Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cbd4920-524b-3082-ab79-21b2a53c11f6.roa
File: 4cbd4920-524b-3082-ab79-21b2a53c11f6.roa (raw, json)
Hash identifier: PMByOTSZBH/+AWNE5QgOxaavjvQfODMOvuMtf6k4Pi4=
Subject key identifier: 87:17:37:21:15:52:BE:DA:C1:C2:CA:BA:7E:23:E8:F5:CA:5D:DD:93
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492CB23C5CEB1D7C960C8C6100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cbd4920-524b-3082-ab79-21b2a53c11f6.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 396567
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:3c:5c:eb:1d:7c:96:0c:8c:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=5a168e74-3beb-4c70-9f31-1d920df48b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:ea:ac:27:49:f6:ea:3b:97:eb:28:4a:8e:
c7:e7:43:9f:46:18:5b:8b:4c:51:6c:0b:0d:5b:93:
31:fe:39:1b:50:9c:df:c5:21:3c:44:40:b5:4f:64:
33:59:5c:9e:73:7f:03:6e:51:9a:95:93:ff:1c:8e:
24:44:37:fa:71:0a:b0:54:16:1f:6d:50:9b:54:8d:
cf:d7:bd:03:1c:dc:0d:6c:0c:3d:0c:f5:b0:75:ea:
15:99:13:8a:70:a4:6f:96:dc:44:0a:fa:98:2b:9c:
2d:e3:6d:d7:75:c3:f1:ca:71:21:2b:94:df:66:ef:
18:48:96:9c:0e:70:7c:a0:e9:d3:37:d8:11:5e:e7:
56:98:0a:88:b7:44:72:b8:79:01:f2:78:e3:c0:2c:
b3:ae:50:97:f0:aa:fb:9f:6a:62:c0:4d:e1:ea:46:
32:04:c9:9e:35:94:2e:5c:ee:da:12:45:4c:4c:1a:
b4:af:09:20:ad:54:03:3b:67:40:6c:86:49:36:6c:
f4:cc:fc:17:49:31:8b:a7:37:81:b7:ad:a6:0a:c7:
f4:7f:00:16:ae:b4:f0:1f:c7:b1:ff:ec:17:e4:21:
28:f8:d7:77:d8:ec:07:50:f3:e5:2a:32:61:5a:16:
81:e2:d7:a4:f3:38:4a:4e:5c:be:a7:7d:e3:e4:d2:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:17:37:21:15:52:BE:DA:C1:C2:CA:BA:7E:23:E8:F5:CA:5D:DD:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cbd4920-524b-3082-ab79-21b2a53c11f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:0d:58:67:d5:ad:bf:aa:76:d7:dd:91:e7:0f:92:17:20:88:
7d:50:6c:20:b3:b4:18:8e:f6:64:07:bd:28:cc:9b:2b:d6:bd:
7c:a0:c1:b5:92:c7:d3:3c:a1:76:bf:78:ad:02:43:68:7e:87:
9e:0a:9e:ba:96:b9:64:63:7e:48:76:8a:f7:c0:24:de:75:de:
d8:2e:84:4c:5e:ad:c8:c7:11:3f:c9:c5:1b:cd:8c:09:2f:d1:
00:1b:38:0b:82:94:57:88:93:6a:cf:10:d2:05:dd:66:c4:be:
ae:40:3e:9e:d5:02:d9:fe:63:71:d1:78:11:0b:aa:d3:e4:82:
ed:50:c6:14:79:82:f1:d0:6f:91:c4:5b:0c:18:af:08:e1:3e:
f1:de:67:6a:f7:3a:d7:5f:8b:53:67:85:7f:1b:32:eb:72:56:
22:cd:e9:7c:18:38:5d:f4:19:92:0e:27:cc:e4:4c:44:3d:91:
5b:52:0a:e5:a9:ad:9d:42:41:71:db:ba:6f:61:e3:6e:02:10:
fe:74:d7:0c:a7:cf:d8:f6:16:8f:31:ce:50:62:57:19:6b:3f:
72:2f:0a:a4:30:ca:45:b3:ee:3f:67:76:b2:73:92:4c:b2:c2:
e3:48:76:30:d0:c5:f7:dd:b9:a7:83:5e:e5:9d:77:af:e0:9e:
b7:0a:b0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:45 2025 by rpki-client