Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc90cab-6162-312d-8e3b-2c8aa1595555.roa
File: dfc90cab-6162-312d-8e3b-2c8aa1595555.roa (raw, json)
Hash identifier: XbSsrD+6/AfDnba3nBtRCGdH4nvmThgIOQK/7XyD844=
Subject key identifier: 7A:F2:20:17:86:24:E1:DE:B6:0D:5B:77:A0:5B:79:26:E8:4E:24:B2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424305B690B937550BE4E000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc90cab-6162-312d-8e3b-2c8aa1595555.roa
Signing time: Thu 19 Dec 2024 13:45:17 +0000
ROA not before: Thu 19 Dec 2024 13:45:17 +0000
ROA not after: Wed 19 Mar 2025 12:45:17 +0000
asID: 396606
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:05:b6:90:b9:37:55:0b:e4:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:17 2024 GMT
Not After : Mar 19 12:45:17 2025 GMT
Subject: CN=a36e5d5a-4754-45e8-a42c-69425908db4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:08:f9:0b:50:cc:1d:06:7c:ee:67:30:ed:
a8:4c:8b:90:b5:d5:1a:2e:f4:d8:5b:27:66:08:b9:
39:44:87:53:67:08:5c:37:7a:f0:1f:bd:c7:e0:7f:
60:f5:07:0c:82:73:1d:6e:c5:df:56:90:89:9c:b9:
84:86:02:d0:2d:69:46:60:b7:8f:23:9d:71:9b:50:
49:02:9e:ef:44:62:2e:1b:c5:21:90:ce:a4:31:0a:
8b:69:fa:36:3b:1a:c5:ce:83:27:e9:1d:21:11:ef:
a2:6d:79:35:87:bd:4f:0b:ab:c4:e8:fe:f8:dd:59:
f8:bd:22:3f:45:b7:1d:cb:00:aa:7f:4d:9b:b5:7c:
b4:fe:ee:f5:a7:36:f6:76:b3:67:8a:2e:b5:66:29:
33:2d:f6:e7:fc:05:19:40:0a:cd:da:62:0c:46:6b:
dc:e9:f6:98:ca:03:1a:21:ae:90:07:8a:ca:55:14:
a3:4c:b4:07:8f:2d:54:8e:d0:34:ad:ae:38:47:13:
04:30:93:93:db:81:b2:12:ae:1d:86:64:96:bd:01:
4f:12:a5:4f:cd:30:85:1a:28:81:94:b1:c3:b7:2f:
a8:47:02:40:1c:2f:4f:2b:90:e7:11:51:f0:56:b7:
69:9c:ba:01:3f:5f:b8:49:4e:76:03:65:18:3e:28:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F2:20:17:86:24:E1:DE:B6:0D:5B:77:A0:5B:79:26:E8:4E:24:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc90cab-6162-312d-8e3b-2c8aa1595555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:bc:12:bd:70:3f:0d:85:dd:32:48:aa:25:1a:fd:78:66:7e:
d6:6c:d8:62:fe:c1:bd:02:62:7c:ad:30:1c:56:bc:82:a7:9f:
16:52:60:d1:75:84:b5:c0:1c:23:4f:27:db:22:ba:39:a6:34:
f3:b4:d2:88:36:2d:aa:b8:0a:48:35:cd:25:41:d7:94:0d:db:
0e:f0:2f:75:ce:6a:d3:fb:29:a5:b3:1c:84:05:cc:a6:62:06:
0c:db:b8:91:14:8e:06:6f:da:5a:ef:3b:ee:f4:e4:df:00:ec:
b2:17:db:80:97:25:67:eb:52:27:bd:1c:52:15:54:d6:70:a8:
46:e3:73:25:c2:3e:d5:41:37:7e:e7:93:da:fe:2d:cc:b7:b7:
95:07:7c:7d:a0:bc:24:1d:97:aa:eb:83:de:02:d4:5a:0d:cc:
b3:6f:1b:2b:38:3c:e6:ab:d3:d7:38:81:ef:9a:02:f1:24:24:
84:63:8d:ab:a2:30:60:fb:16:fb:26:12:00:76:a9:43:f3:b8:
7e:5a:84:ef:7e:f8:c3:a6:ca:3c:99:88:3c:c4:fa:87:b9:95:
cf:46:b9:60:6e:40:3b:48:4c:01:a3:dd:c0:d9:37:2a:9e:7c:
8b:f9:59:7c:0c:94:97:07:d5:fe:57:aa:a2:28:82:46:dd:06:
40:52:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:42 2025 by rpki-client