Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889e3dbd-e927-39dd-aa9a-08263834c34c.roa
File: 889e3dbd-e927-39dd-aa9a-08263834c34c.roa (raw, json)
Hash identifier: SXQUGeG/CqU9Jowx0PEFLrE0SnPhbZ/ExVSNGfz0dv8=
Subject key identifier: 7A:92:24:4C:84:61:19:E5:81:A5:AB:C8:E7:2B:C4:12:E9:12:45:CC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5D6A7E8DC0447F7CF6FC4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889e3dbd-e927-39dd-aa9a-08263834c34c.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 397204
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:d6:a7:e8:dc:04:47:f7:cf:6f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=15f9320c-a2d2-443b-8108-b948fdc6605b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:86:f0:4d:ed:e3:f4:04:8b:6d:ff:3d:3d:
71:0f:90:2c:04:e4:d4:9f:53:c8:2a:71:dd:95:f5:
a3:31:bd:d0:1e:99:84:91:5d:9f:68:be:0a:bf:a2:
a7:e9:aa:db:b4:4a:b7:47:ca:7e:62:08:2a:a1:5b:
53:f7:fb:bf:b6:e3:cb:76:36:93:2f:e7:f5:de:c2:
11:a9:9f:5c:02:65:79:0c:c0:3f:6d:a7:e1:0b:ab:
d1:cf:98:a1:a9:6b:d5:9f:41:10:b7:6f:ae:1c:28:
8d:a6:00:c9:f8:84:f1:46:78:1d:43:1c:bf:87:63:
cb:da:ac:2e:f0:9a:40:1a:34:e0:60:d2:dd:5d:2f:
a6:e1:e9:b3:2c:2b:7e:2d:3f:2b:ff:3b:4d:96:0a:
58:60:62:38:8a:77:7c:d1:3c:d1:c8:ca:e3:ab:40:
23:d0:d0:c7:06:b2:70:47:f6:ea:ee:db:f0:6a:f9:
e7:87:7f:1e:9e:ab:7d:38:9f:78:40:e1:6a:01:b6:
37:1d:0c:b2:f4:d1:bc:cb:9e:bb:67:43:c0:36:a2:
be:79:6e:b5:e3:f8:1b:82:92:f0:b0:57:7a:34:45:
b5:2a:80:81:de:b4:b3:ef:fe:6a:07:19:5d:45:e4:
62:a6:84:1a:97:aa:08:d5:a5:cf:29:f5:33:da:29:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:92:24:4C:84:61:19:E5:81:A5:AB:C8:E7:2B:C4:12:E9:12:45:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889e3dbd-e927-39dd-aa9a-08263834c34c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:37:8b:a1:06:96:26:e0:e8:c7:35:93:1c:27:94:a8:f3:03:
a6:03:63:9d:1f:40:77:6a:05:f7:d8:b7:55:4b:99:ac:a8:be:
0e:44:47:07:b2:9a:35:4f:cb:de:b7:c7:bd:7b:0a:e8:b4:ea:
40:b6:db:59:2a:37:87:7c:79:6f:5d:69:04:fd:92:5d:b9:24:
8b:26:a0:d8:c5:80:db:b3:cb:bb:cc:ae:2b:f5:3d:57:17:91:
35:17:0a:2f:b5:13:be:e3:74:c6:a9:d0:be:d0:cd:54:dc:8f:
4e:a7:e8:fd:ec:2a:b8:8c:3c:d6:c1:8e:ea:07:23:5f:20:1d:
4b:43:ea:0a:4c:b5:cd:4a:b4:ca:54:a6:11:6b:bd:52:17:e5:
5c:1f:f2:4b:a1:8e:f4:5c:64:cb:b2:0e:c1:b8:a7:9c:03:a7:
30:b9:4e:ef:b0:e4:56:0a:2e:3e:0b:db:7d:90:ac:cd:d6:1f:
b9:91:af:ca:52:6d:b1:e4:7e:80:3f:64:6e:07:c0:75:f7:5b:
ff:e4:e0:56:38:bd:94:1b:62:11:7f:8e:0f:8b:ee:86:de:59:
38:1a:80:fa:a4:42:5f:a9:3e:8d:e5:fa:47:c9:c4:62:30:08:
f4:f3:b8:55:d8:2f:60:7b:19:dd:a1:41:26:3e:55:ff:c2:46:
22:59:b2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:55:38 2025 by rpki-client