Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac4f37c-4e72-36dd-a927-e4a980f9b4d7.roa
File: aac4f37c-4e72-36dd-a927-e4a980f9b4d7.roa (raw, json)
Hash identifier: lnY8Du3OY7UAzqEpn9aAHXhJsblFrZRhi2XWKiSBfew=
Subject key identifier: C0:D2:74:8F:07:98:D3:84:CD:85:FA:DA:9D:80:58:24:59:04:2C:F1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A0006B7FCD7A5109FD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac4f37c-4e72-36dd-a927-e4a980f9b4d7.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 396606
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a0:00:6b:7f:cd:7a:51:09:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=dc783082-2afc-4a01-b879-cdcc31d7016b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ba:fd:7c:28:ac:cd:7c:72:0f:17:39:88:5f:
3f:0e:f4:b5:08:dd:15:0a:99:5a:ea:9b:73:7f:44:
9b:61:cc:42:46:74:82:ae:8b:5b:6e:4c:66:57:1a:
8a:63:29:8b:81:19:72:f9:72:7c:28:96:3f:b7:36:
f1:9e:a3:74:07:df:70:72:33:ab:60:98:ac:a1:11:
17:ea:ec:f6:b8:26:f6:37:69:e2:5a:fb:27:02:dd:
fc:9b:70:2f:69:cf:7c:8a:08:d2:68:f1:b9:3c:2a:
2f:a7:23:8b:9f:6b:23:e0:cd:8c:a1:9d:20:d7:01:
6a:bd:04:27:c9:ba:be:86:c3:e8:b9:3d:eb:07:e6:
15:6b:05:00:1b:fb:47:f5:4b:35:ca:56:e7:1c:21:
c0:ca:28:d0:e9:1c:dd:d7:3c:07:77:ad:26:52:19:
90:69:50:42:5c:28:9a:aa:4f:09:7e:b6:4c:2a:0c:
3d:49:c8:65:aa:ce:ae:3f:61:6e:fb:60:0c:c3:3f:
ee:63:02:bd:e7:9d:05:43:e8:00:76:92:5b:50:7e:
35:9b:1a:b7:be:d0:d1:94:e1:a0:55:a6:b6:74:d9:
fe:45:36:77:57:49:35:84:6a:ce:f5:0f:14:ab:23:
71:92:95:f3:69:18:04:27:5c:fa:7e:9f:36:7b:a9:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D2:74:8F:07:98:D3:84:CD:85:FA:DA:9D:80:58:24:59:04:2C:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac4f37c-4e72-36dd-a927-e4a980f9b4d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:64:6e:6a:6c:dd:42:2d:bc:95:77:8a:cf:af:8a:a4:c5:6b:
b2:00:6e:01:cd:6b:59:91:ab:a4:4a:83:02:20:5b:f5:73:f2:
86:7d:7a:be:2e:c9:fa:03:a9:83:42:f0:1f:b9:f6:2c:22:75:
bd:0c:14:00:8b:77:1e:3d:8c:b8:86:26:af:b8:76:31:75:ab:
f1:3e:ae:eb:85:f2:67:08:28:a7:07:48:cc:66:85:c9:37:52:
13:f3:72:42:ee:a7:ce:cb:2f:f3:39:2b:cb:76:f0:eb:48:47:
98:60:46:c1:bd:ca:55:57:10:6c:f5:42:a4:2d:1c:84:88:e1:
1d:5f:64:bd:95:0a:f7:98:f3:6e:bf:24:d2:35:60:db:fc:79:
a4:f1:7d:10:4e:b3:ad:95:50:a3:4c:74:cc:27:93:f8:d6:a9:
5a:f8:4c:57:8c:4e:d4:15:e3:c4:56:ad:4e:ef:75:b4:63:6a:
33:76:dc:88:64:ad:89:ec:cd:e1:70:c9:20:ae:a9:84:61:ae:
67:27:a0:9b:0b:11:92:b9:22:7d:18:15:88:5f:91:ba:8c:87:
2b:91:4e:90:fd:10:fd:1e:a3:dc:2d:45:dc:1c:53:46:27:8c:
bd:3d:26:d6:5a:1f:26:a5:8b:df:d4:84:d1:3a:1a:41:62:4d:
3c:c3:82:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:58 2025 by rpki-client