Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91fae4c7-2eae-309a-aaf3-520eea5aa081.roa
File: 91fae4c7-2eae-309a-aaf3-520eea5aa081.roa (raw, json)
Hash identifier: TAfhk72RnwetFs96+7QzDDUf2ZeHQxZdjme8sZuG030=
Subject key identifier: C2:07:27:F2:DD:FF:88:87:C0:D7:D9:4B:F8:3C:8C:FB:D4:EB:BF:C9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F3B03975D2DF5F33DBC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91fae4c7-2eae-309a-aaf3-520eea5aa081.roa
Signing time: Thu 19 Dec 2024 13:45:08 +0000
ROA not before: Thu 19 Dec 2024 13:45:08 +0000
ROA not after: Wed 19 Mar 2025 12:45:08 +0000
asID: 10515
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f3:b0:39:75:d2:df:5f:33:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:08 2024 GMT
Not After : Mar 19 12:45:08 2025 GMT
Subject: CN=ebbabe05-b861-4b8e-b85a-6ef41c120766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:f2:7f:ba:0b:ae:65:bc:ed:ee:49:99:8f:
28:3d:38:ac:ef:b8:f3:1b:2e:c2:d3:48:bc:a2:be:
17:43:5e:a3:31:bd:88:57:d0:68:1d:01:0f:07:91:
a6:11:47:6c:74:a8:77:fb:63:9a:21:60:0f:3b:1d:
8a:4f:ed:b5:8f:33:b2:26:e6:58:9d:4b:22:92:51:
13:30:c5:09:3c:cf:ea:3a:e7:12:9e:47:40:94:84:
a2:85:9b:69:b8:f4:3d:ed:f0:d6:3d:0e:56:bb:f9:
21:34:6f:88:14:3b:10:0e:25:14:a3:5a:51:4f:23:
c7:54:cf:7d:24:4f:23:ea:b5:30:ad:61:d9:03:49:
67:44:df:e0:23:b4:4c:20:a8:b5:6a:08:f4:de:4c:
81:b1:fc:68:44:50:4f:0b:f0:44:56:b6:a4:97:a3:
9b:be:df:c7:dc:18:f8:98:e6:39:e3:dc:b0:c8:c8:
8a:0c:3e:41:07:24:4a:59:f8:1a:7d:d4:a7:89:72:
ab:ec:65:46:b5:ab:ee:77:91:c9:10:f4:91:a8:9c:
7d:24:1a:25:b1:d2:de:fd:83:d7:25:3d:f9:76:ca:
8c:e8:25:0a:c4:49:08:a1:6c:7c:41:16:60:93:64:
7d:95:70:de:20:bb:ea:65:57:af:7c:ba:39:68:d5:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:07:27:F2:DD:FF:88:87:C0:D7:D9:4B:F8:3C:8C:FB:D4:EB:BF:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91fae4c7-2eae-309a-aaf3-520eea5aa081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:60:bd:be:96:ab:ab:dd:de:b4:14:d5:9a:47:35:d3:90:13:
00:b5:52:86:9f:22:fa:8d:4c:84:c3:f9:b4:75:c5:b9:a0:1b:
af:42:0c:45:35:0c:89:d0:1b:3b:aa:ed:63:03:8c:9e:fc:bf:
41:c6:91:20:e6:d3:d7:43:c5:df:ed:78:ea:ee:2d:17:d1:b8:
7c:ec:89:98:56:ca:5c:87:70:41:93:b2:14:79:e6:51:58:3c:
27:f5:b5:a6:ee:d9:1e:17:2c:fb:0a:b3:57:09:57:6d:31:aa:
ec:87:4d:a5:0e:2a:d3:59:9d:95:b7:d4:bf:51:aa:00:85:f9:
cc:94:9b:7c:61:05:1f:a2:44:7c:a7:36:00:59:4e:d8:8c:6f:
0d:a2:b7:ff:2d:1e:f0:90:90:87:6d:2e:e3:42:99:17:80:e4:
01:bb:ef:c9:b4:97:a0:41:f4:3e:92:c1:33:f0:ab:75:14:43:
a3:0f:47:a5:9d:09:38:2a:c0:e4:b3:22:3e:27:70:a0:aa:43:
3e:a0:5b:b3:a6:90:e6:64:43:06:34:53:45:93:74:2a:ee:45:
7e:88:22:e5:a2:1c:b5:08:a5:f7:b2:c3:bf:cb:d5:06:bf:a7:
11:c8:a2:50:4e:73:94:c6:60:00:08:a3:80:16:c6:ec:bb:29:
d6:df:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:36 2025 by rpki-client