Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94f185f8-5f50-31f6-904f-05a6cf9e3edc.roa
File: 94f185f8-5f50-31f6-904f-05a6cf9e3edc.roa (raw, json)
Hash identifier: V1CZG7ZGZH5WfA8Gd2pEkgC3WFNHdI+RgkonXmn17As=
Subject key identifier: F0:F9:CB:15:94:90:70:1D:45:FD:44:0A:A8:FA:71:14:1C:1B:52:B9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242FA9CE5ACBFD9DBC38700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94f185f8-5f50-31f6-904f-05a6cf9e3edc.roa
Signing time: Thu 19 Dec 2024 13:45:12 +0000
ROA not before: Thu 19 Dec 2024 13:45:12 +0000
ROA not after: Wed 19 Mar 2025 12:45:12 +0000
asID: 396566
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:fa:9c:e5:ac:bf:d9:db:c3:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:12 2024 GMT
Not After : Mar 19 12:45:12 2025 GMT
Subject: CN=814f2a23-52c3-42c8-bfed-3350b0d10022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:91:e2:ea:13:3b:be:58:23:63:ea:39:41:
e4:26:c5:fa:14:d7:8c:ff:e8:46:c8:d4:76:58:53:
29:84:9a:94:29:67:8a:5c:c3:4e:2e:0f:a9:94:bc:
da:fb:f7:fa:59:7e:b8:13:0f:3c:0e:da:7b:2c:4f:
12:da:8f:7b:30:6c:74:4b:5b:2c:13:82:a6:d1:b4:
f6:da:a6:af:91:1e:1f:1f:5f:2f:bb:a6:cd:f4:d1:
c6:2e:4f:ba:fa:8f:d5:82:94:f9:61:b4:1d:64:eb:
83:04:b2:c0:bb:d6:ca:68:e6:ca:55:7a:6a:b4:ad:
a0:80:a0:e2:a3:1d:90:3b:18:c3:c9:eb:c1:13:ef:
42:ed:44:c3:b6:3c:34:67:10:31:6e:3b:c5:0e:bd:
74:d6:a2:6e:ac:9c:67:24:48:5f:b9:1c:0e:32:fa:
f8:82:2a:31:b6:45:6b:60:ae:b4:0a:16:5f:1c:4d:
63:8d:f9:ed:36:78:ec:6e:b1:83:93:f7:83:08:7f:
aa:27:c7:24:63:3b:74:6d:f3:dd:a6:49:55:be:dc:
ae:29:65:20:e4:f9:8e:64:82:f0:5a:4c:0f:f6:8a:
aa:15:7c:15:ec:b0:0a:fb:3a:e6:ac:b7:b0:0d:36:
f4:b7:07:53:f4:c0:62:52:78:77:7b:0c:af:b2:66:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F9:CB:15:94:90:70:1D:45:FD:44:0A:A8:FA:71:14:1C:1B:52:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94f185f8-5f50-31f6-904f-05a6cf9e3edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:fd:ff:35:38:43:2e:73:59:56:fc:de:6a:af:0d:a4:75:a0:
72:7f:d0:90:f6:b7:0f:59:93:39:4b:af:7b:3f:ba:97:04:b2:
76:1a:e8:c0:f0:b5:07:29:1b:8f:6b:85:87:58:5a:01:81:3f:
d4:91:b7:9e:f3:88:34:06:1b:f9:52:cb:1c:02:63:80:be:21:
f9:e0:cc:42:3e:41:50:c5:ac:f1:80:96:0f:c0:65:b1:18:97:
85:3d:85:01:f9:52:7d:03:ee:92:36:84:81:4a:c0:30:42:a2:
3c:e0:c5:74:2a:18:92:5b:88:3e:5a:fc:be:20:52:ad:f7:8b:
db:32:9a:e6:06:15:71:c6:fe:87:aa:31:dd:d8:68:ff:2b:55:
64:16:40:06:48:1b:33:47:b3:7e:bf:a0:8a:ee:8d:45:f2:e4:
ce:47:d5:8d:1d:52:ee:b7:1a:55:ff:70:ff:f3:c7:eb:33:28:
2e:e7:3d:fc:67:64:f4:6e:84:6c:c3:a9:c4:83:19:5c:0b:bf:
b3:8c:f3:57:08:94:00:51:05:89:da:c1:5e:6c:1b:05:fe:67:
8a:3f:98:bc:d8:ea:1d:ae:4a:c9:8f:7f:29:a1:83:81:98:a5:
f9:38:4c:11:cf:fd:99:2c:74:c4:a9:52:9f:65:d9:d9:d4:50:
22:23:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:05 2025 by rpki-client