Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9899ea57-89c6-32b5-8e2c-671e24d787d6.roa
File: 9899ea57-89c6-32b5-8e2c-671e24d787d6.roa (raw, json)
Hash identifier: MwEQALirbCMvEgzRHobZWMIeEntb2MePa15UWiRbiZI=
Subject key identifier: 24:1A:1F:4B:AE:E1:3C:9A:81:FF:5B:28:7D:DC:30:BA:BF:68:96:36
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3D7C0935A9B74827A000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9899ea57-89c6-32b5-8e2c-671e24d787d6.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 36628
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3d:7c:09:35:a9:b7:48:27:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=80c58b88-fb99-4cd0-83fb-52cd1d8cb60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:f5:8a:3f:58:b0:a2:2e:3e:5f:50:97:d4:
b4:0f:56:47:9d:68:35:68:0b:a6:3a:68:66:c9:b2:
ad:57:5b:95:bf:21:16:7e:54:91:80:e5:1d:95:3d:
5c:ec:fd:6e:a3:5a:0b:72:e1:98:75:05:21:6a:89:
3c:67:76:54:ec:68:8a:0a:a5:10:d9:63:ac:6a:fa:
ee:58:a5:9f:5e:11:30:fb:4f:50:75:1e:25:6a:e4:
46:ce:f6:55:a1:f1:69:ad:ef:f6:9d:a0:6b:64:37:
97:23:3b:54:dc:68:93:b2:4b:ef:b9:f7:02:f8:70:
c8:1b:48:a6:84:58:e2:4f:63:03:f6:c6:db:1e:b7:
57:01:42:96:d1:48:0f:cd:d9:27:4d:1e:5b:18:b3:
de:c1:67:b4:e3:c5:07:7c:d0:9d:51:86:70:74:3f:
f6:e6:70:2b:fb:07:10:74:3b:73:53:4e:37:e9:43:
21:f4:db:8f:cc:73:74:b4:69:b7:e8:f0:55:d6:83:
9e:c5:63:95:40:09:7e:21:de:59:41:1a:fd:1f:15:
b4:3d:36:a4:19:61:fc:d9:bf:78:fc:88:c3:32:fe:
9a:3f:46:84:d1:de:78:a1:fb:43:d1:31:8c:53:32:
22:be:41:4f:4d:b2:30:a4:57:5a:b2:cf:62:31:09:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:1F:4B:AE:E1:3C:9A:81:FF:5B:28:7D:DC:30:BA:BF:68:96:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9899ea57-89c6-32b5-8e2c-671e24d787d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:25:f9:78:9f:ea:e2:3c:23:a3:e1:06:ee:a0:04:b3:80:fc:
d6:f4:01:da:c9:01:fe:29:f9:24:c1:f9:95:9e:ef:9a:d0:27:
6d:93:0f:7d:5d:bb:8b:79:31:44:71:be:85:b7:2e:52:8c:2b:
75:f4:14:cf:81:29:96:43:ab:e7:02:6e:93:7b:d5:d7:47:6f:
57:a8:a1:7e:ef:5d:ba:82:62:75:eb:1a:1c:c6:74:90:27:a4:
d2:cc:bb:85:44:52:c4:20:0f:f4:06:df:0a:21:9f:27:5d:99:
6c:5f:fc:6a:d9:2e:a4:d3:dd:a7:f6:ec:1e:5b:bf:d5:a5:86:
d5:19:5a:6b:13:f1:75:59:b0:bd:51:6a:a9:da:67:a8:e5:9a:
46:c3:d5:52:19:8b:fa:2d:cb:e4:fe:81:2e:dc:7c:d9:3c:80:
f7:e4:63:e3:a3:01:3a:06:d2:1d:ee:a9:e3:85:da:05:da:e8:
b9:15:4b:d3:89:2b:0d:cd:2f:07:c5:2f:50:31:2a:b8:20:b0:
5b:f3:9c:60:62:0e:69:34:5e:ab:bf:da:c9:69:35:60:9c:7b:
e3:bc:5e:f5:2b:2f:01:66:b7:19:bb:77:67:72:a1:11:ad:d3:
8c:31:a5:db:8a:7e:34:0e:9f:4f:05:68:17:c6:d4:74:23:43:
81:f6:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:52 2025 by rpki-client