Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa
File: 29b2130f-629d-3aed-8986-dcb239ea0420.roa (raw, json)
Hash identifier: DBkCOXXTcYJYnFDSM1vH2U5avJQcXZk1sB0ZXzHespE=
Subject key identifier: EE:2F:60:A8:0F:0A:2C:45:86:16:F5:E5:A0:B0:23:60:DF:9D:54:3A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849203C8063145043972B013300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 396592
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:80:63:14:50:43:97:2b:01:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=61a9df2e-b1bd-4e01-834e-5195d7fe710b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:e1:b6:7f:79:f4:c7:ae:94:25:3a:75:64:
28:58:32:96:04:e0:74:1d:33:5f:bd:61:6e:6b:2a:
b9:a8:5c:8b:3b:50:3a:85:3d:73:04:89:35:f7:53:
20:d1:d8:a5:cc:77:7e:91:77:49:fb:a3:b9:b9:89:
42:e9:e8:9d:6c:0b:a3:f2:26:3c:ec:9e:14:03:5e:
af:c5:b9:83:70:02:80:3d:1d:10:1c:0f:23:a0:a0:
79:0a:c1:19:7a:8d:3e:ef:89:82:f7:25:2b:c6:5d:
f8:0c:f1:30:41:7a:f7:5b:f6:3f:3c:c7:bc:2b:d7:
a7:9c:2c:cb:76:7d:1c:54:e9:ef:d9:60:7d:1f:24:
21:af:8d:13:b1:22:57:4e:19:4d:1a:dd:2d:63:a3:
cc:e3:80:cb:94:14:23:e5:ea:53:83:aa:b2:01:32:
ef:9a:d8:4d:d2:9f:81:c0:dc:7b:9a:a7:2c:72:88:
b6:83:88:2d:be:d6:16:92:40:bc:02:eb:1e:f1:e8:
ac:9e:62:38:1a:99:41:26:55:12:f0:b6:f9:f9:33:
5c:09:21:3d:ec:24:a6:ac:f7:26:0d:4a:c3:fc:97:
17:0a:c2:00:cf:8c:af:27:ac:1c:7f:ff:ee:8b:aa:
07:58:97:e0:f9:ff:ba:3f:78:a5:81:6d:6e:5a:47:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2F:60:A8:0F:0A:2C:45:86:16:F5:E5:A0:B0:23:60:DF:9D:54:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:39:be:75:4e:b6:64:f2:5b:08:5b:1b:38:c1:5d:75:82:f1:
c0:92:6c:b7:ac:42:e9:b8:a0:52:a6:af:df:0b:6f:6a:4b:d8:
c6:fd:44:9a:00:4b:83:1f:6c:b4:a1:84:4a:9f:b2:01:06:db:
82:80:4f:3e:86:82:d3:70:28:77:6f:d2:e4:30:b2:d7:7e:62:
95:84:49:a6:e8:2d:d3:52:c0:0b:98:b9:6c:44:2d:df:be:f5:
76:4e:18:6f:4b:f6:db:30:58:e1:de:a2:0f:6e:c4:3f:59:f6:
50:c6:dd:57:19:d0:1d:08:64:a9:17:6f:94:12:50:8b:2f:ef:
64:09:e0:b5:5f:6e:69:2e:fb:bb:7b:14:e6:66:92:85:99:e1:
91:9e:b2:8f:9a:ea:36:db:24:1d:d1:2f:78:ea:c0:fa:f9:c1:
01:3d:1b:b5:7f:46:b3:d9:ae:c0:7c:7a:81:7f:58:40:d5:94:
28:82:bb:75:47:90:11:d8:eb:2b:9d:53:5a:ca:a2:1a:e4:e5:
46:ce:23:96:7e:1c:09:c3:e0:c9:e6:3a:33:d0:cf:83:14:9c:
3e:09:2d:eb:99:f7:c8:ee:94:fa:5a:9c:0e:84:1c:e0:a5:9f:
cc:9d:77:76:87:26:83:d8:57:02:21:a1:9e:7e:14:15:17:e8:
be:9f:7e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:58 2025 by rpki-client