Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1a66215-4c02-3b9b-9e51-9b08f3d4dd67.roa
File: f1a66215-4c02-3b9b-9e51-9b08f3d4dd67.roa (raw, json)
Hash identifier: 76OKIehDPxqjtN72OwUGPR+CzNMwO+Gszaqvsf3qNb0=
Subject key identifier: 05:8A:A6:24:D3:37:17:8A:0C:64:C2:FE:40:5E:A9:12:85:16:04:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484243030FE28204687ADB7980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1a66215-4c02-3b9b-9e51-9b08f3d4dd67.roa
Signing time: Thu 19 Dec 2024 13:45:16 +0000
ROA not before: Thu 19 Dec 2024 13:45:16 +0000
ROA not after: Wed 19 Mar 2025 12:45:16 +0000
asID: 36629
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:03:0f:e2:82:04:68:7a:db:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:16 2024 GMT
Not After : Mar 19 12:45:16 2025 GMT
Subject: CN=2e899e2b-fc1c-4bd6-82a6-171d6c5d3d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:12:eb:9d:68:d9:18:58:9a:e9:c2:01:60:
81:ad:da:2e:92:d3:d5:c2:06:ae:da:3f:13:d3:ef:
ce:d5:56:53:44:b8:fe:96:be:fd:2c:34:d5:fc:1f:
88:2b:4f:ab:0f:12:bb:ee:33:db:69:c1:4d:28:8c:
32:19:91:2f:94:5d:dd:db:c4:9f:87:af:f4:a4:2f:
f4:22:2d:f1:9d:7c:c0:78:14:52:55:04:07:87:7c:
73:1f:fe:80:68:ec:f1:76:7c:f2:10:5f:20:5b:d3:
ba:a3:89:09:74:0c:47:bd:2f:88:4c:59:f5:41:d9:
26:cb:5f:b3:d9:1b:95:22:48:2a:41:1e:2e:3f:12:
30:7f:17:19:2e:b2:88:8c:46:c5:34:3f:2c:70:32:
73:43:37:40:af:84:b8:13:ec:4b:3a:ec:d9:67:42:
6a:ca:b7:f2:bd:75:4f:fe:fd:0b:6c:2d:bf:98:5f:
47:69:75:a1:fb:45:36:ae:d5:c2:ff:6a:40:2a:e0:
d0:72:ca:28:6b:ad:de:0e:7c:50:d8:b6:98:78:86:
d4:ca:f5:40:05:1b:a3:88:fd:78:32:de:40:54:d3:
91:0a:da:e0:b8:60:28:84:2c:f1:46:62:d5:bf:5d:
27:57:46:0c:b5:40:9a:db:d1:aa:36:4f:cb:f7:2b:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8A:A6:24:D3:37:17:8A:0C:64:C2:FE:40:5E:A9:12:85:16:04:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1a66215-4c02-3b9b-9e51-9b08f3d4dd67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:b6:41:de:f6:b9:98:43:b3:59:37:2d:2c:b9:15:30:e4:78:
cc:4d:81:0f:8b:c5:d3:1f:0d:fa:65:d5:d3:92:65:62:e4:72:
e7:0a:d0:60:d0:65:b4:37:09:1d:bc:7d:35:0e:7c:2f:41:59:
ea:be:68:79:41:fb:e0:99:9c:c6:49:78:ff:67:ee:d8:2e:14:
2e:ea:9a:d5:b1:77:a1:96:8c:7b:6f:b4:a6:e8:95:02:9f:3a:
d3:08:c9:01:89:64:14:67:bb:48:36:6b:bc:10:87:de:c9:f0:
a0:96:7f:89:d6:0d:78:1e:05:05:a1:3e:62:e2:b4:18:b4:e5:
ae:5d:62:0e:30:20:1a:27:a1:c3:02:f9:79:e1:c9:ca:b0:9e:
85:71:43:2c:c5:61:57:95:94:c4:1a:bd:00:66:1a:8b:06:db:
23:0f:9d:60:e1:ee:d3:d8:a6:a7:0d:5a:e8:1e:83:f8:c5:c6:
f6:ed:7f:e8:d5:57:2c:68:96:65:96:aa:44:f6:ac:ab:2c:52:
1a:8d:64:cf:a5:bc:92:90:2f:3d:b8:8a:94:12:4a:f5:d2:e1:
5e:52:ab:8f:ca:18:09:36:58:f1:12:68:4b:d6:fb:91:8d:1a:
45:53:92:36:6e:9e:a7:0e:aa:24:08:36:11:bf:6b:3b:1b:ba:
cb:a5:9c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:41:44 2025 by rpki-client