Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35e8543b-18e0-3253-a0d9-8f6ccf9da3f9.roa
File: 35e8543b-18e0-3253-a0d9-8f6ccf9da3f9.roa (raw, json)
Hash identifier: kiGZTcvz6wUnedsxPALSGc8ts404tYkH+eY17E02/g0=
Subject key identifier: 47:36:3D:89:B3:17:26:F0:EC:E2:2A:B1:04:2F:C4:7E:20:47:A9:78
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F991B88401737340DA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35e8543b-18e0-3253-a0d9-8f6ccf9da3f9.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396612
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f9:91:b8:84:01:73:73:40:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=c1c75407-c557-4fcc-ab4e-507ae1764332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:c8:bc:a6:15:5c:8c:a1:8b:b8:63:c9:43:
21:be:ed:94:4e:e8:10:b4:9c:b1:a6:7d:d2:5d:d8:
31:46:10:80:4d:20:4f:75:47:23:8a:15:94:7d:98:
74:bb:7f:67:f7:7c:ca:35:0c:0c:da:69:8d:09:ed:
e7:e0:15:6b:30:48:32:3e:0d:51:54:bf:7c:fa:ef:
71:da:5a:bd:18:49:82:39:ea:22:a0:37:63:ce:ef:
54:40:e0:1f:39:e3:ec:2a:29:fb:b6:31:51:3c:0c:
f5:92:18:5c:97:79:bf:98:cf:ab:9a:df:a4:3f:24:
5d:6f:21:b7:93:49:a1:fb:06:73:d6:7e:03:17:7d:
c5:c1:3b:83:5a:59:42:fd:1c:03:c5:94:5d:1f:6c:
47:de:83:dc:41:12:6f:8d:72:e6:8e:71:b4:f2:18:
e9:21:45:e8:d2:1c:e7:1f:7a:ab:38:44:df:e9:36:
bc:93:a9:c4:f1:39:a1:50:6a:70:23:98:30:f5:4c:
a7:75:18:bc:16:df:ff:ba:e3:21:42:7b:4a:9d:7e:
c1:30:73:49:43:4f:d6:69:61:73:1d:b6:47:70:55:
2c:cb:19:67:08:e5:1f:1d:05:58:79:71:97:50:c8:
d6:c9:9d:5b:79:10:de:db:81:18:cd:ec:a6:df:fb:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:36:3D:89:B3:17:26:F0:EC:E2:2A:B1:04:2F:C4:7E:20:47:A9:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35e8543b-18e0-3253-a0d9-8f6ccf9da3f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:9d:68:f5:ac:f4:7f:bd:95:ac:b9:69:e0:7d:af:df:78:e3:
1b:23:66:6b:38:77:4a:78:8e:1d:e8:4f:fb:69:18:66:67:eb:
85:1b:8c:e2:f8:d1:36:5e:a1:bc:9c:29:11:d6:5f:2a:e0:20:
3d:6f:d0:37:f9:b7:ae:fc:55:86:fa:96:05:8a:21:3a:66:66:
d6:c9:a1:d3:cf:d1:20:84:3d:0b:9f:1f:e3:86:af:61:95:8c:
5c:0c:52:87:30:04:b9:36:40:e2:df:d0:f1:a9:33:10:2d:d6:
bf:96:49:01:53:d1:8a:fd:0d:57:37:fe:4b:a5:09:7f:21:4b:
65:c8:2b:df:d9:a8:e1:b2:4a:2a:a4:18:7c:63:80:31:ef:06:
eb:6b:3e:e5:4b:7e:89:ff:f1:41:a2:2d:1f:07:b4:0e:8c:eb:
af:cf:5f:3d:5f:f2:2f:5b:08:2b:c1:dd:eb:de:53:78:be:ac:
0c:e8:be:c4:d4:8d:a2:33:ea:8f:68:09:88:dd:fc:24:12:e1:
36:0d:5d:6b:de:3d:43:b3:13:78:8f:9b:03:66:a3:58:5c:92:
61:14:6f:89:a0:ee:a8:90:79:11:2c:15:de:31:28:ce:a8:c9:
07:eb:15:c7:05:b4:3d:51:08:b9:23:3d:25:7c:73:a2:34:e0:
ab:af:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:38 2025 by rpki-client