Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac705bfe-3c6b-337c-bb75-0401a41fc910.roa
File: ac705bfe-3c6b-337c-bb75-0401a41fc910.roa (raw, json)
Hash identifier: I1WK4XXnoPB3jitxmCCHLjFm7qjtBkQRK/wIA5fi1lk=
Subject key identifier: 0D:4C:79:05:AD:B6:5E:79:AC:3E:50:51:7B:6A:39:53:5F:AD:18:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842432BEAA81FD382F2CEC000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac705bfe-3c6b-337c-bb75-0401a41fc910.roa
Signing time: Thu 19 Dec 2024 13:45:35 +0000
ROA not before: Thu 19 Dec 2024 13:45:35 +0000
ROA not after: Wed 19 Mar 2025 12:45:35 +0000
asID: 396592
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:2b:ea:a8:1f:d3:82:f2:ce:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:35 2024 GMT
Not After : Mar 19 12:45:35 2025 GMT
Subject: CN=40e460bd-ef71-4f47-97e8-9cc76e5509f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:a7:8a:98:d6:40:23:ec:4e:fd:2e:26:f2:
dc:da:e8:df:fa:2b:93:ab:bb:d9:a4:ea:e0:96:f7:
8b:ca:85:b5:48:b6:4b:ba:de:90:f8:04:d7:18:dc:
06:8b:fe:08:c8:e5:98:5a:17:cf:97:47:5d:a1:a3:
6e:53:3e:1a:88:af:8d:83:55:91:85:bc:1c:1d:73:
57:d0:0d:e7:88:ad:dd:54:00:75:a1:7c:d6:54:a8:
68:6b:19:26:49:bf:45:d0:cc:ab:29:63:0d:3c:c6:
4d:f5:56:55:7d:c7:e0:a2:93:fc:40:51:22:33:14:
58:e8:81:c5:18:52:47:ca:17:8b:00:8e:18:30:14:
a2:d2:57:b2:da:d5:f6:e2:cd:12:84:82:88:8e:0a:
a4:6b:a2:d9:8a:89:67:c0:7a:b4:a5:bb:60:07:e8:
1f:42:af:03:14:4d:b4:ab:2c:01:2d:cd:05:85:c2:
af:ec:39:a8:f3:e6:7f:a9:c2:a5:2b:ff:e9:46:9a:
f6:64:41:9e:4d:8a:ec:9a:ae:44:8b:f9:2f:72:ae:
aa:1f:02:75:ad:14:3a:8c:81:66:d4:e0:56:10:69:
0c:cd:a4:2c:4f:57:d5:ae:ea:78:27:30:d2:95:40:
ae:55:1a:b6:dc:30:bb:21:98:aa:dc:85:57:13:28:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4C:79:05:AD:B6:5E:79:AC:3E:50:51:7B:6A:39:53:5F:AD:18:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac705bfe-3c6b-337c-bb75-0401a41fc910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:35:b9:91:61:8f:bb:54:6c:0e:c0:bd:8b:1b:d9:34:13:a5:
01:a6:84:cf:ee:9b:ee:42:58:35:d8:77:53:ec:28:23:4a:b4:
0b:54:c8:ef:f4:e8:6b:fa:83:ed:a1:79:ad:b6:07:c7:39:bf:
b9:d6:56:6d:db:11:0c:ed:3d:1c:6b:b1:85:81:5b:22:ec:f3:
3b:c7:0a:62:a4:83:cd:04:9c:02:5e:80:7f:ac:9f:88:db:e2:
b9:dc:d1:b7:ec:76:36:65:7c:22:40:70:5d:81:4b:9a:26:4f:
62:91:1e:06:bc:ad:b7:5d:df:29:59:bf:a0:f9:2c:99:e2:50:
90:e8:cc:af:87:fb:42:a2:83:ed:81:1e:7b:de:de:73:f6:17:
61:8b:15:d5:06:55:d5:42:84:6b:28:de:a2:52:cb:8a:93:8a:
c3:6f:6d:46:44:05:5e:1a:fb:c5:a9:e1:ba:a7:5d:5f:67:b5:
82:24:a2:be:8b:ea:fc:2a:d5:26:3e:37:71:7b:f4:46:96:3a:
80:0b:8a:b7:ba:e9:a1:33:aa:d1:9c:ef:93:02:b0:76:63:f9:
83:22:39:6a:dc:e9:65:fd:84:53:e7:bd:05:6d:ed:78:c6:2c:
c3:b3:e6:45:c9:ce:58:e7:b7:a6:5f:1e:02:18:f2:39:fa:83:
8b:60:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:38:37 2025 by rpki-client