Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa
File: aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa (raw, json)
Hash identifier: I9pz75gOmsJ7GYVnGJJhRu70PVaFTowQKTTB4i9L+Ws=
Subject key identifier: C2:79:43:CE:C3:B1:AC:A6:1E:3E:82:84:92:EA:93:31:C5:7C:F0:3C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3A9FA839B5B36925A080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396610
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3a:9f:a8:39:b5:b3:69:25:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=6ec96b88-8070-433e-baa8-5f0153723cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:7f:05:3b:c5:8f:89:51:5b:ca:4a:9e:0d:
a9:63:24:89:8d:c7:00:67:1a:e9:7b:7b:dc:56:82:
70:05:7d:8b:cb:dd:42:8d:1b:07:64:e4:d5:30:f0:
ac:f1:7a:29:c7:1a:c0:37:6c:e2:35:6d:d1:86:04:
72:2c:bb:a4:3f:66:f9:80:54:8c:21:76:a3:dc:c3:
8f:05:8c:f9:e2:e0:87:1d:ae:1f:5d:56:82:42:f5:
a6:10:5e:f6:c6:86:95:a1:9d:0a:ea:34:b5:a5:89:
7a:54:fb:6a:7d:84:3a:db:7e:8e:c4:be:6f:9f:39:
33:d5:44:9c:c0:a5:28:bc:d6:d3:be:e5:9f:df:02:
aa:0c:de:67:bf:0f:0e:1b:85:33:51:fe:3e:bb:82:
85:fc:5d:d1:5e:ae:a6:cb:64:26:1b:0a:8d:e6:73:
3e:4c:6a:70:15:cb:ac:5a:13:02:38:e8:ab:1d:bf:
7a:fb:58:ab:b9:d8:39:13:4c:be:0d:aa:5d:89:8d:
57:68:88:c9:ea:16:b0:5b:c7:75:da:6f:6c:ae:ad:
ec:72:c2:4c:37:dd:e7:b0:6b:50:db:a1:d0:47:31:
a0:5e:04:ff:cc:92:c3:7f:c4:70:99:5a:68:6a:2d:
97:0b:3f:bb:ec:64:21:9f:bf:f3:d1:e5:9f:6a:82:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:79:43:CE:C3:B1:AC:A6:1E:3E:82:84:92:EA:93:31:C5:7C:F0:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:81:0b:f3:f0:87:aa:30:07:0b:dd:7a:d4:67:23:cb:79:7f:
4b:af:6f:8c:ed:01:22:2b:a6:d5:6a:47:2b:d6:85:44:76:c2:
bd:99:e5:fb:fc:f6:eb:11:d9:46:45:79:1b:69:fd:4c:81:9a:
12:d5:65:8a:83:50:17:04:f0:0b:4c:bb:e5:09:41:4b:91:7e:
15:a7:43:0e:92:88:75:8f:39:aa:50:48:ca:41:56:ba:3e:48:
79:8a:7a:48:ff:54:7f:a9:78:ab:26:30:6f:4d:1d:f7:f1:46:
a7:53:09:19:c8:6a:9a:12:1f:0d:8f:c7:01:29:06:19:49:3a:
cc:98:8d:4b:c5:da:05:c1:c5:07:2e:38:15:f3:07:07:d7:46:
43:76:aa:9d:70:9e:0d:6d:9a:ec:1c:90:51:13:5e:9d:ab:13:
4c:b0:34:ea:13:e8:76:5f:fa:4e:6d:7d:12:2d:7b:08:ea:42:
72:6d:29:20:fb:82:cc:1b:44:36:f7:74:0a:ec:dc:f1:42:4d:
53:87:93:ea:5a:ef:9b:e3:ee:f4:92:cb:70:e8:21:a9:e0:6a:
47:69:25:79:8c:01:6b:d0:55:59:64:e0:f3:46:3d:18:4a:38:
a5:cc:a5:cf:52:e4:d1:67:d2:81:1c:f8:cc:cd:04:26:7d:c2:
4e:09:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:35:33 2025 by rpki-client