:69:90:
da:28:35:b2:73:bb:d3:80:33:c3:e8:b0:e1:88:54:b7:59:a1:
b8:c0:62:b7:58:2c:d3:1a:3b:31:cc:9d:c2:05:e2:0b:3d:6a:
68:e3:fd:03:8f:3d:45:2a:18:34:39:9d:20:26:96:93:57:2e:
c2:b9:c3:98:16:40:2c:bb:f8:9d:a3:bf:7a:09:c2:f7:8f:80:
10:e7:9a:95:df:21:31:38:b6:23:94:1e:6b:17:9d:99:58:dd:
92:21:9b:0c:3a:f5:bb:63:d2:21:4d:c1:37:fc:3f:94:69:51:
50:55:6d:f6:19:22:d6:0c:60:6a:76:42:e2:32:3c:a6:54:50:
6a:1e:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:57:51 2025 by rpki-client