Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ac3232-d363-39a6-b685-525db42b7d98.roa
File: 18ac3232-d363-39a6-b685-525db42b7d98.roa (raw, json)
Hash identifier: IIzXVHCgsBX9uhUx2k9puj7fFnYs/xpMBPl1mZLiaIU=
Subject key identifier: 29:F7:6B:2C:BA:6D:CE:06:AD:01:5E:72:ED:58:4B:1A:9E:DF:26:32
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C04D29CE5D016667DD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ac3232-d363-39a6-b685-525db42b7d98.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396616
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c0:4d:29:ce:5d:01:66:67:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=a9e4bfe0-dd43-4e9b-bf1f-873941b2370b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:73:ce:0f:d7:7b:9c:bb:c3:e0:eb:4d:a6:
2e:c3:c0:c1:26:e5:f8:14:83:a2:8d:12:89:8d:22:
ff:c0:dd:02:1e:05:48:92:e4:8e:ca:14:35:a5:9a:
f9:16:b9:02:ba:ea:39:04:37:dc:22:d3:4a:ef:37:
62:bd:0b:ad:d0:09:1e:f6:ad:ec:92:18:25:ec:54:
0f:d9:47:55:8b:76:13:78:fb:a2:73:fb:9b:7e:c5:
73:12:ff:f8:76:93:10:91:df:0f:83:f0:50:87:b3:
df:49:2e:7d:61:f0:b8:49:0e:44:b4:28:9c:52:d2:
44:71:d0:97:b8:9f:83:e3:f3:31:cd:a0:f7:10:0a:
8a:6e:94:1e:06:14:16:e7:08:77:1f:6b:bd:bf:07:
c9:00:6f:85:6d:a8:cb:28:5a:b1:ac:6c:63:8d:b4:
86:44:f2:e5:79:ed:0e:55:d7:6f:06:2f:79:34:bf:
7c:cc:dc:df:74:c2:14:db:56:6e:09:f7:33:61:73:
17:b3:1d:7a:ca:fa:df:de:27:1e:87:e9:8b:2e:ed:
76:a7:1d:94:ed:7c:3a:91:e3:56:83:1e:1d:7c:85:
ba:e7:bd:fe:dc:88:ee:44:26:40:ef:32:25:af:86:
e2:78:a8:44:7d:63:02:af:8f:95:cb:f2:e9:ce:50:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:6B:2C:BA:6D:CE:06:AD:01:5E:72:ED:58:4B:1A:9E:DF:26:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ac3232-d363-39a6-b685-525db42b7d98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:24:a1:e8:d6:7d:bf:4e:db:25:28:69:c5:bd:73:59:51:9f:
e2:37:b7:68:e3:30:07:c9:a5:f0:7f:24:67:09:48:f3:6d:f7:
bd:e1:a7:a7:4c:d0:ea:99:a9:47:65:f8:f9:ce:0f:9a:2c:32:
ac:2b:f2:67:53:0e:c6:6f:00:24:b6:67:1e:a6:a6:83:0b:d4:
26:94:a1:6f:1f:54:06:44:2d:32:75:ba:5a:3f:79:36:f6:0a:
6f:b5:ef:ce:36:3a:73:af:c1:12:9b:57:a1:c8:84:87:a4:8a:
43:a9:81:05:75:1d:6b:ab:81:93:b7:59:2b:7f:d1:1d:5e:f1:
a7:1e:83:bc:d8:76:1d:14:34:51:78:60:a7:7c:6c:d2:75:4d:
1f:ad:83:5b:0f:0f:06:00:de:c1:8a:ab:13:d0:57:2b:65:bb:
bb:c2:90:7c:fb:bf:12:ba:de:36:c7:07:02:57:a4:ca:5f:12:
f9:79:6a:68:a4:04:67:bd:29:90:ba:5c:4b:11:f5:03:0e:70:
9f:c5:8c:c9:35:a9:d6:5f:b0:cc:4e:5b:29:c6:c1:15:cb:9c:
af:6c:9e:83:2c:03:14:0a:2a:73:18:10:bf:6a:4c:2b:a0:5a:
2c:70:fc:e5:b4:34:09:4d:db:71:5d:ad:25:d5:01:42:43:2c:
bc:5c:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:36 2025 by rpki-client