Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/790c5caf-63b9-3c57-8abe-eda73b75e62e.roa
File: 790c5caf-63b9-3c57-8abe-eda73b75e62e.roa (raw, json)
Hash identifier: XeooLoPWciTxRbOBhLfmuKDqeJcJIJYtTbkG8s8LJck=
Subject key identifier: 4D:B3:EE:3D:B1:77:D7:A6:A0:85:01:7B:C9:83:3E:01:DB:10:E2:FF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849203C7C7D9311E5B7EA846158
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/790c5caf-63b9-3c57-8abe-eda73b75e62e.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 396606
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:7c:7d:93:11:e5:b7:ea:84:61:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=fcead962-881c-49e3-890d-fc61e2551af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:68:c1:77:f1:e4:ea:87:8e:bf:7b:a4:ed:
84:39:92:c0:e5:2b:38:71:bb:a6:27:88:26:2f:30:
3f:e2:41:53:de:b3:d9:ad:c6:a8:8f:2f:80:b4:9c:
e3:a5:d6:12:9f:65:37:8c:e7:f8:76:a9:b2:bb:13:
e1:01:b8:09:a3:17:87:64:6e:19:9c:8f:16:71:e0:
80:9e:4b:57:a0:19:af:7a:bb:77:23:a6:e3:ac:b5:
fa:82:51:77:41:8e:73:c2:8a:72:dd:c2:0b:30:e6:
7e:e5:61:87:da:0b:51:de:76:ac:df:3f:5b:7a:6c:
8e:25:08:00:f6:17:94:38:db:46:6c:b7:c4:78:76:
2d:8b:e9:eb:54:ae:ce:fd:a0:2b:ca:ca:37:f5:10:
b9:89:79:2c:02:5a:64:9f:90:1f:86:96:9f:76:78:
b3:7b:b0:b1:70:b9:c7:be:3e:8b:8f:01:d3:41:d4:
62:11:90:ef:a6:0b:3b:1d:84:04:40:e2:b6:d3:aa:
34:71:1a:37:b3:1f:44:99:f8:ab:c5:10:7c:25:97:
50:14:e0:5a:43:f4:90:73:86:55:ea:f9:e9:7b:d8:
76:02:ed:f2:24:64:ce:68:6e:1c:41:2e:a3:01:ec:
60:cd:88:1a:01:61:c1:cd:ec:61:1d:cf:b7:ff:94:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B3:EE:3D:B1:77:D7:A6:A0:85:01:7B:C9:83:3E:01:DB:10:E2:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/790c5caf-63b9-3c57-8abe-eda73b75e62e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:46:1e:87:49:f5:58:26:85:38:af:13:d8:7a:fa:35:0d:8b:
14:25:8d:fd:e0:7f:8a:36:b2:d0:46:ec:1d:1d:ec:ae:b9:bf:
5c:c2:0c:d4:26:f7:0d:3a:67:16:1d:a4:e3:e6:ec:c6:f4:7c:
bd:63:b9:67:15:f1:54:1d:07:a0:f1:b6:0c:ed:da:9b:02:09:
d3:50:ad:87:a8:a3:02:9c:a9:11:8a:34:69:28:4e:67:c4:3b:
9a:ca:f5:48:15:32:1a:e0:30:ef:5e:27:6e:d3:e7:5a:5a:c3:
24:3f:9c:08:ba:11:a7:66:e1:13:4d:5f:92:e4:88:fc:3c:89:
7b:2b:e4:b4:f7:ef:6c:a9:c4:7e:f8:e3:db:ab:26:c6:a9:3b:
05:09:e8:b1:95:45:d4:4f:f9:66:8a:94:c5:7c:38:f8:73:a7:
e8:46:39:f2:31:de:56:e5:d3:46:63:32:af:0d:06:7d:f6:05:
74:a7:00:5d:c8:cd:4a:66:2f:b4:56:53:00:bd:3f:4f:fe:82:
8a:d0:26:ad:ae:30:13:ec:69:f2:7d:64:5c:fd:89:15:e5:b2:
24:2f:06:95:2b:9a:3d:23:d7:e7:9d:dd:d5:89:5b:f3:97:c4:
54:68:6f:c6:b8:8b:65:e9:f6:45:4a:17:f9:8f:5f:4e:e7:9e:
56:26:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:29 2025 by rpki-client