Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4322ee29-42d4-35c7-a4f1-33b9e0c0de05.roa
File: 4322ee29-42d4-35c7-a4f1-33b9e0c0de05.roa (raw, json)
Hash identifier: cqrR4aZJMM0fM/zfBo6ivTB2Xt/VDXOz4SwPtG8yyA0=
Subject key identifier: 00:A3:D8:8D:8D:54:8E:55:73:4D:AE:A2:CD:53:10:37:C9:EF:F1:4B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B7844713320EB2EDEAE35B7C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4322ee29-42d4-35c7-a4f1-33b9e0c0de05.roa
Signing time: Thu 30 Jan 2025 13:46:20 +0000
ROA not before: Thu 30 Jan 2025 13:46:20 +0000
ROA not after: Wed 30 Apr 2025 12:46:20 +0000
asID: 396579
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:47:13:32:0e:b2:ed:ea:e3:5b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:20 2025 GMT
Not After : Apr 30 12:46:20 2025 GMT
Subject: CN=8a351396-be50-48f0-bc27-0b868b2e54e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:dd:f0:6a:c2:a6:2b:f2:fd:da:bd:41:7d:
dc:9d:ad:35:06:8c:05:cf:0c:76:61:85:83:51:98:
4b:fb:18:22:d9:4b:56:4f:f0:76:26:7d:b0:46:1b:
f9:1c:49:c7:0f:48:2e:b5:75:35:aa:d5:04:1e:fd:
0e:d1:d5:52:44:14:68:ef:8a:90:a9:4f:18:a3:62:
bb:09:a8:82:d2:cc:58:63:26:b3:ce:a0:26:0c:e7:
1b:41:72:5b:dd:18:ee:b7:2c:87:07:db:be:93:bc:
09:4a:57:6e:5f:db:b7:76:95:f8:04:de:27:89:3f:
e1:28:a7:e2:31:fa:f9:b9:35:b1:e0:a9:88:df:6c:
de:fa:a5:dd:f6:07:29:40:a5:4a:ef:10:87:c1:e4:
32:0c:db:64:5b:f2:b0:9c:a4:25:c0:43:b1:b7:dc:
e8:05:74:5e:12:39:19:fa:f2:6b:8c:ca:d3:39:99:
38:7b:ff:34:87:f1:10:ac:4c:08:d0:b6:85:ff:99:
eb:58:ff:c7:23:22:70:cd:e3:a1:54:f0:d6:1b:fd:
1e:0b:e5:03:cb:fe:a1:64:77:d0:00:83:13:ef:5c:
e4:af:01:08:da:48:6d:b6:ee:b6:15:a9:f5:49:e9:
89:42:09:0b:a4:c5:68:85:ad:6d:e0:7f:c8:bb:0c:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A3:D8:8D:8D:54:8E:55:73:4D:AE:A2:CD:53:10:37:C9:EF:F1:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4322ee29-42d4-35c7-a4f1-33b9e0c0de05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:ae:a7:9c:d3:2b:85:3b:49:9e:a9:f4:12:46:c7:23:e8:8d:
5d:30:fd:c8:ec:aa:48:c0:dd:a5:30:80:83:37:62:67:5e:6b:
f2:b0:da:a0:c1:53:ca:9e:23:66:e0:e9:f2:78:31:26:92:97:
36:e0:e9:32:d0:2a:20:4f:04:ac:56:25:d4:c4:10:6f:28:b3:
b8:af:89:76:b6:26:23:7e:6d:0a:01:aa:77:d7:a5:e2:b4:d1:
02:b4:89:78:40:34:85:23:3e:9d:2b:c8:de:e7:12:9a:0e:6d:
bc:e5:87:a5:27:4d:69:f6:35:43:3f:fa:98:39:84:6a:45:04:
52:b1:bb:a6:4f:ec:71:53:91:62:4c:52:d3:90:cf:fa:5e:16:
07:16:12:8e:35:fc:ea:2f:74:61:ae:26:d9:58:8c:2b:1e:68:
d6:88:f0:60:77:6a:2a:62:62:25:e7:a0:c5:93:fd:ad:0d:eb:
f1:d9:8b:36:2c:3f:94:b4:dc:c1:a5:d2:47:17:47:55:02:43:
8a:1c:d9:bb:e8:dd:23:c4:06:ac:9f:d8:c6:ea:fc:f2:24:4e:
89:31:9f:78:8d:19:da:6a:57:c4:22:b2:3a:be:e9:4c:0a:a1:
68:69:3e:e8:30:1b:d9:59:91:49:76:ec:b0:c0:4c:b7:52:b8:
50:28:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:05:44 2025 by rpki-client