Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa
File: 7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa (raw, json)
Hash identifier: z1jfwjt4vV31ksukAMNfSRphuarUwVTvKPyBNUdyxH4=
Subject key identifier: 43:60:B5:A5:48:C2:A8:81:5F:BA:1F:4A:E5:2A:A3:3C:4D:8F:9F:6E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0ECE2507D7DEEDCE49900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 36622
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ec:e2:50:7d:7d:ee:dc:e4:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=c7362833-df1c-465c-a69f-e3454b500f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:63:b2:5e:72:a6:f8:8a:0d:43:f6:38:f1:
da:05:4b:b5:ed:65:cc:3c:ec:2f:1f:b3:03:4a:6d:
c3:a5:01:ba:95:1e:8e:91:28:12:8f:6c:59:df:53:
fd:7a:ff:52:13:ac:81:57:9a:6b:0f:fc:2d:7a:be:
31:9d:2c:78:c3:c2:2e:97:56:d5:0a:e2:76:8e:01:
77:41:7e:7b:6f:35:43:75:b0:02:3b:14:d1:d8:42:
7b:8a:27:b4:b7:c5:fa:dc:c7:f4:7a:74:ce:c8:2b:
26:c6:d6:18:7b:36:db:89:09:fc:48:c5:cc:5d:a6:
5d:da:bb:c2:38:36:eb:a2:df:ad:92:e3:eb:40:13:
a5:78:14:97:eb:9b:c1:01:db:fe:68:4d:06:1a:f0:
45:03:a4:d1:66:02:80:7d:ac:5b:a1:0d:12:54:e3:
dc:df:79:93:8e:2a:7d:6c:02:ef:7b:32:ce:d7:38:
2d:ef:de:c1:93:3e:c3:a8:56:a3:f9:8c:ca:af:5d:
36:50:25:a9:cb:a8:cd:eb:49:ac:ce:a6:18:f9:fb:
bb:fb:fa:9a:73:89:4b:37:1d:6f:c2:a0:4a:77:24:
54:17:bd:d2:af:d8:0c:22:a9:06:0b:68:7f:4a:b2:
ba:64:16:91:75:25:46:09:42:dd:7a:a4:c5:bc:aa:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:60:B5:A5:48:C2:A8:81:5F:BA:1F:4A:E5:2A:A3:3C:4D:8F:9F:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:70:81:2a:cc:dc:fd:39:4c:88:56:ec:b8:de:d6:8d:d8:3d:
47:01:57:1a:db:5e:32:6f:6f:c5:01:2c:09:eb:58:62:52:ec:
0d:26:ce:54:d3:25:d0:62:a6:01:87:e4:46:f7:f3:8e:cf:c3:
c3:c9:82:f9:a7:45:f4:af:e3:bd:57:21:ae:19:10:ed:2f:27:
ba:e7:6c:da:8a:1b:45:51:18:18:3e:67:f8:34:62:79:14:ec:
da:5e:4c:25:68:31:01:6b:f1:d8:5a:1e:62:ca:36:7e:6b:4c:
37:17:be:1e:83:0a:08:ad:c4:7e:a5:25:d7:3b:26:3c:1e:e0:
ed:26:25:c3:82:bc:e7:85:89:26:de:65:1a:7a:c2:0e:06:a3:
c7:0d:8e:9a:ae:47:45:69:12:d6:64:2a:98:4a:4c:fa:7c:97:
6f:09:bf:c5:d5:47:bf:b2:50:8d:3c:cd:57:44:75:85:a8:39:
f0:1d:77:ea:f9:59:64:ab:53:3a:b2:77:ef:56:20:3c:a3:66:
bf:27:5a:e4:0a:0b:4e:df:84:45:57:c0:de:12:a0:65:1a:bc:
ee:e1:71:ba:da:fd:c0:ee:77:48:4a:5a:6e:19:13:b8:05:9f:
db:fa:5f:9c:01:3e:00:83:18:df:c0:f7:1e:70:8c:34:09:7a:
fa:1f:52:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:49 2025 by rpki-client