Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ecd22543-cbe8-3f12-bae6-4e0ee136c19e.roa
File: ecd22543-cbe8-3f12-bae6-4e0ee136c19e.roa (raw, json)
Hash identifier: NpoRKfvY/rM2OKaJt7hXcEJOWeCSXCCmq8HuatRIHyo=
Subject key identifier: 3A:46:3D:8A:D7:29:1A:21:69:A6:F0:A3:C5:48:CC:35:15:0D:63:19
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3C02B3D2758642724850
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ecd22543-cbe8-3f12-bae6-4e0ee136c19e.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396559
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3c:02:b3:d2:75:86:42:72:48:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=854f1524-4ecd-4cd2-9b81-9707cac4468f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:38:3d:b6:db:6b:21:ae:8f:39:19:84:41:7e:
f2:70:2d:f3:ee:9e:83:36:a3:d5:b5:de:50:ff:3c:
e7:78:c7:9c:d3:6c:38:25:8d:e8:81:57:1c:83:ca:
9f:2c:d0:31:49:b5:4d:af:75:3a:09:13:e7:55:96:
e0:95:0d:b5:ea:39:14:6d:f4:9c:20:e9:d9:5b:4c:
31:01:3b:35:b3:13:bd:87:7d:e8:3c:40:e5:06:01:
3b:55:5e:65:b8:bb:f2:e2:de:13:e9:12:d5:52:69:
f9:c9:b7:6c:4a:a6:4c:75:76:c6:6a:63:37:95:78:
ce:0d:3a:94:a6:90:8a:68:43:c1:20:f5:0a:51:44:
1b:a0:88:c0:00:94:0b:73:3b:cf:af:1a:84:54:a4:
53:86:ab:9c:73:40:bc:24:c8:b2:91:5e:cc:5d:3e:
74:43:4d:11:4a:c8:d8:25:66:eb:64:32:b5:6a:ec:
6a:d4:06:c2:42:2c:94:e1:bf:32:b5:2d:28:95:c4:
5f:21:92:5f:f0:34:e0:95:a6:86:fc:bc:71:47:8b:
56:29:31:3a:de:5c:97:96:f2:10:29:03:09:34:a6:
d0:54:2b:c0:b5:83:67:31:cc:69:b3:e0:19:1d:5e:
42:f9:38:12:67:d7:6b:03:55:bc:e6:52:eb:ab:64:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:46:3D:8A:D7:29:1A:21:69:A6:F0:A3:C5:48:CC:35:15:0D:63:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ecd22543-cbe8-3f12-bae6-4e0ee136c19e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:e5:f2:f8:77:59:7d:c6:1e:c1:9d:4d:f7:1f:39:79:3e:28:
f3:2b:66:16:f5:d0:8e:dd:0f:f1:44:99:a7:5a:66:dd:91:d2:
42:ec:9d:fd:9f:ab:b5:19:fd:c8:a3:17:c3:86:c6:e6:a2:fc:
ca:80:44:96:02:fd:a6:01:63:50:45:16:d4:3a:ed:c9:be:32:
43:b7:94:e7:49:4c:e4:94:b1:ba:f3:8e:37:29:47:73:c3:46:
6c:20:2a:94:d5:25:03:9b:d1:af:da:20:74:dd:7d:40:30:af:
10:86:ce:43:18:48:b6:08:a5:86:e2:13:f2:a7:ba:92:ab:3e:
8a:9d:ea:f7:55:1e:33:d6:76:c0:ae:92:3d:8d:f2:d9:e1:79:
90:a9:dd:cc:b5:32:63:af:c5:81:eb:52:3f:1b:d3:e7:dd:9e:
94:6c:ec:30:5a:fd:ec:15:44:de:f1:c4:3b:d0:02:d6:d3:bd:
d4:44:5e:0b:d1:2a:b6:a1:d9:44:7c:da:5d:3a:13:9b:39:48:
b1:4e:5c:70:25:cb:79:dc:31:82:21:88:73:98:b2:1f:79:fd:
d5:22:a6:8c:c0:0f:41:9a:08:47:d3:95:9a:fe:02:4f:e6:16:
6a:d6:39:1e:70:7f:46:e3:ca:96:c8:3b:3f:99:e9:90:e8:6a:
60:ae:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:07:29 2025 by rpki-client