Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa
File: 8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa (raw, json)
Hash identifier: u87bL/2rSXuuRE/PVBDrn1Y974B3LZ3uzwkqLyxc66Y=
Subject key identifier: EE:89:2C:19:C1:FD:53:59:41:DA:7A:75:BD:19:EF:99:85:24:6B:85
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F2ED14EC844871427900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa
Signing time: Thu 19 Dec 2024 13:45:08 +0000
ROA not before: Thu 19 Dec 2024 13:45:08 +0000
ROA not after: Wed 19 Mar 2025 12:45:08 +0000
asID: 19836
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f2:ed:14:ec:84:48:71:42:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:08 2024 GMT
Not After : Mar 19 12:45:08 2025 GMT
Subject: CN=d3ebd24b-9879-4a61-bed6-5cebd9318937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:88:f4:0f:97:39:4c:7f:a7:9f:ba:ab:83:
31:2f:77:4b:b3:9f:47:ca:95:5a:30:c1:b7:19:95:
e0:4d:21:4c:13:68:46:a9:eb:e9:37:88:51:6a:72:
0d:8f:31:e6:47:17:07:47:3d:fb:5f:48:95:07:0b:
24:9e:8a:7a:59:45:4c:94:ca:ac:75:f7:c8:ac:e9:
8a:c4:49:8e:f7:8a:0c:9c:bc:f8:7a:5a:b3:42:a6:
dc:d2:38:7b:7d:ea:97:b5:62:3d:32:b7:24:42:6f:
70:d6:78:26:04:9c:cb:13:cd:f5:93:41:07:82:a0:
30:c9:4f:4d:65:a1:ac:ee:99:ab:e9:a3:92:90:3e:
5f:b6:79:9e:07:3d:cf:12:a0:76:c3:bb:b1:01:80:
a5:3f:d5:c6:ba:33:80:48:01:ed:8f:c2:42:5a:7f:
da:f0:a1:a3:33:5f:4e:eb:52:0a:18:e5:2e:6a:10:
3b:9a:19:f6:b8:2f:e3:0f:e0:d1:04:07:a3:a7:7e:
2f:e7:4e:bf:4e:7f:40:5f:76:d7:76:c0:a5:d2:23:
ec:00:c3:6f:04:57:0b:3f:df:77:45:9b:15:c5:a0:
e3:af:b8:3c:19:0f:d2:06:6b:e6:47:71:28:43:fc:
fa:04:14:a5:d4:59:f3:31:d4:56:d6:47:dc:43:fa:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:89:2C:19:C1:FD:53:59:41:DA:7A:75:BD:19:EF:99:85:24:6B:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:3d:21:39:99:b1:da:7e:3e:c6:a8:ed:a6:b9:9e:84:a2:5e:
71:e7:36:bc:bd:5d:a3:60:3e:57:aa:85:5f:cf:87:c5:8a:73:
6e:d4:18:3b:17:6d:1f:16:fd:0a:96:c9:d6:ba:15:3b:73:7f:
cd:1f:af:2a:e6:a9:70:b4:f2:9d:7e:8d:c0:4b:bb:80:da:ff:
32:54:87:11:28:06:0f:e4:af:db:6a:89:90:4e:6f:26:99:35:
ca:5f:a9:7c:09:3d:de:fa:04:b8:8e:f1:ed:1a:d2:99:ac:3f:
3e:14:b3:71:c0:1f:57:be:61:7c:54:60:3b:99:80:fe:8d:9f:
b5:db:8d:f5:b9:f2:bf:7d:c5:48:98:af:44:61:c2:04:a5:cc:
db:58:a8:aa:35:0c:ca:3c:84:bb:22:6b:0a:c5:77:6f:52:4f:
9d:5d:d6:69:b5:69:7d:cd:48:32:d4:a5:26:0b:45:79:ff:a1:
d8:04:8a:3f:29:0b:c1:28:3f:54:e7:c1:5d:d0:0a:6a:3d:4e:
02:07:b7:1c:23:0a:e7:bc:ab:2e:1e:2c:1f:41:ce:cd:8d:98:
b7:9d:32:b4:fa:42:17:1f:68:5b:ef:d0:2a:64:c2:60:73:e2:
4a:16:a8:10:b3:6e:a4:f3:90:07:af:ee:62:fe:79:5c:24:c6:
50:75:56:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:12:57 2025 by rpki-client