Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/695ec391-eb09-371d-84f7-097d6003ab19.roa
File: 695ec391-eb09-371d-84f7-097d6003ab19.roa (raw, json)
Hash identifier: seM2wcS21/iAaEo41lsK6VHHebdq3DIIkf+s6Ja3f5Y=
Subject key identifier: FD:EE:5C:46:71:30:3F:70:A8:CA:9F:00:8A:9F:41:FA:F9:58:D2:AA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B7843EC48C4A4E6C332F8E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/695ec391-eb09-371d-84f7-097d6003ab19.roa
Signing time: Thu 30 Jan 2025 13:46:16 +0000
ROA not before: Thu 30 Jan 2025 13:46:16 +0000
ROA not after: Wed 30 Apr 2025 12:46:16 +0000
asID: 396588
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:3e:c4:8c:4a:4e:6c:33:2f:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:16 2025 GMT
Not After : Apr 30 12:46:16 2025 GMT
Subject: CN=61b5bad9-e9a4-402b-8e4b-77f3dc87a9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b1:c3:53:72:95:f8:d0:1c:91:2e:f8:e7:45:
8c:a1:45:89:ae:2f:25:1c:33:d6:b3:a2:f3:98:60:
08:e8:78:1b:56:90:f7:4d:a2:ba:d0:59:3c:37:16:
cc:7f:e0:bb:57:99:57:a0:f6:90:f7:c5:31:d3:40:
7d:9a:61:25:09:91:fe:09:fd:63:8f:cc:51:fa:b5:
3d:26:01:6a:05:55:34:af:78:ae:f5:99:f1:38:82:
7f:87:4b:d9:0d:0a:c4:2c:90:40:ca:80:c6:57:66:
7f:f7:31:65:3e:50:1a:da:f8:3b:9a:c1:21:20:1c:
de:82:7d:a1:28:36:96:71:7e:48:ca:18:ae:27:40:
24:44:53:59:8b:90:40:19:29:08:5b:53:c3:55:58:
db:65:e2:b1:9d:33:76:c7:c3:67:04:c2:95:b9:8c:
42:f0:d2:9b:79:ae:c9:24:ce:65:75:ae:2a:c7:6b:
7c:4d:16:8c:af:65:0e:c7:c7:8b:bc:b9:0c:a9:41:
83:9f:d7:8c:1c:9b:d7:6f:d8:71:db:ac:0e:be:b6:
e8:c1:4a:9e:06:b7:cc:79:a2:47:1c:50:91:28:aa:
8e:20:54:4e:e7:18:5b:07:eb:a9:03:47:b0:0d:36:
4b:9d:21:56:5c:cd:87:20:12:d0:aa:3b:46:fe:ff:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EE:5C:46:71:30:3F:70:A8:CA:9F:00:8A:9F:41:FA:F9:58:D2:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/695ec391-eb09-371d-84f7-097d6003ab19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:f5:2d:f9:30:10:a1:b3:61:5f:1c:c2:b0:59:be:bd:85:8f:
25:30:da:ed:7f:a6:0e:e9:fd:9b:b3:97:06:82:2d:e6:ac:d9:
d6:a9:9b:74:41:36:3d:27:3a:b7:65:76:26:e8:6b:3d:3f:b9:
e9:f0:ff:77:4a:b3:f5:d6:19:d0:a6:e6:de:07:d1:e3:d2:9d:
5c:ff:e7:40:b7:94:2b:eb:0b:4d:f0:00:e5:d6:9a:5f:d7:72:
c2:fa:8a:03:f2:6f:d5:d7:8d:bc:3a:f9:fa:e8:13:b3:06:8b:
35:03:fe:0b:06:7e:9d:4b:50:c0:c9:b4:fc:7d:20:d9:15:44:
32:3f:ab:8c:33:a1:81:ca:57:9b:a8:2e:2d:cf:b0:08:d1:34:
fb:dc:47:1b:2d:36:f4:eb:af:59:38:a8:24:1f:d4:00:33:9a:
7d:a6:e2:a6:6b:6b:b8:6b:55:7f:9d:6b:01:13:2d:f5:01:60:
0b:eb:a6:f0:05:78:7f:9d:f8:f6:c9:41:8f:b7:60:ed:e3:a1:
10:b9:39:29:c3:af:ec:02:09:a5:7e:3c:66:05:46:7a:56:38:
18:94:44:12:20:f5:09:0c:52:96:b6:29:79:47:18:43:3f:75:
6c:5c:52:6a:59:78:84:84:a7:8c:fa:b4:8d:dc:06:90:1f:0a:
9d:6d:8e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:29 2025 by rpki-client