Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ead018-a765-31a8-b426-f20084d4017a.roa
File: 68ead018-a765-31a8-b426-f20084d4017a.roa (raw, json)
Hash identifier: b1slWSk+sGlC178kGVFmmCc+oIhOTPrkTbVVZqabpXc=
Subject key identifier: 04:68:F1:E3:CD:82:AB:6A:A3:54:11:9E:C3:00:75:A2:EE:D8:7A:D5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F58DC64900A29A92741300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ead018-a765-31a8-b426-f20084d4017a.roa
Signing time: Thu 23 Jan 2025 13:38:25 +0000
ROA not before: Thu 23 Jan 2025 13:38:25 +0000
ROA not after: Wed 23 Apr 2025 12:38:25 +0000
asID: 27544
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:8d:c6:49:00:a2:9a:92:74:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:25 2025 GMT
Not After : Apr 23 12:38:25 2025 GMT
Subject: CN=eb9b3be3-36ad-4944-b4ed-b71dcb371b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:fc:0b:69:d4:d6:e3:ee:72:bc:c7:6b:a7:
c5:05:23:77:c2:c1:1b:36:70:ff:a2:97:2c:1b:93:
f0:e6:72:2b:46:94:12:65:a3:be:04:7e:83:f1:28:
16:1f:14:97:e4:e6:33:f5:52:46:91:13:da:82:aa:
67:cb:c3:c6:24:6d:58:50:9c:af:50:7c:e9:4e:e2:
ad:fa:96:7d:3c:53:9e:40:e0:37:f1:4d:d9:ba:79:
5f:8b:e4:1f:20:67:f5:47:b1:0f:03:b0:cf:d3:d5:
ad:1f:a6:78:52:80:28:be:fc:63:a4:1b:d7:49:f4:
86:62:2c:81:fc:5b:09:b1:81:d6:66:94:b0:50:ff:
2d:00:48:ab:9c:8b:ee:68:c1:3d:76:71:5f:79:05:
09:a8:bc:85:a8:d0:8a:34:4e:88:d1:d6:d5:f4:0e:
b5:df:bd:54:4e:77:62:e6:b2:4c:21:d8:66:40:92:
e9:14:26:20:45:db:89:88:e1:5e:ff:27:3e:49:d5:
95:0c:da:54:f6:ce:95:60:f7:38:5e:bb:30:f2:cb:
37:ec:2f:71:75:39:4e:c2:3f:6c:98:66:77:f4:17:
ac:c9:4d:a7:4f:8d:81:fe:39:96:3a:eb:a8:d1:7b:
25:53:1a:30:e7:3c:5b:8f:18:09:f4:64:98:c1:ae:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:68:F1:E3:CD:82:AB:6A:A3:54:11:9E:C3:00:75:A2:EE:D8:7A:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ead018-a765-31a8-b426-f20084d4017a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:f3:22:13:81:8f:19:03:90:51:7b:54:c5:57:9e:61:c9:e1:
41:b2:ff:4f:9c:14:2c:84:25:c5:fb:bc:6d:43:8f:9e:43:cd:
fc:d8:c3:2f:6d:fb:47:9f:49:b7:06:9c:e9:ee:db:82:43:68:
fd:30:9d:14:76:7f:b2:dc:06:e9:a5:95:43:51:fc:cd:82:44:
74:f3:72:fc:41:44:a5:c0:fd:05:39:25:8a:53:b5:0f:62:15:
9f:f0:23:53:69:cf:95:34:1b:2e:80:99:93:d4:4e:b6:e2:ce:
92:b3:fe:ad:46:12:16:fa:15:5e:7a:f7:89:8a:92:47:72:90:
8e:9d:cf:07:47:29:4d:89:1d:da:1c:84:d1:87:d9:18:3f:a6:
de:7b:00:82:4a:b5:e8:4e:4b:22:49:9f:55:01:68:e0:97:4c:
f6:4f:c1:f8:3e:11:3a:ff:65:51:4b:06:ac:95:e2:a4:d6:10:
6b:13:da:77:84:ff:8d:91:77:b5:bb:c0:16:1c:dd:a8:44:2d:
5a:44:e9:3a:1c:21:c1:0f:70:7d:38:ec:b0:b3:7e:2d:af:b9:
11:3a:1d:2b:ac:54:32:2c:37:c9:5b:95:d3:88:be:27:d9:8f:
9e:32:2c:42:22:f5:0a:2e:33:66:97:9b:e1:73:dd:f9:55:00:
22:d9:61:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:10 2025 by rpki-client