Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/140d8668-c65a-3f9f-9a3c-c5a99f459874.roa
File: 140d8668-c65a-3f9f-9a3c-c5a99f459874.roa (raw, json)
Hash identifier: 2GDUXLUXPMGdM81GzTVHmIqR3GxFthqicy0dyWaxktk=
Subject key identifier: A9:7F:D0:6C:E9:7A:F8:28:EA:D3:46:A8:32:F9:86:05:E4:D6:8D:7E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183EC2FA136CDB8EDBDC500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/140d8668-c65a-3f9f-9a3c-c5a99f459874.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 397199
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:ec:2f:a1:36:cd:b8:ed:bd:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=11839f8a-185e-4f6c-a1de-9166c7ebddb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:07:b2:05:20:65:a8:62:6d:87:90:99:29:
65:23:c5:1f:02:f3:00:59:2f:81:a6:eb:5d:94:91:
e4:10:aa:98:64:27:c4:14:03:e0:7e:f2:9e:e7:ff:
b7:b7:9f:33:fa:7b:d2:3f:d7:eb:5b:4f:72:90:7c:
f4:6c:fc:16:d2:49:57:48:c6:49:94:d9:36:01:ed:
aa:b6:af:09:d4:66:83:04:04:77:c9:4c:2d:b2:b5:
93:9a:1a:7b:28:57:b3:f9:74:df:a9:34:34:fe:b1:
6c:e6:76:11:c6:a0:17:81:a4:70:1c:d5:71:c4:6f:
58:32:42:b8:c5:e8:92:a1:63:f4:65:29:b8:a8:b2:
47:40:08:cb:ca:0d:91:cc:67:0a:a6:f9:4a:d8:ec:
2e:8c:14:2b:d9:e8:38:e4:8c:14:08:59:b3:16:7a:
e4:23:e8:e3:10:fb:82:db:7f:a4:2d:20:b1:ad:62:
26:46:a0:62:51:df:93:f5:fd:5d:57:77:50:88:2e:
12:3b:be:7d:6a:b6:1c:74:12:0c:2f:c2:df:fe:00:
54:0e:70:fc:48:28:25:29:3b:19:f9:63:60:7d:0e:
0f:93:c6:ed:20:7b:79:25:8b:57:5e:65:cd:d9:81:
55:cb:4b:0c:a0:61:49:0f:1d:06:36:62:a2:56:65:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7F:D0:6C:E9:7A:F8:28:EA:D3:46:A8:32:F9:86:05:E4:D6:8D:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/140d8668-c65a-3f9f-9a3c-c5a99f459874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:f8:d6:fb:f9:d1:52:2f:56:4b:f5:a1:57:e0:66:41:bf:05:
52:84:5a:c1:8e:5a:5f:62:b2:8d:64:88:17:36:5d:c4:b1:75:
ba:2e:2a:7e:f7:14:ef:a6:34:e1:c6:bf:5e:5e:7a:8a:1c:02:
4d:b1:7a:5c:45:7e:0a:ad:ee:0a:83:a3:b9:a7:f0:7e:12:7f:
42:48:c0:fe:b3:36:e1:08:d2:fa:53:f4:12:e4:e8:61:e2:7a:
19:d1:76:70:e7:4d:01:f6:76:2d:c5:5c:4c:0a:52:3d:49:7f:
d5:99:fe:b3:9a:da:14:3e:d6:88:a1:2b:df:59:20:88:36:01:
b3:38:49:c9:aa:f2:ca:f0:9f:76:13:aa:85:01:2e:c4:51:1f:
fe:35:0b:6c:aa:1e:ac:da:87:9a:4b:99:55:91:16:b0:13:11:
8f:27:9b:a2:e6:95:55:fa:bd:2b:d7:f4:49:a6:93:9e:ef:b7:
4a:3f:d9:91:b6:5f:31:7d:3e:de:e1:97:d4:93:45:37:ae:e6:
fb:e6:6a:0d:47:e4:96:67:5f:25:dc:38:40:af:98:80:a7:a3:
ed:5b:1d:c8:49:c8:e7:dd:a4:dd:1b:8c:62:cb:2b:81:a7:3d:
c8:e1:2c:b7:5c:0d:8c:cb:0b:11:ad:e6:16:4d:3f:6d:98:60:
ab:0a:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:34 2025 by rpki-client