Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa
File: bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa (raw, json)
Hash identifier: NlvGGQOjENNqJZCrbqOEY9vw/rCZnDtmRMPYmZvE7aU=
Subject key identifier: FA:CE:F7:49:80:AC:00:91:EF:3E:FE:92:97:0E:42:EC:AE:33:53:83
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3E97012F8F7C687DFB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396608
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3e:97:01:2f:8f:7c:68:7d:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=70045e80-4182-4315-8c1b-03f986711228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:4d:d1:2a:6b:80:4c:3d:40:a2:2b:fa:01:
15:48:08:96:57:28:92:52:96:dc:fb:5e:82:51:42:
e5:91:ef:92:89:62:bc:ec:0b:f3:b3:fe:25:22:f3:
10:18:f5:d5:dd:eb:1f:99:2a:61:eb:88:c0:34:a1:
2d:fc:e9:35:22:42:02:ed:c9:0a:99:9b:69:6b:d5:
be:95:91:06:d6:11:22:f1:03:12:97:b4:95:f6:86:
3c:be:5d:07:34:11:a4:de:f6:68:e8:98:cd:e9:a8:
cf:00:65:be:36:21:48:72:e6:74:cd:83:ed:bc:ae:
71:ad:11:3e:4f:e0:a6:1e:5d:74:87:96:5b:d5:9a:
4b:31:ef:bc:f3:a7:e5:ff:cb:c4:da:7b:8b:a3:5d:
ff:3a:d8:a7:16:bd:6f:4b:9a:58:2f:0e:05:3c:cd:
86:1c:79:04:1c:7c:3c:2c:61:b8:d8:4c:56:f3:44:
89:69:30:e9:b8:37:a6:24:db:aa:43:53:2d:d2:71:
7a:a7:a8:29:4a:42:01:8e:0d:13:e5:87:fc:6c:c6:
42:08:6d:a2:c9:76:60:43:d8:84:39:b7:4d:0f:9a:
1b:26:ef:d7:4c:c1:5f:6f:7a:9a:64:5f:d6:07:e1:
9a:e4:92:c5:ea:19:c6:da:6b:03:1c:d1:42:e9:39:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:F7:49:80:AC:00:91:EF:3E:FE:92:97:0E:42:EC:AE:33:53:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:e9:be:36:0a:b7:6d:50:0c:92:57:b8:e2:cb:0e:30:16:21:
54:23:48:81:8b:12:b2:48:0e:49:c4:7c:78:32:2a:f3:d7:4a:
c0:ff:76:ec:c7:17:37:1f:79:59:db:dd:67:9d:62:d4:97:14:
ce:36:85:d8:99:59:ab:af:c1:f7:b6:74:3c:8a:dd:0a:a8:40:
ec:70:a7:19:ff:49:bf:3b:ca:c2:af:d2:d3:3e:36:73:b7:95:
7c:c7:9b:c8:32:b9:82:80:16:1c:38:9c:09:d3:95:31:4f:25:
b6:ec:0c:c1:be:fa:77:32:d6:3c:26:86:c2:db:86:d1:84:dd:
5c:b8:3b:2e:8a:d4:4c:4d:5c:8c:5c:c7:d3:63:e5:d9:75:97:
78:34:27:61:34:e7:52:2c:16:1e:9a:b0:9d:aa:d8:a1:3b:81:
b3:dc:35:14:0e:b3:d0:4a:c3:5f:be:2c:75:70:c1:97:33:ac:
e4:15:b0:b3:ac:96:7a:7f:16:df:ff:74:5e:3d:9a:74:7f:ce:
c2:57:8a:d6:94:af:7d:16:ab:a5:5a:70:c8:53:a2:25:df:7b:
ff:ea:de:c2:be:fc:10:52:31:7a:6b:22:e0:4c:c6:6e:63:88:
fa:5d:77:b0:c2:14:2c:d3:f2:99:73:bd:42:af:8f:30:cf:bd:
56:b2:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:13 2025 by rpki-client