Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca3103cd-01b6-39ab-9334-a9330908c73e.roa
File: ca3103cd-01b6-39ab-9334-a9330908c73e.roa (raw, json)
Hash identifier: hopT5ChOJm0MjEb445CgsC4Ftz7A+4wQRDhOTXele2w=
Subject key identifier: EE:92:56:55:BB:E1:CA:20:4D:FD:89:04:99:BE:B9:F3:19:6D:DD:CD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5D6C1F51F3D89CB8E51C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca3103cd-01b6-39ab-9334-a9330908c73e.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 397199
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:d6:c1:f5:1f:3d:89:cb:8e:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=248707b2-4fe0-4df1-b19f-add00396e5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:03:fc:86:52:ed:b9:43:0e:56:61:e6:a7:
50:db:68:4e:47:ed:4d:71:38:35:1c:92:b8:dc:4b:
ba:f4:b2:58:01:f0:74:60:96:be:74:e3:60:26:26:
65:eb:aa:bf:a0:0b:a2:c8:9c:9b:f4:91:95:7b:71:
8f:d1:70:2e:07:9d:ac:f3:b4:61:2b:33:97:d6:08:
5b:be:00:d0:3d:17:c2:f0:cf:9b:fb:13:14:7a:f1:
9a:68:0c:e4:00:a4:87:87:23:27:40:f3:61:86:15:
8b:94:50:4f:96:f5:e8:01:47:70:58:e0:45:c5:b3:
23:ca:66:44:50:ce:29:d2:8c:21:47:e7:38:e4:73:
93:c0:5b:bf:54:e7:d5:d5:3c:ae:45:e0:b5:44:73:
e3:4d:2c:07:0a:74:0d:ba:9b:e5:ac:7e:ab:0d:11:
d9:a8:96:88:4b:45:4f:30:14:11:17:54:47:55:9b:
cb:73:80:85:c1:71:3d:13:24:c4:01:b8:2c:d1:a9:
66:d7:34:3c:52:d9:dd:ee:15:bb:97:65:d2:df:49:
d8:e1:99:d2:7f:43:5b:ce:7b:84:e6:95:36:98:26:
2d:95:48:1c:ea:d1:70:65:00:3b:83:50:5e:ee:ec:
4c:18:1b:2e:17:7d:48:5c:52:35:26:cd:fd:dd:7f:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:92:56:55:BB:E1:CA:20:4D:FD:89:04:99:BE:B9:F3:19:6D:DD:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca3103cd-01b6-39ab-9334-a9330908c73e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:b0:dd:1e:c4:f6:d7:8f:fb:69:f7:b4:5b:77:3b:66:8b:bb:
a5:f5:5b:e4:52:59:77:f9:2b:e2:40:a3:67:a3:f6:f5:1a:28:
98:0e:6b:3f:df:1a:1c:71:3c:6a:ab:7b:52:97:ea:88:34:31:
ad:84:9a:ea:fe:d7:a7:b2:4b:43:58:10:3f:f1:fe:58:0e:94:
7f:9f:df:ad:da:fc:99:ce:50:e5:ad:fb:6e:90:22:e6:24:fb:
10:5e:3e:b8:22:ac:09:87:02:57:50:d9:aa:53:8d:14:f9:d4:
87:27:92:bb:d8:11:a1:bc:05:0e:d2:6e:2b:3a:6b:4a:d8:35:
4d:cd:25:f4:a9:ab:ab:2b:93:d9:13:81:54:9b:1b:1b:19:55:
be:d7:75:92:25:00:c6:60:8e:4a:b4:81:cb:b6:1e:ab:3c:e7:
a6:94:1e:43:f2:db:e8:77:05:11:be:22:6f:09:74:20:e8:0d:
18:34:eb:ad:62:bd:3a:05:c1:42:cd:4c:8e:76:6d:47:26:77:
76:66:a9:72:ac:f0:c7:f6:20:bc:82:ea:31:03:dd:dd:5d:4e:
75:90:3f:2e:61:ad:2e:ac:7d:8f:77:b1:92:52:a2:d6:29:98:
38:51:d9:95:03:24:9d:81:60:3e:d8:71:79:96:69:d8:eb:2c:
f4:3f:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:27 2025 by rpki-client