Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb1f22f-3c7f-30b4-9b76-aa34de8c8192.roa
File: ebb1f22f-3c7f-30b4-9b76-aa34de8c8192.roa (raw, json)
Hash identifier: SgsafJF0hTh/XHTWfoOxK0LGtdpyqoDh1YZx+WbAMl4=
Subject key identifier: E8:A8:CF:4D:27:1B:E9:84:8B:DB:84:48:55:4A:E1:DB:2B:49:F2:17
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584894A5DBEA823E3E8C6B1D2C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb1f22f-3c7f-30b4-9b76-aa34de8c8192.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 32651
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:db:ea:82:3e:3e:8c:6b:1d:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=c36ceccd-0a8b-43cd-9ed6-aac20de72ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:07:27:96:d8:9c:14:14:65:51:09:73:ae:6c:
91:52:86:05:31:1e:2b:03:38:97:18:fc:26:9d:cc:
dd:dc:49:f9:48:61:87:46:f3:9e:54:86:87:38:8e:
d7:9e:eb:e4:34:51:15:2b:f1:9d:6f:61:8b:37:07:
b2:67:88:cf:c7:ba:45:71:29:b1:4d:a9:d7:ef:b4:
c4:dd:18:e6:79:54:7e:0b:24:4b:c4:1c:24:2f:bb:
71:9a:a0:92:64:77:80:0c:26:90:5d:63:65:3c:b3:
67:7e:64:10:f1:d8:28:4b:7e:a6:4c:98:b8:a0:63:
45:bc:1c:54:dd:b7:a2:e7:08:5d:8a:0c:cc:ca:0f:
bd:e5:a5:d9:ab:06:20:ff:fd:97:7d:f5:d6:b9:f1:
57:f3:c6:2a:1e:12:94:e1:2b:90:db:e6:98:aa:30:
1c:44:18:e8:3d:62:12:7f:8a:38:52:17:92:ed:41:
79:9a:28:6d:74:c1:88:83:2d:3b:03:3a:e6:c1:17:
b5:d1:4a:31:3b:d7:7d:ea:ef:cf:a5:8e:8e:59:a7:
94:ed:5d:25:48:d1:4e:8d:75:49:ce:00:26:a1:44:
bd:7d:60:83:4d:16:af:a8:30:92:7e:c4:17:c6:64:
58:75:87:94:f8:8c:61:f0:bc:7b:8e:75:c6:5e:d3:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A8:CF:4D:27:1B:E9:84:8B:DB:84:48:55:4A:E1:DB:2B:49:F2:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb1f22f-3c7f-30b4-9b76-aa34de8c8192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:46:0d:b9:a8:b2:0d:23:64:fc:e3:38:e5:7d:66:ef:b7:32:
b2:af:ff:0c:e5:5f:32:53:9d:bb:90:86:8c:4c:77:1c:b6:37:
da:64:7b:be:55:31:46:79:79:a7:5f:01:b5:31:99:e2:e0:3e:
de:83:48:26:08:d0:ef:b1:37:a4:f5:e4:1c:7e:9b:ae:b9:f9:
50:6c:59:ab:7e:75:af:38:c8:ba:16:09:d4:d1:14:dd:a3:5b:
cc:08:22:e8:c9:07:3b:7e:84:bc:3d:52:e4:c5:3a:24:52:15:
99:8f:bc:0a:85:41:82:aa:ce:e5:56:b7:35:2f:2e:5b:31:4d:
c4:8c:20:c9:86:4f:9a:85:ad:a0:6f:6d:67:83:d7:9d:1b:fe:
54:57:85:c7:3b:17:9e:45:22:1a:0c:91:71:6d:35:d2:51:a4:
af:3e:cd:64:fb:b1:b9:f9:3f:0c:97:d1:ef:ab:76:6a:12:d1:
82:08:82:57:40:5c:52:bf:62:76:b8:f2:d5:ff:40:26:f6:39:
71:62:66:1d:e5:a5:cb:c4:af:2d:e7:dc:05:64:14:54:7c:82:
6b:fa:23:10:17:bf:05:f2:1d:30:19:90:c6:b4:76:5f:30:1a:
a2:3d:c0:73:5c:88:4a:d7:62:15:03:42:26:f5:b4:b9:b6:87:
ff:b1:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:35:22 2025 by rpki-client