Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87fcf588-6b25-3981-8e48-8b0ac5f58a3e.roa
File: 87fcf588-6b25-3981-8e48-8b0ac5f58a3e.roa (raw, json)
Hash identifier: x5+0FC5NtgMGUo/1NjyCKo9E26BS3aIWZKt05SZf+Zk=
Subject key identifier: B8:51:26:F6:0D:88:0E:C7:43:F3:8C:10:AC:F4:9E:77:97:A3:BE:0D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849203C7F6F20E09790D2F95100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87fcf588-6b25-3981-8e48-8b0ac5f58a3e.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 396569
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:7f:6f:20:e0:97:90:d2:f9:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=b2eb4237-3437-4482-ac56-453fd895c17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:00:97:75:a6:ed:26:8f:44:41:ef:32:ba:4f:
52:a1:08:d1:ff:c1:aa:54:e2:ca:88:89:0a:5b:63:
14:39:36:a3:32:d1:43:09:e5:c6:e8:cc:0e:9d:25:
93:6f:5a:ae:4d:67:04:ba:cd:58:70:5f:8e:47:f8:
0b:ce:a6:fa:74:b7:ed:0a:95:37:2b:a4:db:d4:6b:
6d:79:12:02:27:32:a5:aa:15:f2:ef:45:68:18:e4:
26:f3:65:54:f7:cf:41:83:fe:83:fb:f8:f5:5b:71:
8f:34:2d:3a:c0:61:8f:90:1b:c4:73:bc:b0:87:c9:
4e:95:f4:d6:65:24:0e:6f:46:bd:98:a2:68:be:7a:
67:d4:55:66:73:f1:5a:42:41:4b:29:79:1a:a2:8e:
aa:43:58:d8:00:4c:b2:f0:5e:5d:05:3c:c3:da:76:
7e:55:d9:13:e8:97:dd:22:61:16:84:8e:e4:30:92:
9d:60:1d:15:1e:95:46:5c:1c:b5:ab:01:b4:9b:6c:
49:e6:15:46:47:d0:c7:bd:24:db:e8:77:34:71:2e:
29:fc:4b:6b:93:fd:c3:85:a1:2c:22:13:32:77:54:
17:c9:e1:29:1e:1b:b0:e4:ac:87:03:41:42:28:27:
af:35:85:de:ae:b2:11:2d:41:a4:2a:e6:19:a4:68:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:26:F6:0D:88:0E:C7:43:F3:8C:10:AC:F4:9E:77:97:A3:BE:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87fcf588-6b25-3981-8e48-8b0ac5f58a3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c2:6c:63:23:2e:82:f0:d2:c2:b0:3a:6a:b6:5d:e0:04:26:
6a:e3:3b:fe:fe:81:93:bb:7b:a7:ae:3f:0a:3d:ac:c9:1e:08:
ef:c0:b3:61:0c:bc:84:98:85:69:b2:93:d3:77:08:06:d3:8e:
19:1d:90:65:4e:02:a1:7d:3c:d8:c3:0d:3f:30:b4:6a:f2:36:
af:9e:ea:dc:3e:d6:1e:72:24:f5:bb:2f:d0:2d:b4:cb:ae:88:
c9:b1:19:f8:97:d0:e1:fc:1e:23:7b:c0:de:e6:9f:d8:c7:e8:
fc:6b:df:44:41:f1:3f:d4:5b:ee:91:1a:aa:b0:7f:86:01:95:
3e:72:dd:f6:36:7a:53:f9:5e:9a:ca:6e:fe:87:b3:b2:af:7f:
c9:7f:d4:bd:d5:65:3a:1e:c2:e8:f6:52:07:19:6a:be:0e:51:
61:9b:29:cc:fc:6f:f3:c2:f1:e8:eb:9f:50:fc:4b:cc:db:8f:
86:56:4a:09:56:c9:73:4d:35:80:3f:cd:2c:d9:12:cd:b6:82:
54:aa:16:ce:bb:66:37:3e:3c:6f:e1:30:5b:4b:4b:2f:2c:5e:
b4:34:34:f3:a1:9e:40:6e:1e:97:b2:cb:e8:07:9e:c3:ac:43:
96:6e:a3:44:9d:ea:db:81:70:ca:b3:ae:9b:ee:4f:bc:a3:87:
3e:1f:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:12 2025 by rpki-client