Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a5e1e53-2552-322e-a8b1-d2ab5c33a9ec.roa
File: 2a5e1e53-2552-322e-a8b1-d2ab5c33a9ec.roa (raw, json)
Hash identifier: tmrqj9HD0kN38w/kyxnQmzRG/nEMuXC2s9NpxSyzOtI=
Subject key identifier: 1B:D5:13:BC:83:29:FA:92:E8:AF:DE:A6:BB:8F:EE:48:44:3C:5D:E8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F64975C81CB597E28780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a5e1e53-2552-322e-a8b1-d2ab5c33a9ec.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396584
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f6:49:75:c8:1c:b5:97:e2:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=8d4fcc50-5ff3-4269-ab90-7790d1602ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:d1:ee:78:63:b1:0a:1d:86:2f:19:af:07:
d7:88:ad:fd:f1:ed:c9:73:4f:2d:9f:b5:95:96:76:
58:c2:2a:c2:e6:30:3d:99:15:95:0e:3f:16:16:47:
2e:ab:4e:95:50:76:0a:51:f6:88:3c:37:5d:b6:d2:
51:24:64:1a:c1:c6:00:6c:15:f1:1a:f8:46:dd:f4:
dc:cf:dc:7c:63:d0:07:df:80:ed:25:85:eb:10:28:
8c:01:76:b9:60:42:94:43:89:31:36:88:d2:3b:16:
3a:fc:b3:b7:5e:e3:e5:e2:b9:14:09:20:64:64:9a:
19:e5:77:5e:89:ff:2b:b8:f5:68:5e:b7:18:57:af:
1b:ad:3e:b0:2d:25:de:ae:19:49:a9:05:8f:cb:3c:
c2:43:db:fd:92:0b:c4:0a:f7:5b:f5:f6:92:2d:26:
5d:b1:ef:fc:ea:5f:8e:20:9c:04:bb:e8:00:16:ac:
e2:e8:e8:c3:c9:7c:41:13:a7:b8:fa:5c:81:4d:e1:
25:e1:74:69:3d:d7:d6:fb:9b:d7:ab:58:49:5e:52:
3a:18:13:dc:1c:75:a3:c3:c3:f3:13:f8:03:ac:6a:
f0:31:3f:d4:7f:69:4b:63:88:4c:62:8a:f7:01:d2:
52:35:70:df:f4:98:8e:60:3c:0b:37:43:8f:e2:e8:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D5:13:BC:83:29:FA:92:E8:AF:DE:A6:BB:8F:EE:48:44:3C:5D:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a5e1e53-2552-322e-a8b1-d2ab5c33a9ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:f5:03:ab:02:9c:c7:35:b2:55:22:a1:6b:fe:b0:05:7f:80:
ae:26:a9:b4:78:a5:fc:ef:2d:f0:9d:39:6a:26:1c:e6:32:fb:
7d:6e:30:ee:67:9c:40:83:b2:4b:13:a3:7b:00:74:fb:8a:d9:
03:f7:eb:28:97:74:0f:d1:ab:05:4a:5d:4f:37:46:f7:84:4f:
30:0d:ea:93:0b:dd:49:4b:ca:91:cd:b1:ff:b4:9a:12:ea:bf:
60:95:17:68:3d:37:2f:28:a6:39:bf:e7:72:19:4b:67:14:5b:
ac:ee:3b:ac:80:8e:27:3c:b9:18:72:44:dd:d3:80:56:3b:e0:
c9:5a:6a:63:5d:4d:62:cb:0a:14:c8:b5:2f:f6:b8:92:df:14:
26:91:e0:df:d0:eb:a3:b1:1e:c6:74:9e:68:77:08:a7:c3:69:
43:dd:8c:e7:59:1e:db:38:b8:fc:5c:0a:e2:50:5f:34:97:0b:
46:77:2a:f2:8c:9b:9d:a3:2e:93:8b:c8:35:5a:42:63:f6:36:
1c:9c:82:94:c9:a1:bc:8c:9e:1d:4b:a5:7f:35:91:87:e0:7b:
fe:fa:be:03:54:64:84:c4:80:04:cc:f7:12:eb:ce:50:b3:51:
a7:c1:fd:ed:f3:e1:d8:3f:c2:75:75:a2:81:90:de:d9:54:fc:
ce:85:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:08 2025 by rpki-client