Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc88b38e-d370-3e35-a09d-e78b6f27af31.roa
File: fc88b38e-d370-3e35-a09d-e78b6f27af31.roa (raw, json)
Hash identifier: zmLeKeZXdPYD8IZcyIcbAIBA8HR+kTdJppGt95h2dyM=
Subject key identifier: BB:E0:6C:AB:E5:38:EC:45:04:73:EF:F9:48:06:62:8A:30:C6:9E:85
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858489A3B3C4D8D9B87E43C255B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc88b38e-d370-3e35-a09d-e78b6f27af31.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396584
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:3c:4d:8d:9b:87:e4:3c:25:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=40dd69db-9bc6-403c-91fc-1e24a3e6c431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:d2:4a:ac:e3:d3:7e:00:0b:c3:d3:b0:c5:
b9:9a:1c:90:9d:f2:33:1e:3b:7c:de:b1:c8:9f:5e:
82:01:e9:96:93:fe:33:57:c0:96:6b:65:d5:c5:62:
07:07:95:1d:ba:f2:4d:39:5d:a0:e1:df:d6:23:57:
69:ce:97:d0:41:52:40:17:bf:24:9f:0c:bb:33:97:
f1:1e:9d:0c:56:2f:d2:67:98:90:76:af:10:3c:44:
0c:ba:9f:0b:48:14:6f:fe:fb:55:4b:29:15:9f:b9:
ed:9c:88:8c:a2:99:52:95:f7:42:e1:ab:aa:76:6d:
6a:2b:83:47:5c:cc:ae:c4:5c:83:8f:97:4b:3d:f1:
a8:db:59:6f:c5:68:e2:a0:de:38:13:9e:ef:6d:3d:
88:68:3c:9a:2f:85:4e:63:96:6a:f8:d5:65:10:a1:
e0:67:5a:13:40:23:75:92:52:af:ce:3c:8d:0c:78:
f1:33:a9:5e:23:86:9a:25:85:39:2f:3d:3f:a8:14:
35:87:8d:25:30:5b:c7:e4:ac:86:57:1a:fa:c8:1a:
a1:d4:13:44:3e:e8:64:a8:b9:3c:b0:34:5d:71:a6:
89:d0:93:bf:22:49:b1:98:d0:25:05:54:06:66:f4:
88:2f:5f:95:fe:e4:34:ca:64:b0:09:79:dc:37:ec:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E0:6C:AB:E5:38:EC:45:04:73:EF:F9:48:06:62:8A:30:C6:9E:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc88b38e-d370-3e35-a09d-e78b6f27af31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:a3:6b:1b:21:3e:69:2b:61:e9:2d:e7:d4:0b:05:c5:e2:6a:
29:cf:b5:df:a5:03:47:04:a2:2b:1c:a6:85:ee:6d:51:02:f0:
f4:d7:50:aa:5b:a4:87:74:be:e5:14:02:43:51:b0:95:d3:01:
be:1a:51:a4:bb:61:7b:f4:a7:98:1a:ad:55:a4:b0:17:e4:1c:
ef:a7:73:fa:17:88:8a:69:af:2f:40:c1:8c:1f:8f:24:55:42:
6d:91:6c:7e:83:70:1a:e7:68:4b:cd:d9:cf:73:eb:eb:0b:ad:
e4:07:48:bc:c7:24:b3:ee:da:71:e5:05:82:48:af:97:70:b5:
6b:09:d3:46:53:42:b7:b7:e8:2f:02:d3:b1:6a:80:2a:b7:79:
90:a9:d4:27:e0:96:e6:5d:37:6f:9b:65:65:ae:c4:ea:79:ba:
2e:69:f7:8c:08:7c:08:df:1b:b0:ac:75:ad:53:80:88:d7:56:
9c:3d:64:4d:88:8e:12:ef:7c:1a:6a:e0:b5:e5:16:ad:fe:21:
fc:15:3a:2a:f9:66:a8:c5:11:2d:52:0f:d1:03:c6:a5:f7:26:
ba:b8:88:ce:e0:2d:6f:5d:11:37:97:51:36:d8:33:65:ab:5b:
e1:ca:48:9c:37:70:56:4a:53:9b:b3:c3:2f:1c:33:62:f1:14:
0f:ae:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:32:52 2025 by rpki-client