Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ffae81-a784-3208-9902-429b08a3e348.roa
File: c9ffae81-a784-3208-9902-429b08a3e348.roa (raw, json)
Hash identifier: zYFKjJwkT+JpjSFHr/ohtSvlApAWNd93y+fLLqgH9m8=
Subject key identifier: 66:31:79:16:14:BE:24:42:B7:90:45:8A:52:42:D0:99:E3:55:34:11
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842431A8F90C661CD8F287500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ffae81-a784-3208-9902-429b08a3e348.roa
Signing time: Thu 19 Dec 2024 13:45:27 +0000
ROA not before: Thu 19 Dec 2024 13:45:27 +0000
ROA not after: Wed 19 Mar 2025 12:45:27 +0000
asID: 397201
IP address blocks: 192.42.177.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:1a:8f:90:c6:61:cd:8f:28:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:27 2024 GMT
Not After : Mar 19 12:45:27 2025 GMT
Subject: CN=811b5a72-5544-4ccc-9c26-95090e17c50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:78:a5:d6:45:07:9c:c2:ef:6c:a7:cb:55:
14:04:45:6b:cb:4b:3f:e8:e4:6c:38:c9:1c:31:95:
f8:53:1f:6e:85:8f:e0:f7:d0:64:5d:22:95:3a:9c:
92:61:31:c6:a7:ee:b9:35:2f:1b:61:d3:19:83:a8:
c0:a3:96:61:5b:f8:c5:a9:03:f4:82:96:b7:80:28:
11:11:b3:38:5d:fd:f6:21:e7:7e:2b:73:d8:9a:79:
06:00:3e:d0:25:12:1f:82:5b:27:cd:a3:bf:d0:94:
e8:65:aa:00:9a:ae:c2:d3:cb:75:8f:a2:54:24:8d:
b9:0c:e0:45:3d:61:29:21:a0:3b:96:8a:ef:cd:5f:
6f:d5:38:63:bb:c0:f4:06:a2:68:74:e5:95:cb:5d:
47:ae:fa:ea:7a:47:f3:41:95:9e:14:55:eb:5a:61:
bc:76:20:70:3a:57:e1:a7:5d:30:07:e4:0f:9d:36:
5e:28:20:c5:fc:36:99:cf:27:0a:ea:57:df:2f:65:
91:f6:4a:f6:21:cd:95:1e:95:40:97:b0:e8:37:42:
79:47:34:3c:a4:03:0e:70:82:ea:37:73:e7:91:d3:
af:c0:32:d0:a6:80:d2:c1:37:aa:62:16:ed:72:33:
0a:2c:ba:37:59:3d:3c:cf:93:87:5b:09:8c:3e:25:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:31:79:16:14:BE:24:42:B7:90:45:8A:52:42:D0:99:E3:55:34:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ffae81-a784-3208-9902-429b08a3e348.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:f1:ba:06:70:06:20:e1:01:d3:0c:4a:48:9c:37:3c:2a:f8:
ad:55:1d:3e:bd:b3:99:c6:0e:dc:36:07:af:45:fa:e9:05:86:
21:7b:c5:5e:ce:af:44:25:ce:03:a0:89:06:31:b9:fa:00:15:
6f:62:9b:f5:2d:e9:cc:63:08:c1:40:e5:e9:1c:16:ad:f8:e0:
ad:af:0c:4e:a8:f8:b8:9f:e8:63:1a:de:a3:7d:e9:e9:a5:a6:
00:f9:92:85:98:23:e1:8f:ff:ed:d0:10:06:f7:03:15:80:fa:
16:1d:7c:a8:45:2a:22:5a:20:9e:88:18:89:f4:65:e0:f7:54:
a9:23:56:bb:d7:84:5c:a0:dc:6c:66:a2:1e:03:7f:1f:26:c6:
49:cf:0e:38:d5:52:26:e2:5f:61:ab:80:33:c9:66:18:32:51:
ef:c2:15:94:82:d6:ab:3f:e2:8e:d1:56:bb:fe:a0:c0:87:54:
3e:db:9c:78:04:67:1d:e9:c2:6f:91:79:9c:93:39:17:e5:35:
e9:fe:bf:93:f3:d8:55:b2:c5:5a:5d:d1:40:ff:59:9b:0a:c3:
08:d7:94:09:23:f5:db:c6:e0:54:bc:37:f1:45:48:25:0e:01:
59:59:b0:6f:e6:a5:2f:e3:58:ad:4e:1d:bf:63:74:fb:4d:c3:
d0:49:1e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:33:12 2025 by rpki-client