Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a488a198-6899-3605-966f-88cd1afd6bba.roa
File: a488a198-6899-3605-966f-88cd1afd6bba.roa (raw, json)
Hash identifier: dzr7Wncx6ov8y1S63fyjLVCUqtkKHvjS7VErBwA8gmI=
Subject key identifier: 96:0F:D8:29:5D:87:C1:F9:83:1C:98:6A:91:5E:79:5D:3A:31:05:FE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A56DD430B02749942240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a488a198-6899-3605-966f-88cd1afd6bba.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 36617
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a5:6d:d4:30:b0:27:49:94:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=9519ca67-6687-41ff-8592-a918932dd047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:34:91:62:da:0f:bb:ef:d7:6b:c9:4e:9e:93:
98:59:3c:be:7c:6d:61:9e:0e:a0:c5:2b:eb:ee:0e:
fa:00:26:43:49:12:30:9e:46:4b:68:09:cc:b3:1d:
6c:df:7a:8b:64:be:31:13:96:8f:62:f7:8b:34:ca:
39:6c:b0:5e:c4:44:34:d2:ad:e9:e6:43:31:81:2e:
1d:74:73:44:c5:e1:83:23:e9:91:0b:aa:b1:69:c5:
a9:61:59:59:89:c5:af:fd:e1:e8:80:27:24:ea:e3:
d2:a6:71:27:81:5f:e8:47:1b:4f:17:8e:b1:ec:24:
5e:e6:82:f8:a9:5d:ab:21:7c:f2:8f:c2:d1:6c:83:
2d:41:7c:e8:e1:7b:58:34:a8:ef:47:1d:b5:57:42:
e8:35:1b:56:27:f7:cf:e8:b5:04:d8:b2:d0:7e:a2:
33:ff:c1:c3:2a:42:51:31:83:95:81:42:0a:08:60:
1f:d9:c1:a6:b4:65:f4:65:0b:c7:21:00:3f:5c:98:
19:61:2c:64:af:05:3f:9f:82:45:d5:3a:eb:cb:2c:
54:5d:c1:39:fa:08:3b:ea:04:e4:04:a3:3e:15:fa:
fb:ef:fc:87:63:e6:62:bb:37:fc:88:5b:f3:90:db:
8e:d0:66:cc:0c:77:d8:b1:54:a3:3a:45:c9:1f:7f:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0F:D8:29:5D:87:C1:F9:83:1C:98:6A:91:5E:79:5D:3A:31:05:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a488a198-6899-3605-966f-88cd1afd6bba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:99:29:76:ed:8e:30:be:53:65:0a:a3:ae:33:0d:8e:9f:fc:
be:8c:df:bc:a3:0b:83:88:7b:45:33:9d:07:48:10:da:72:77:
90:fc:eb:3e:c7:62:83:03:6f:e6:18:32:8c:d9:4a:2a:38:03:
c6:c3:80:bb:3b:80:4e:3c:c1:51:8a:46:4d:29:68:17:05:2e:
9e:78:87:95:f5:80:06:30:f8:57:cf:2b:a0:68:8d:33:2b:cc:
8d:40:67:2b:d6:72:d2:b5:aa:48:ad:aa:e9:ef:58:4a:fd:84:
12:ca:d3:2e:ed:9c:97:e9:11:05:ea:01:2f:54:5d:8f:d8:a2:
28:7c:99:8d:94:2f:98:d4:d2:62:c4:e0:f1:9f:f2:f9:2c:a9:
9d:ec:71:04:e9:b0:d3:6d:b1:00:f3:62:14:3e:1b:33:72:f6:
86:a0:72:dc:c5:64:d2:ff:45:0c:a8:30:38:94:f1:33:db:5f:
2d:e5:23:dd:22:32:fc:88:29:5f:c1:23:ac:a2:95:7a:17:d8:
33:a2:a2:84:e4:f8:99:78:d3:ca:4d:6d:3b:04:f6:9a:a3:ac:
9c:2f:73:53:72:3d:02:35:07:04:8f:00:f6:83:64:b3:7f:5f:
65:f8:8b:4e:4d:3f:64:12:92:b1:6b:3b:1e:b7:45:5e:36:03:
88:be:9f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:37:58 2025 by rpki-client