Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5ba546e-e1f5-360d-9e8d-19171440ffaa.roa
File: c5ba546e-e1f5-360d-9e8d-19171440ffaa.roa (raw, json)
Hash identifier: Dl2nxuyWc32xKnCs3AkuYX1htCWJFIgoivIVs2+3cfQ=
Subject key identifier: C3:E1:59:A1:7E:55:1D:5F:44:81:89:41:60:D3:BF:C1:5C:F7:B0:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485E35A66CA1641E46D57E8900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5ba546e-e1f5-360d-9e8d-19171440ffaa.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 40717
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:a6:6c:a1:64:1e:46:d5:7e:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=cefc7fc9-9afb-4095-b30b-1c5e748eaaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:36:37:95:ec:59:6a:84:f9:60:5e:41:1b:
d2:23:8a:4f:db:13:ff:bf:12:db:7d:31:50:7f:58:
d0:d2:a2:0b:a5:97:39:a9:c3:c2:d9:e1:6a:9e:91:
1b:15:44:9a:8c:fd:78:c3:37:91:71:76:29:98:07:
fc:ba:c0:13:58:90:d2:8b:b9:52:ee:35:db:93:cc:
6e:4b:25:4d:c1:12:8c:e5:69:fc:b9:f8:cc:46:16:
11:9d:f0:61:ac:b0:c2:55:6e:f5:f4:6c:93:77:e6:
2c:8f:58:a7:7d:08:da:ed:48:6b:41:62:ce:10:71:
00:a5:dd:bf:57:e4:27:44:32:b8:a2:fb:41:3a:c1:
c5:65:42:2c:4c:0e:45:ad:c5:42:1f:e2:5a:43:89:
bf:34:f4:c9:f6:42:26:e6:d6:00:62:af:53:c9:35:
05:31:8e:42:5a:46:50:1b:6e:3e:25:27:76:33:e4:
6b:49:5f:cb:46:90:4f:be:82:83:0d:11:00:a5:08:
a5:5e:86:d1:57:1d:54:b9:56:ca:77:19:9e:8e:28:
f4:06:2b:eb:9c:00:2f:bf:e4:e2:49:02:26:22:4a:
c5:50:79:8d:b1:8b:01:08:37:0d:ba:75:6c:dd:82:
08:df:7b:89:65:eb:12:0e:4a:ec:90:f4:97:d4:de:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:59:A1:7E:55:1D:5F:44:81:89:41:60:D3:BF:C1:5C:F7:B0:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5ba546e-e1f5-360d-9e8d-19171440ffaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:fc:ff:93:5a:47:c3:f9:6a:d8:41:76:33:1e:e6:79:7e:42:
44:74:72:17:5d:39:2e:19:15:08:99:da:07:38:13:e0:fa:35:
f6:6e:25:20:64:58:9e:10:f9:e3:3d:58:4c:01:96:32:3b:26:
4a:6c:82:36:71:4e:e4:95:75:f1:90:2d:fe:8f:2c:c0:6a:2b:
2e:37:64:b7:86:44:61:38:c4:03:16:82:97:0b:6d:2a:0e:73:
b4:47:f3:91:bb:4e:7f:51:05:25:34:a3:a5:c2:91:c6:05:95:
45:98:60:56:71:2b:e1:0c:03:62:0c:a5:29:ee:5b:40:f5:f7:
de:ef:e2:d8:b2:59:38:17:2f:31:99:01:f6:16:b6:5b:84:f8:
2d:6c:fd:f9:ff:5d:fe:e8:c6:74:78:45:ca:b7:cc:be:c8:3c:
94:70:50:12:0e:5e:5c:b8:80:78:76:ad:33:bf:9e:1c:24:2e:
2a:37:6e:8a:ca:de:97:b0:63:a1:45:a9:16:50:5c:3e:4e:75:
8c:0c:8a:2f:c7:cf:48:c7:2a:4c:a0:a6:8c:94:29:1e:b6:fa:
3c:9a:29:75:58:7e:e6:84:0e:47:1a:d7:59:5d:df:0f:2e:6f:
ea:23:9b:98:33:88:b2:a5:38:46:98:71:49:e2:de:2c:bf:b7:
1a:5f:da:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:56:25 2025 by rpki-client