Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d470d9-269d-331b-be15-36865bc8d667.roa
File: 72d470d9-269d-331b-be15-36865bc8d667.roa (raw, json)
Hash identifier: GSEHy3y5m8gC0e49FuE6B1O8+Styef79x09RtQhk13k=
Subject key identifier: CD:77:1F:67:4B:15:C9:42:30:65:8F:68:C9:A2:60:1F:84:16:DA:F7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849203C7E47B3A01E98EADCB500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d470d9-269d-331b-be15-36865bc8d667.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 396552
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:7e:47:b3:a0:1e:98:ea:dc:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=5203187d-6df0-4a88-a492-b6183eac3ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:15:fd:fe:f9:22:05:cd:dd:43:6f:ec:76:
d2:b7:76:81:51:6a:d4:73:27:05:4a:2f:72:9a:21:
61:6a:4d:88:ef:9f:88:b5:39:73:a0:81:92:e0:ba:
13:e2:26:51:e4:35:13:93:e7:4c:4c:00:00:80:c8:
db:06:02:c1:bd:d4:81:66:1b:fe:9f:5c:3d:5a:2b:
15:42:12:7f:83:f9:4b:b1:55:02:07:d6:78:35:6f:
7a:06:56:f8:c9:e2:64:46:10:f7:2b:d4:96:5e:b0:
c5:b7:e6:cf:36:09:13:2a:c3:9a:9a:9b:4d:c8:b2:
6c:1f:67:dc:52:85:f4:b4:1b:b0:63:a3:7f:db:9c:
ad:03:2f:5b:35:aa:58:02:77:25:7b:52:89:a2:34:
44:83:48:bf:12:16:e4:74:9b:1a:fa:7b:b1:da:0d:
dc:f5:ab:13:65:97:65:e8:b0:dd:f2:31:c2:32:cb:
da:c4:39:6a:3c:26:a8:74:c5:4a:bc:26:73:62:85:
e8:ec:db:a8:bb:20:cf:9d:ec:f2:ec:65:e0:b0:1f:
b2:28:c0:8b:7d:27:c3:bb:f6:e7:8e:2e:ee:b6:ff:
dc:02:33:b2:41:16:e9:93:cf:ac:9b:e0:ef:4d:16:
ef:f6:05:5d:51:0d:97:45:24:db:4e:c5:5c:6d:98:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:77:1F:67:4B:15:C9:42:30:65:8F:68:C9:A2:60:1F:84:16:DA:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d470d9-269d-331b-be15-36865bc8d667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:65:4e:9b:cb:6a:32:97:8c:d9:32:1c:4f:fa:21:f7:f6:f6:
4a:f6:6c:72:29:87:08:a6:3e:c8:d3:bf:4b:1f:5c:94:01:60:
6d:23:6d:01:e7:b6:5e:87:87:aa:61:7b:9d:2e:86:71:bf:f7:
10:25:a0:19:f9:d3:6c:2a:91:5e:9a:54:79:f1:69:b0:b4:09:
87:36:22:17:0b:bd:4c:e0:64:e7:70:26:b5:5a:e0:8a:17:d8:
98:e1:d5:39:51:19:af:82:ce:da:47:74:4b:c7:00:2a:ea:74:
ab:d2:51:48:54:49:85:ef:a8:dd:48:20:94:17:1e:f7:2e:d6:
0a:9c:d0:c0:63:60:b8:3e:6b:3b:b7:67:68:af:f5:59:a8:96:
27:a2:fd:d0:18:47:1d:02:4c:80:76:2e:2d:0a:79:ae:4a:16:
a4:55:34:df:03:ae:6a:ee:62:e1:7f:75:1f:4a:04:ac:60:c7:
2f:e2:e7:e9:a5:27:57:09:e6:cc:7f:18:91:3a:2d:02:d4:a2:
21:19:ed:e7:56:7d:61:99:4a:32:2e:a2:62:0a:49:06:6a:92:
67:28:4c:cc:12:47:df:8b:f7:14:23:44:8d:5e:99:07:8b:38:
f3:6e:5f:fc:b1:c6:0a:b1:ae:8f:26:67:b1:75:4c:c5:73:29:
47:c2:d4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:33 2025 by rpki-client