Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa
File: a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa (raw, json)
Hash identifier: JqAzNFkfYAO8EZjHwAkt7GLqmostgaSeMg6Mw/MDkIA=
Subject key identifier: 09:F7:72:5D:92:89:58:CD:58:3E:C4:7B:3D:D5:D0:F7:CB:46:4D:03
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848854B3A8E7D9C26C1A2437E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 36623
IP address blocks: 192.42.175.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:3a:8e:7d:9c:26:c1:a2:43:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=bc6ded2f-e6ca-4447-b44b-b974e73a1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:44:a2:e3:21:b5:3c:6a:1c:8a:f7:55:ab:
6b:9f:6f:38:8d:82:51:c9:7f:f2:02:7d:7d:c7:40:
e7:f4:6f:8f:09:b2:2a:d7:c2:4c:be:4b:57:ab:3c:
fc:38:3b:b8:d9:d1:bf:87:a8:5e:62:44:bc:1a:95:
74:f0:db:de:2d:50:0b:f5:3c:b6:c9:46:84:6a:b9:
ec:40:24:9f:e4:03:18:a8:38:38:06:0b:8b:1e:c2:
fb:fd:4d:3b:87:f4:07:f4:84:17:cf:5e:d8:6f:68:
80:cd:60:b4:b3:54:5c:c3:4b:d1:db:dd:3e:4f:e9:
91:91:09:bd:77:e6:f4:17:2a:56:2c:c6:10:39:b2:
13:85:d9:9d:00:3d:44:e1:fe:ed:03:d4:c1:30:56:
1b:6b:00:d3:75:15:b2:0c:74:f4:18:d5:d0:d2:5b:
ed:14:1b:01:49:4d:1a:2a:c7:77:f0:a8:fe:d5:7a:
01:12:ad:f4:e7:40:12:33:61:79:76:25:25:c1:b9:
b9:5a:47:11:ce:3a:19:c1:46:75:f9:76:df:01:25:
32:ed:ed:b2:18:79:cf:b3:b1:4d:15:c3:69:03:c9:
50:8b:5f:ff:9e:57:01:e7:7d:1b:c3:59:46:f8:9f:
ff:2a:db:ab:59:99:e3:4c:07:d1:be:b0:63:3e:9c:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:72:5D:92:89:58:CD:58:3E:C4:7B:3D:D5:D0:F7:CB:46:4D:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:4a:47:af:3f:43:d2:f5:8d:f4:15:76:4f:5a:a8:dc:32:65:
a9:81:17:2d:b1:f7:1a:22:e1:86:1a:df:48:6c:d8:52:62:ef:
4c:e4:4b:32:37:7b:56:e0:42:43:f5:37:33:89:cd:3f:65:93:
b7:10:8c:d7:3f:f9:97:c2:d1:b5:d2:a4:c0:8c:a4:2c:2f:5d:
99:1e:21:f0:5a:f4:65:53:a0:2e:54:ed:b3:b8:82:ff:93:56:
a6:0d:c0:0e:27:e0:56:55:99:db:08:f4:12:12:4c:b2:3e:fe:
ad:cd:94:cc:dd:a2:ab:91:fd:a1:19:0a:e8:c6:06:23:2b:64:
58:92:ea:5d:18:3a:c8:b5:39:75:b1:fc:31:d3:00:b5:ec:31:
c9:e9:b1:39:f2:c2:6a:85:fc:15:49:a1:50:df:db:21:21:99:
d6:16:95:d1:90:f6:43:d6:55:aa:7f:be:dd:b9:28:c7:83:88:
6d:48:3b:2f:dd:dc:74:37:d7:9e:5b:0d:cd:fd:8f:a4:0a:3f:
38:c0:d6:3b:10:63:9d:d9:77:db:aa:d6:2f:4b:ad:b3:af:2b:
45:94:4c:3f:77:75:49:8c:64:a2:f3:4e:ae:2e:bf:85:57:97:
82:0d:11:42:3f:20:2b:75:33:1f:0a:33:fc:df:be:17:fe:67:
f5:38:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:51 2025 by rpki-client