Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35a11cd7-771b-3a52-8f3c-64666f7a03b8.roa
File: 35a11cd7-771b-3a52-8f3c-64666f7a03b8.roa (raw, json)
Hash identifier: p9M32addDp+O1WSdtrviaLmVld5oOrXsVXtbjUPTquE=
Subject key identifier: 2A:B1:3B:97:07:83:0F:2F:EE:B0:06:17:34:CD:4D:98:13:9B:56:7D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492CB239DA7EFD5FC7878F5D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35a11cd7-771b-3a52-8f3c-64666f7a03b8.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 36616
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:39:da:7e:fd:5f:c7:87:8f:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=3cf4fbef-fb48-4eba-9fd7-c7724e15b2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:40:c0:b2:dc:0e:9b:a4:92:2d:e1:0d:d0:
99:4f:c7:26:cb:5d:44:04:51:b0:d3:fb:ea:91:b1:
c9:c2:df:2b:3c:d4:d5:25:72:7c:be:fb:25:2e:b2:
ac:52:a6:65:73:34:52:1c:60:86:dc:78:5d:04:53:
cb:f5:1c:f8:a3:ee:db:14:2d:9e:c1:50:eb:1a:13:
a9:1a:e3:71:c0:16:6c:c8:27:e9:56:7a:58:d4:1a:
c1:bb:9d:0b:28:dc:6d:e1:ad:24:2a:ae:ae:0c:43:
30:ea:6b:07:68:da:5d:e7:97:50:f2:0d:21:67:42:
d8:b1:c6:74:4d:ca:1e:4b:21:b3:1e:b2:f7:74:8f:
f2:60:d1:a1:9c:4d:17:45:55:bc:28:59:7c:81:da:
5e:51:60:37:f5:d5:d9:86:ac:56:ff:95:df:37:f1:
a1:29:8f:1a:43:40:36:4f:f7:db:36:bc:72:25:29:
8b:18:fd:a3:58:8e:1b:53:8c:6d:85:36:e9:39:4b:
8a:af:a5:f0:55:31:75:c8:cf:52:3d:42:7f:88:2f:
49:af:dd:db:f7:cc:ce:9e:f2:c3:fa:ae:e4:fc:c2:
49:a0:c6:ea:da:2e:e1:a1:3d:a8:5e:9d:09:c4:64:
e2:7c:e6:d5:6b:8e:a1:45:9b:aa:df:20:03:f9:58:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:3B:97:07:83:0F:2F:EE:B0:06:17:34:CD:4D:98:13:9B:56:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35a11cd7-771b-3a52-8f3c-64666f7a03b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:b6:7d:ca:de:f8:19:c0:f0:7c:6f:1b:5c:a5:e2:7b:73:bf:
f6:11:d2:47:5e:b0:4d:fa:28:58:dc:70:b4:8d:b4:f1:d5:f8:
ef:6c:cf:60:69:86:b0:93:3d:eb:bc:1b:3d:0f:e8:b8:aa:22:
63:e7:4b:2f:99:54:ac:e7:83:20:bb:5b:fa:58:04:7e:6f:90:
62:7c:93:74:87:79:f9:3c:06:6b:d7:f5:d4:89:16:e6:ae:e7:
8c:7e:e9:fe:e0:ac:e2:6f:7b:7b:ed:f6:db:04:08:91:b4:b9:
b9:84:64:08:23:f7:44:19:d2:77:65:51:6a:78:85:5d:f0:54:
27:cc:59:cf:b2:f5:c5:5d:ac:58:c4:59:25:44:81:89:a3:a1:
8e:9e:00:37:51:6d:4f:73:a2:c8:6e:61:88:88:72:49:73:77:
d3:48:28:39:c7:d8:0c:7f:ff:cd:18:0d:da:17:2a:a7:2c:d3:
e3:19:8f:15:d2:11:69:1b:17:71:64:3b:59:7e:01:84:a9:6d:
a9:05:2b:95:1c:94:2b:38:c6:54:f4:5f:85:9c:1e:a5:92:11:
7b:3e:00:50:fb:bc:a0:1d:04:37:27:f9:8f:46:09:dc:d3:1f:
51:72:64:9f:f5:68:e6:83:e6:60:bf:27:f8:dc:e3:e0:2b:6b:
b6:f0:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:11 2025 by rpki-client