Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ccc54a-097c-3fc3-9833-b869506510a7.roa
File: e8ccc54a-097c-3fc3-9833-b869506510a7.roa (raw, json)
Hash identifier: AkGERnpoHShpwFW8+GExY8orut8WkO0zokz8+ftoC9Y=
Subject key identifier: 58:F6:85:E1:8C:BF:3E:BA:06:65:3C:D1:A9:E2:FB:06:04:C6:A0:54
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3DFD9AC7E14E8124DB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ccc54a-097c-3fc3-9833-b869506510a7.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396558
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3d:fd:9a:c7:e1:4e:81:24:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=5491ec2c-dba5-43e0-a7ae-792da5644533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:24:e8:4c:1e:19:5e:b0:0b:c7:73:f5:5b:
2d:e5:ff:d3:8c:dc:7e:dc:4a:3b:aa:17:b9:9b:11:
e8:64:c4:7b:8e:3a:f6:85:f8:24:c3:3e:32:a1:3b:
2b:a5:f8:0f:24:bd:c9:dc:eb:f7:b6:89:60:5d:77:
12:58:29:e9:68:b3:20:f6:05:98:59:6f:ab:10:16:
4c:64:99:d2:0c:48:18:b9:09:37:dd:cd:42:93:42:
1f:de:8b:14:6b:61:8d:c2:77:a6:33:d2:08:56:be:
37:c5:ae:36:8f:79:39:4e:1f:26:04:3e:b8:3d:21:
bf:1d:88:29:4e:b9:b7:71:42:94:97:22:bb:ce:df:
f3:57:96:5e:9f:2f:c1:8f:79:64:87:75:7f:f3:af:
ee:50:78:75:35:49:60:88:f7:92:a4:09:5e:9c:19:
62:2d:33:bc:65:63:4d:87:52:a5:bb:37:a4:70:59:
5d:61:60:a7:66:ab:1e:1c:91:33:9f:6c:76:c8:a0:
43:1a:31:4a:0c:13:a4:d3:41:b8:69:31:f8:2d:ce:
96:6d:6d:00:44:7a:20:ff:f9:a4:a8:71:13:16:e1:
ac:21:6b:ba:31:1a:29:f5:30:05:6a:a5:30:a8:6f:
ef:a0:7d:03:0b:60:e9:cd:7e:bf:61:b8:09:9a:f8:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F6:85:E1:8C:BF:3E:BA:06:65:3C:D1:A9:E2:FB:06:04:C6:A0:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ccc54a-097c-3fc3-9833-b869506510a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:54:cd:7a:98:73:2a:18:46:42:f8:07:18:9e:6c:25:f0:e5:
d5:e3:c1:2c:0b:4f:ec:8b:dc:81:ec:57:ce:ef:ab:0b:81:f3:
fb:d3:70:8c:7c:c1:80:33:1a:e6:3e:c2:b3:75:69:20:1b:97:
92:cf:bd:61:f9:8a:cc:87:c2:d6:d7:ed:46:01:ca:80:ed:16:
4e:78:4b:3b:d1:e1:38:78:01:cb:5b:c1:99:b3:32:19:e4:b4:
cf:76:a5:d6:03:ad:db:b3:ac:03:0e:8e:8d:4d:52:e0:09:bd:
0e:ed:ff:d3:f1:78:59:fb:48:08:ba:08:0f:93:f9:70:17:7d:
61:73:c8:63:fe:e2:3d:f7:39:c6:09:82:06:2f:e7:1a:5a:b1:
f7:c1:0f:66:cf:c0:01:ba:8c:22:bf:bb:a0:8f:84:d4:c9:4d:
27:02:49:a0:39:24:af:60:97:cf:2b:94:97:c3:ec:2a:da:92:
b2:b9:7f:0c:8a:c1:54:86:b7:08:e9:0c:b3:7d:db:5c:a0:f6:
87:28:b3:e2:d3:25:69:98:b9:db:07:6d:5d:ea:cd:70:9f:5a:
78:23:09:c9:59:89:6d:fb:4f:94:73:84:2a:4f:8b:55:68:59:
33:db:25:47:fa:b0:8e:58:cf:94:4f:5c:9e:d5:5f:2b:0a:f3:
aa:b2:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:06:56 2025 by rpki-client