Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ea24b6a-83fc-3362-af7c-1eee7c77f20b.roa
File: 9ea24b6a-83fc-3362-af7c-1eee7c77f20b.roa (raw, json)
Hash identifier: 42bFNS46s5Z5OgJ1orRQh/jZBtDIIBZg3SEbVK/ocdw=
Subject key identifier: 0F:F9:E3:6D:93:7F:DF:0E:72:8F:D7:1E:0C:B4:5D:21:49:7D:47:84
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3EBB4DD3F87C4FCD9F70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ea24b6a-83fc-3362-af7c-1eee7c77f20b.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396581
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3e:bb:4d:d3:f8:7c:4f:cd:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=5ccdcda4-75c1-4b6f-869b-7ce82f7f6a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:46:0c:54:fb:db:cc:b7:9b:ed:63:57:85:f6:
81:13:de:76:7d:d5:5c:cc:76:47:51:e2:da:ab:4f:
29:ab:27:b9:85:36:8d:65:e6:d3:1c:72:84:f1:91:
2f:f7:50:df:24:4b:e0:36:ee:d4:f3:fc:ed:d3:cb:
1b:17:6f:35:dc:a6:ea:0f:16:08:12:b3:d1:ce:3c:
cc:be:c5:38:b6:83:10:e0:e5:6c:04:97:32:58:45:
a1:1f:97:47:9c:a7:8f:94:c0:72:09:e2:f0:42:66:
88:19:c7:1a:70:6f:96:79:01:1d:9f:68:6f:e7:61:
81:57:78:18:a8:c1:2f:57:4b:67:a4:c9:18:54:fd:
a5:b9:e7:3a:7d:e2:3c:a3:27:98:bc:12:fc:3e:ee:
a8:49:f9:99:15:c9:cb:de:c6:93:08:eb:9b:fa:55:
9e:68:d7:b5:33:0b:b7:26:23:25:42:35:da:32:54:
e8:0c:95:66:e8:60:54:54:48:dd:06:da:f8:6c:17:
c5:af:98:44:cb:37:5e:82:aa:b3:32:38:e2:ed:53:
4e:1e:0c:91:b9:0c:87:05:7e:65:bc:5a:2c:ac:d2:
a8:b9:e8:b6:9c:8e:38:28:49:5d:36:c9:8f:a4:81:
ed:41:80:16:05:6c:e2:87:73:5c:52:66:12:6a:57:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F9:E3:6D:93:7F:DF:0E:72:8F:D7:1E:0C:B4:5D:21:49:7D:47:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ea24b6a-83fc-3362-af7c-1eee7c77f20b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:8c:61:b1:b3:9e:e4:c7:d3:77:33:20:bd:b0:f2:76:2c:7c:
e9:a8:b4:a4:4f:60:c1:16:d5:6d:bb:4d:0b:32:e7:72:48:8b:
32:df:95:7a:f1:15:d9:2f:4e:1d:32:0d:14:16:65:e2:fb:4f:
74:3e:c7:31:1d:6d:b7:95:47:5c:b1:e7:a5:1e:da:99:60:bb:
4b:3f:a9:1f:65:21:96:27:47:0e:ea:c8:5a:8b:98:db:90:74:
5c:14:fe:e3:85:6c:b0:4a:04:ff:44:2f:19:cd:bd:d8:d2:36:
da:12:1d:00:8f:a5:40:93:d5:c6:69:e1:fc:4b:77:9d:7a:5d:
88:6f:23:21:d0:67:71:03:ce:58:70:01:65:96:03:3a:0d:ec:
ed:df:6e:64:3e:4f:7c:63:2a:ce:be:18:1c:42:62:03:06:7b:
b2:62:b2:e7:73:d1:b8:13:b2:6b:bb:cd:8a:18:7d:8d:11:0a:
4f:b1:f2:15:6d:c7:7b:2b:e0:dc:24:c3:26:4d:d1:94:62:c8:
32:5c:0e:04:4c:e0:58:3a:cd:c2:ab:0e:13:fa:3f:94:55:1c:
f3:e7:bb:f5:43:e2:a6:46:45:5e:76:d8:38:46:23:13:6e:24:
bc:70:52:7d:60:9c:1f:30:ab:e4:26:90:f4:b1:43:0a:6f:9a:
ec:b0:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:57 2025 by rpki-client