Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0c48e31-4f32-306e-8615-011a7f2c2830.roa
File: b0c48e31-4f32-306e-8615-011a7f2c2830.roa (raw, json)
Hash identifier: CPrsALidWvaDHtXkdgdSZYLBBxOoBCHZovQ0WUShnPE=
Subject key identifier: C0:B9:00:D8:3E:98:76:8D:9F:62:CA:79:7A:13:89:31:0E:3E:BC:29
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B37F865D328517013A080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0c48e31-4f32-306e-8615-011a7f2c2830.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 20362
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:37:f8:65:d3:28:51:70:13:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=e471c49a-1138-45a5-bf9b-6e10bcef7c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:81:53:85:6c:0a:ef:e4:74:61:ee:b4:ec:fe:
c0:47:0d:ab:0b:72:10:2f:58:de:82:88:e5:63:63:
0f:89:09:d9:42:a8:d9:b7:0c:a7:69:b4:09:df:d9:
30:cb:fd:0f:1b:50:80:87:dc:94:93:f6:c7:73:97:
1e:26:8c:d6:27:77:a5:aa:a5:83:93:3d:0c:9f:b4:
55:98:8e:b2:b8:96:16:10:7b:f2:42:eb:6b:c2:cf:
02:e3:4e:4c:b8:61:45:3c:a8:52:18:0b:4a:33:51:
0d:4c:ae:f2:45:cf:92:d1:8e:56:1d:0b:e2:df:8e:
5b:d9:9d:cf:13:d1:d3:ac:e6:01:c2:09:f2:63:38:
d9:73:8c:95:79:c6:58:74:31:ab:83:ad:ad:e2:c2:
01:95:55:94:1f:27:92:80:ca:be:52:84:64:52:14:
39:4c:02:96:dd:d3:16:91:2a:ba:15:95:da:7a:6b:
83:17:92:1b:6f:dd:94:9b:91:23:13:0b:59:97:e8:
44:c5:6e:a9:54:3b:44:73:72:5a:d1:dc:11:5f:32:
7d:bc:5c:9a:38:54:52:5b:5a:db:06:1d:42:bb:89:
15:87:16:16:8f:94:5e:94:cc:e6:30:a6:c5:15:b3:
14:89:d0:14:85:68:b9:f9:1a:03:59:f9:b9:fc:37:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B9:00:D8:3E:98:76:8D:9F:62:CA:79:7A:13:89:31:0E:3E:BC:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0c48e31-4f32-306e-8615-011a7f2c2830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:bd:a4:64:ef:82:67:4c:ae:01:59:03:0a:4a:db:f1:8d:10:
b2:35:2d:42:2e:78:40:93:91:5b:30:ab:0e:8c:f4:17:7e:7c:
e7:7e:ac:33:fb:d8:97:b4:35:cb:f5:f8:4a:7f:17:9f:40:a1:
d9:a5:28:c2:bc:be:88:6c:e7:b4:f9:e5:bc:05:8d:e5:a7:01:
f7:d7:63:1f:a2:e9:b2:b7:d5:b5:88:ab:13:2f:3f:5a:78:48:
d6:c7:25:ab:60:fa:6e:8b:e6:3b:2f:d9:3d:f7:9c:33:43:06:
ad:94:2c:e7:e1:ce:d3:64:b8:0c:1a:c9:48:f1:36:2a:7b:f8:
fb:ea:1c:64:d2:c1:bb:ad:37:64:cc:14:ac:fe:27:14:2f:96:
10:e1:27:dc:9c:a4:bf:e9:87:71:19:cd:b2:7a:6f:6f:3d:19:
f0:c1:10:27:6a:e8:d5:7f:b1:9a:ef:d7:0e:fe:f0:8e:4f:d9:
b6:ab:c1:2c:ae:dd:1d:e8:f3:41:9f:cf:b2:92:76:78:f6:93:
f4:52:ff:dd:2a:8e:60:d7:94:cd:ab:20:15:f8:61:24:ac:b3:
33:45:fa:f3:9a:c4:99:87:47:6f:98:82:95:03:35:30:5c:1f:
be:61:94:f9:6f:bb:ca:ed:21:df:55:4c:a4:be:40:fd:f4:7a:
e2:6d:91:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:17:30 2025 by rpki-client