Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9917287e-abc2-36c1-b3b0-6cb7b5ec9856.roa
File: 9917287e-abc2-36c1-b3b0-6cb7b5ec9856.roa (raw, json)
Hash identifier: 6FCF4j9uM54chTxZZquIb6OLIfX6pb5/6il/sjwUTJU=
Subject key identifier: C2:48:61:7B:22:4D:F8:D8:53:48:26:16:15:C5:B9:A5:8F:B1:E8:F3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3EAC281132A2212A3F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9917287e-abc2-36c1-b3b0-6cb7b5ec9856.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 36624
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3e:ac:28:11:32:a2:21:2a:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=963d8ab7-cb7e-40f8-a380-87497573b1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:9c:9b:65:36:06:9a:79:78:09:5f:1e:b9:
c2:21:5f:82:36:76:82:09:85:fe:03:1d:ad:a9:fb:
45:c9:84:1a:6d:33:6e:70:56:54:7a:32:ea:69:86:
0c:0b:cc:3b:b1:da:52:5d:fb:ec:08:60:bb:48:e4:
14:56:43:1e:6b:6f:48:c3:e7:3b:57:4a:a4:12:1f:
03:97:1d:a1:03:51:e4:bb:b7:82:3e:b3:44:5c:90:
ba:78:b0:47:5c:19:56:8e:fb:b8:7c:dc:5b:a5:29:
3a:25:a7:1e:51:ed:86:2e:66:51:ab:62:f3:c1:71:
17:5d:0a:e1:73:c8:f4:74:28:5b:46:27:74:4b:48:
d3:f9:60:48:8b:6f:31:c7:1e:e7:c2:ba:52:a0:46:
ef:7a:00:ad:4b:8a:76:b1:6b:6d:86:24:28:58:20:
08:36:ee:34:2c:80:0c:44:63:68:a7:7d:ee:9e:d9:
52:b9:3f:30:b6:a3:78:a5:f1:94:fd:e4:4f:59:98:
cf:5e:35:ce:14:02:da:c5:9f:18:c3:01:a6:cc:17:
b5:e2:f5:98:f6:ad:6a:23:4c:42:ed:ae:60:1f:50:
98:44:37:7c:1e:83:23:16:ab:dd:54:95:53:f4:80:
f6:68:19:ac:31:c2:0b:8e:d2:f1:45:ef:7c:17:fc:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:48:61:7B:22:4D:F8:D8:53:48:26:16:15:C5:B9:A5:8F:B1:E8:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9917287e-abc2-36c1-b3b0-6cb7b5ec9856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:94:3b:56:13:08:24:ee:de:8c:e4:da:0b:e4:63:46:a1:c7:
be:c4:ad:1c:84:16:ad:63:60:be:c0:d0:89:13:00:dd:f2:a5:
65:4a:d0:c5:c4:ba:11:0e:74:a3:7f:c3:02:d6:26:b3:db:64:
6c:12:18:f8:26:90:9f:cd:ae:3b:1c:a8:06:f0:82:44:f1:c2:
9f:96:bc:fe:8e:f8:6f:3e:57:3e:86:89:dd:74:c4:9a:f1:bb:
f7:f8:fd:32:b1:60:6f:54:4b:74:3d:7a:86:41:63:12:8f:43:
48:2f:e0:bb:94:bb:66:0e:31:1b:66:5f:0f:7c:73:cd:67:e9:
e3:9f:5c:eb:b5:f8:a7:96:7b:79:34:5e:3a:02:5a:95:7e:9a:
40:86:ac:f6:08:36:b3:78:99:0d:4a:05:db:be:8c:66:b4:98:
f6:90:f7:f1:b8:8a:84:2f:25:8b:30:bb:5c:ed:40:29:38:85:
de:c4:37:e0:ca:97:0b:f5:95:7a:b8:0f:5f:5c:ca:94:b2:b3:
3c:a6:a3:72:e6:d0:26:73:38:7d:a8:76:97:b6:2e:13:97:e5:
d4:86:c0:bb:3d:5d:02:b8:e7:c9:21:90:f7:5d:63:2a:da:05:
54:e8:b8:3a:a8:ea:d1:41:2d:02:97:14:34:7d:3a:35:9b:f0:
c1:66:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:11 2025 by rpki-client