Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b66abfa0-29eb-37cf-8e8d-a2baf7f08de1.roa
File: b66abfa0-29eb-37cf-8e8d-a2baf7f08de1.roa (raw, json)
Hash identifier: UigdQZUlVVy0LLlCDK24+NOsOMJg4gTmcOLNBA5N1t8=
Subject key identifier: 7E:1F:71:AF:C1:39:BF:16:BB:64:99:7B:F8:12:48:B1:A8:97:3E:BB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848854B3BD559509113A184D000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b66abfa0-29eb-37cf-8e8d-a2baf7f08de1.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 396565
IP address blocks: 192.42.175.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:3b:d5:59:50:91:13:a1:84:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=fdf72cfe-92c4-4132-ab92-8637f4b3043b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:bc:a4:ea:3a:45:c7:eb:05:ca:7e:ad:c9:
47:8b:91:b2:2f:fb:3e:19:2f:40:77:2a:06:2b:98:
f7:05:c9:bc:34:ad:fc:bb:5f:2e:c7:1d:98:36:12:
41:a7:8e:25:f2:c8:89:bb:e2:cb:3d:ee:e7:9f:92:
4b:2a:05:cf:b3:ac:ce:a6:8e:32:3b:d5:46:6e:a0:
9e:81:e4:cf:9e:63:55:65:df:01:d6:b4:cd:3d:e6:
9d:2e:a5:5d:76:7e:d7:9e:ba:33:2e:0f:90:6f:07:
c7:67:1d:01:c9:8a:4b:77:15:11:25:93:6c:67:d8:
87:5d:59:38:a0:20:66:02:66:aa:4b:d6:2b:7c:40:
da:dc:b5:73:c7:42:fe:14:26:4b:ef:02:9f:96:7c:
b7:bb:9a:0b:b0:e5:1a:7b:22:79:ae:b2:37:40:75:
bc:70:0e:0a:08:34:ca:21:34:e8:1f:61:ff:85:df:
a8:31:ef:f1:0b:13:fe:78:2e:82:79:70:6b:a1:d5:
ce:01:d2:bc:6c:bd:0d:e3:3a:f0:12:ee:9a:c2:0b:
09:f2:07:4b:16:02:da:48:29:fb:f9:4e:71:37:88:
ae:a8:50:25:72:8b:18:68:6a:ae:12:9a:49:78:fd:
55:44:72:2c:7d:b3:04:06:87:dc:cf:0c:6f:25:91:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1F:71:AF:C1:39:BF:16:BB:64:99:7B:F8:12:48:B1:A8:97:3E:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b66abfa0-29eb-37cf-8e8d-a2baf7f08de1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:ec:75:6c:4c:35:84:3a:29:e7:5a:d4:1c:b6:82:ed:bf:81:
43:08:63:33:63:17:8c:6d:36:5e:c1:54:18:cf:34:b7:d9:c5:
01:fa:f7:b4:5a:63:9a:b7:cb:7d:aa:52:a9:15:da:04:8a:d9:
cd:47:58:1f:25:70:73:98:b1:1e:36:a3:2c:c8:09:99:01:b1:
da:92:45:13:93:ac:c2:a0:16:c1:c8:cf:6b:f4:fd:5c:bd:9a:
6c:d6:0f:7c:c7:04:5e:ce:62:b2:3c:35:89:e3:83:d0:db:d3:
5a:4d:d1:95:16:e8:b2:61:58:fa:5a:bc:be:53:fd:90:11:6e:
d5:54:d0:33:14:4a:0e:5b:41:33:d8:e0:d1:69:f0:05:33:f5:
32:e4:51:0f:b2:86:f5:e0:1c:67:54:23:88:e4:74:27:4e:34:
7c:55:bc:d8:81:17:8c:99:79:aa:58:ee:5b:8d:1c:87:e8:6e:
cc:be:9d:c3:1a:d3:0a:4a:c0:b3:fd:a5:16:29:e8:5e:60:12:
8d:ce:cf:4b:3a:34:66:b9:32:54:83:78:d1:00:3d:c7:ba:56:
c9:63:7c:55:fd:e0:7d:51:6c:f1:12:b0:91:59:eb:4d:1c:8e:
44:92:a1:9b:47:32:d5:09:5d:19:e7:af:05:33:ab:d5:40:20:
76:9c:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:01 2025 by rpki-client