Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2ac538-23c3-3ede-b165-61405b0b3ea4.roa
File: ef2ac538-23c3-3ede-b165-61405b0b3ea4.roa (raw, json)
Hash identifier: eAyjIgodnnJyxLzkuFCPikfGAdAy/m8W9YAyX+5Bth0=
Subject key identifier: 6D:75:0B:91:9D:A9:6D:3F:A3:09:FF:10:2A:05:20:84:B6:B1:19:B9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3DC2831C0BC8E97CEC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2ac538-23c3-3ede-b165-61405b0b3ea4.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 32651
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3d:c2:83:1c:0b:c8:e9:7c:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=012eb27c-9126-4f62-935a-ae6d19764c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c1:70:70:e2:95:ae:38:34:36:fc:ac:f3:9e:
c7:08:02:49:18:d0:28:21:80:97:ee:4a:7e:d1:e2:
bc:c6:a8:0e:4b:00:2c:41:61:2e:2d:2d:a3:ee:a6:
9b:ac:b0:ad:9b:ff:7f:51:46:17:ec:e4:a7:d9:6b:
cb:3f:9f:66:07:b6:94:7c:dd:82:46:a3:d7:e3:3f:
05:ac:e9:1b:31:63:69:96:39:56:af:18:b5:06:86:
68:4e:e4:33:2d:5b:6a:38:16:60:b4:2d:61:e8:f2:
c0:ce:af:51:6f:9c:3c:13:09:7b:1e:4d:33:f2:5c:
02:60:03:5e:09:fd:73:d7:28:65:a7:12:29:40:9b:
62:2c:dc:bf:35:1d:44:23:3d:86:f5:a2:03:5a:a7:
65:29:67:5c:b4:cc:35:12:8e:4e:3d:21:4f:e4:63:
82:62:01:c5:19:e7:cb:e1:4b:b2:41:ad:cc:88:c4:
2b:6d:28:7f:6a:60:f5:c5:d6:1a:55:5d:ad:96:06:
1d:da:46:ff:9e:91:b6:f3:70:64:30:0b:0c:74:2d:
eb:8a:47:a5:3a:8d:b9:94:3d:f5:01:95:27:b3:ab:
9c:eb:90:7e:7f:3f:67:2d:7d:bf:62:8e:58:82:8f:
85:60:47:32:f0:54:f5:e5:58:30:db:41:34:5d:d9:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:75:0B:91:9D:A9:6D:3F:A3:09:FF:10:2A:05:20:84:B6:B1:19:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2ac538-23c3-3ede-b165-61405b0b3ea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:5f:7b:02:c3:9f:e4:60:5f:fd:8f:5f:0b:74:ae:d9:52:9a:
bd:67:05:03:51:56:97:9d:36:96:2f:b6:6f:85:28:e4:6d:36:
77:c0:d0:cf:51:b3:e1:d8:dc:05:4a:8b:d6:a5:ab:3b:06:52:
01:86:dd:5c:3b:0b:84:a6:07:04:19:e2:35:e8:f8:88:8e:a3:
07:62:4d:cb:1e:c8:0e:a4:03:0e:1b:f2:0e:3c:14:f6:5c:1d:
c6:3d:8e:94:aa:0b:21:11:36:b2:a5:57:d7:c5:69:5e:60:83:
b3:e1:89:97:7a:aa:b4:e4:f7:a6:06:d9:47:f3:2d:e6:49:0a:
bf:fd:90:4a:0e:8f:8b:cf:79:4a:8f:67:e1:5b:2a:42:e6:cf:
26:33:41:d0:d8:0a:58:86:00:db:1e:04:f9:5e:c1:6d:a4:70:
4d:aa:ad:bc:3c:7d:d4:fb:93:bd:88:6c:e5:8c:60:94:a2:45:
b6:14:75:56:22:1e:97:06:96:27:5c:ee:69:bb:dd:26:60:0f:
af:86:c3:19:61:b9:c4:48:d8:f0:a3:53:19:6f:ca:fc:d1:13:
5e:b7:dc:3e:0f:fe:e1:c9:73:8f:2b:3e:54:37:15:0e:50:ba:
a0:8d:23:e0:ef:8d:5d:ad:87:d2:ca:85:17:c6:b5:d9:d0:46:
69:f2:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:14:47 2025 by rpki-client