Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dd2c44f-6d3a-3e74-a839-78af110da339.roa
File: 9dd2c44f-6d3a-3e74-a839-78af110da339.roa (raw, json)
Hash identifier: jjnUUUhNX6CKUt0PwxMaYo+WpH6aPy5wpZyPw8cZw7E=
Subject key identifier: C2:F9:F8:E7:6D:B6:62:C1:4A:85:EA:19:85:FF:89:93:6D:4C:D6:45
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842433BD029015CA6B635F230
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dd2c44f-6d3a-3e74-a839-78af110da339.roa
Signing time: Thu 19 Dec 2024 13:45:42 +0000
ROA not before: Thu 19 Dec 2024 13:45:42 +0000
ROA not after: Wed 19 Mar 2025 12:45:42 +0000
asID: 397211
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:3b:d0:29:01:5c:a6:b6:35:f2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:42 2024 GMT
Not After : Mar 19 12:45:42 2025 GMT
Subject: CN=916eef00-94f0-4d14-a035-133fc94f7253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:ee:1d:d1:a7:1e:f7:33:a9:ad:ec:20:ae:
75:8a:ac:4e:89:a9:b3:1d:cc:c3:ca:de:b5:09:92:
7e:86:f9:cd:10:33:2e:1e:dc:19:7b:3f:eb:a9:90:
55:c5:f0:d4:e9:3a:88:90:4c:c4:d6:82:f2:ff:19:
dc:2e:2b:11:ae:3c:de:30:e2:fb:62:37:81:71:f2:
5b:49:12:f1:ca:7f:e1:9f:24:6c:4f:3a:64:5e:c1:
91:bd:84:20:6b:f2:62:02:63:b6:90:69:3a:7c:41:
74:bf:7e:0c:1c:02:27:59:70:4c:3b:a7:6f:6f:55:
6d:f0:11:a4:2f:16:4f:d7:a3:bb:74:22:1d:15:49:
68:8c:eb:a8:c5:d0:84:60:2a:da:a7:c1:7c:e4:a6:
3b:ef:87:1f:89:4b:a1:9c:34:93:d9:61:46:c9:7b:
a8:6d:67:c2:69:a0:f8:3b:83:8c:0a:9a:52:bb:7d:
6e:96:af:74:20:ca:32:f3:5d:c2:0b:a9:f0:e2:ed:
f8:22:c4:b8:34:30:96:1d:1e:5f:43:be:1a:bf:1a:
23:a2:45:e7:c4:25:b3:e6:a6:75:fc:5f:36:b5:7b:
60:f9:65:7f:26:8c:28:e7:24:ac:d5:c6:5e:3a:17:
46:b4:bb:85:4b:78:f7:e0:9c:e0:76:1c:b6:3c:c2:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:F8:E7:6D:B6:62:C1:4A:85:EA:19:85:FF:89:93:6D:4C:D6:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dd2c44f-6d3a-3e74-a839-78af110da339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:8c:4f:c4:14:e3:43:69:02:0d:6b:2b:d9:ea:3a:57:5f:2d:
18:13:74:f0:5d:5e:cd:52:7b:40:a3:d1:e5:92:4d:5c:90:75:
5f:5b:09:b3:d0:cf:d4:bc:e6:c7:c2:40:54:48:78:cb:2a:bb:
24:f2:03:98:43:3f:a9:e2:0f:15:65:c8:18:f0:c2:6f:5f:ec:
50:7e:e3:b6:43:ab:54:0d:64:11:bc:cd:36:37:a9:32:f3:45:
d9:04:41:5c:51:2b:0c:1c:fe:05:dc:fd:0e:b9:4b:45:43:ec:
49:8b:da:e8:1d:ae:76:43:7c:23:b1:98:c0:f7:a2:98:e8:62:
fc:9d:fe:e7:66:2b:7a:9d:87:fc:d1:25:1d:0e:e7:7c:7f:5b:
07:1e:43:45:8d:9d:d7:1f:1b:23:8c:88:3c:76:77:d1:ce:9a:
d4:a7:c1:e0:fc:9d:ad:0b:c4:32:a5:51:fb:fb:e4:5a:38:c7:
5e:98:23:6e:73:fb:8c:e8:5f:04:fe:9e:ec:a2:d4:1c:83:aa:
9f:bd:cf:3d:9a:8b:40:9a:72:39:87:da:87:bd:ed:7c:fc:ca:
34:69:09:18:30:b1:2d:85:ff:8b:b1:86:07:4e:24:23:c6:ae:
ad:d9:91:e1:c2:75:b3:7f:31:92:dc:77:7d:18:e7:81:9e:90:
23:7f:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:11 2025 by rpki-client