Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8644eaaa-633c-3556-947b-d6f7912835f5.roa
File: 8644eaaa-633c-3556-947b-d6f7912835f5.roa (raw, json)
Hash identifier: naBW0nwE0MKJ0QDCSkgmLiFcrsrJ3pas0xmzoUYIcBI=
Subject key identifier: D1:D6:AB:74:B6:61:20:C6:96:2C:DA:93:C4:F4:68:B2:BB:C6:8A:0A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848854B38F1F1C02591D79D7680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8644eaaa-633c-3556-947b-d6f7912835f5.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 396603
IP address blocks: 192.42.175.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:38:f1:f1:c0:25:91:d7:9d:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=30b6eeb0-7699-4f57-9ba0-f5b409d3bc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:11:28:4e:77:6d:a6:f7:8f:68:13:2e:bc:
24:fb:7c:0c:8f:7b:dc:31:09:28:3b:7f:73:1e:2f:
1f:c7:8c:07:ae:43:1d:aa:89:46:fe:b2:59:5f:ee:
27:c3:f3:c6:cf:02:92:95:52:f0:e1:a4:d9:44:9b:
da:b1:72:16:4a:a6:e6:4e:9d:4b:0e:cd:88:2f:d7:
be:fc:69:97:e8:af:cb:0e:81:02:8e:35:fb:33:b0:
77:25:6e:35:24:cc:27:9f:df:b7:df:99:99:7f:ec:
37:a3:53:43:d9:77:24:0b:04:dc:89:30:aa:7e:40:
8b:24:b5:c1:ee:d4:f0:b9:e7:49:8c:c0:a2:ca:5d:
e4:d8:12:69:2f:bf:6b:4a:db:77:69:d3:eb:5f:f1:
f0:62:57:f2:e7:e2:8c:ac:c8:85:48:08:9f:66:0f:
eb:94:5b:05:78:6b:ce:41:63:76:e8:8b:62:cd:b5:
ea:16:01:83:08:98:96:20:90:7a:94:e5:33:6c:ee:
71:75:66:44:6c:40:2d:6e:fb:5c:48:1d:3b:e3:b9:
a5:09:54:78:40:25:8f:98:98:1e:ec:3e:cd:bb:d4:
63:72:0e:cc:29:a3:44:04:16:fc:ae:1b:d1:9b:2b:
e7:60:db:26:f6:60:d1:60:49:0c:be:4a:09:b0:e5:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:AB:74:B6:61:20:C6:96:2C:DA:93:C4:F4:68:B2:BB:C6:8A:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8644eaaa-633c-3556-947b-d6f7912835f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:77:f7:d0:a8:8e:d3:9c:1d:4e:a7:ee:13:14:25:45:68:3b:
8b:d3:c6:3a:21:f2:9d:79:91:fb:ed:0b:b4:a7:41:06:ba:a6:
d5:d2:91:8e:60:b5:47:ed:7e:dd:e2:ba:b3:72:d7:4f:0b:03:
87:c5:a3:09:08:12:60:17:cd:f1:2d:80:0f:b9:69:a4:1a:35:
42:96:a9:94:3b:e3:f9:d6:6d:b7:db:91:b9:a1:28:ca:49:0c:
e5:3c:ad:5a:70:69:d9:75:91:f5:13:b3:5b:21:d2:26:e1:4f:
b3:4f:76:59:a0:d0:74:3c:ee:02:5b:30:e4:eb:bc:aa:c9:c6:
bb:50:84:ba:99:34:bd:f1:be:ed:ed:94:86:7a:c4:4a:a4:7e:
12:3c:36:6a:b7:f9:4e:16:5d:0e:ba:f3:f4:c6:68:f7:7d:c0:
4a:b6:37:a6:cb:0d:cd:95:98:67:a3:52:ea:08:05:a1:3f:b1:
af:85:8b:76:11:3e:10:4e:3c:fc:69:ad:94:2f:eb:e1:61:85:
32:df:a0:20:d0:ee:cf:65:04:7a:de:fa:10:a7:4d:29:d6:fa:
e0:cb:8f:42:63:33:a2:56:f7:9f:0a:ea:79:e7:ab:bf:4a:3a:
4b:28:f4:9c:be:d9:40:ff:15:53:2b:52:4f:84:e5:b3:23:f8:
69:c1:b9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:11 2025 by rpki-client