Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/892e7771-828e-3ef5-aaa9-e0cf4c35eb3f.roa
File: 892e7771-828e-3ef5-aaa9-e0cf4c35eb3f.roa (raw, json)
Hash identifier: w/zPT/GdXyatE8N5rLaTK84giUzftKTJP1dXjw/hClA=
Subject key identifier: 57:9E:52:22:32:70:BF:CB:ED:A9:C3:8B:A9:A5:BD:B6:2C:48:43:34
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848CB089E506E92D398E6B9EF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/892e7771-828e-3ef5-aaa9-e0cf4c35eb3f.roa
Signing time: Thu 06 Feb 2025 13:33:21 +0000
ROA not before: Thu 06 Feb 2025 13:33:21 +0000
ROA not after: Wed 07 May 2025 12:33:21 +0000
asID: 397210
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:08:9e:50:6e:92:d3:98:e6:b9:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 6 13:33:21 2025 GMT
Not After : May 7 12:33:21 2025 GMT
Subject: CN=9ce029e5-091c-4e1f-807a-51c31f4d3f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:f6:46:ee:85:3a:f3:48:a7:0e:03:a4:f3:
74:b5:94:74:ea:ed:2c:7c:04:b9:57:60:8d:1a:8c:
5b:e1:71:24:e2:e5:9a:00:53:cc:c6:75:fd:20:16:
8c:70:ae:cb:2e:b5:f0:f1:ce:f2:a5:54:dd:42:6a:
19:94:f2:bd:a9:d8:73:20:ba:07:cf:4e:a7:ff:b7:
21:58:72:99:37:69:41:a7:ac:e4:ec:5d:04:52:2d:
ca:6b:6f:d9:8b:1c:6a:51:61:97:0e:7f:61:ac:26:
7b:11:ee:bd:42:34:33:61:26:ea:e3:2a:34:98:c9:
c8:ce:60:34:c3:e4:5b:9b:52:73:44:8e:3c:0f:dd:
3f:3d:81:f5:b3:f9:3a:ef:36:3b:06:3b:13:0e:11:
96:8e:b3:66:ed:05:d7:d6:ac:b2:a8:2e:7a:c7:f7:
cd:41:5e:cb:a2:74:01:db:ed:9d:9f:90:02:77:73:
d1:2e:75:2d:77:ab:2e:47:49:de:64:8d:60:41:75:
19:8e:88:a2:3f:2d:a8:3c:02:40:08:d0:12:6a:57:
af:88:4f:ae:8b:0f:f4:bf:a9:76:1c:d6:0b:d8:a9:
3f:88:a2:a8:39:1d:77:3b:a0:8f:1e:d9:61:b8:85:
32:ed:c9:6c:60:fb:f1:72:2b:44:5d:ba:b0:32:3f:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9E:52:22:32:70:BF:CB:ED:A9:C3:8B:A9:A5:BD:B6:2C:48:43:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/892e7771-828e-3ef5-aaa9-e0cf4c35eb3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:67:a4:60:ce:40:f2:12:6e:24:c6:35:be:15:bc:41:f9:90:
88:07:c9:e9:b5:5b:e7:d1:87:c1:ad:77:ea:51:6b:63:d6:98:
58:87:50:58:e0:89:4f:79:82:f0:8c:af:3f:55:cd:39:77:cf:
1c:a4:e9:98:a3:84:8a:c2:d6:b0:bd:7d:f1:e1:c7:69:20:9e:
b1:b9:f5:0c:bc:ab:37:34:ba:1b:10:1f:10:5c:24:04:62:08:
b0:16:72:1c:b8:39:9b:54:a0:4f:9d:ee:cf:7b:21:29:7a:8a:
d5:d0:8c:59:f4:ac:aa:5d:84:ed:68:03:5a:74:0c:cd:04:bf:
a4:54:26:ab:b4:2b:03:89:08:26:cc:37:81:8b:f3:f1:35:a3:
f9:2a:53:00:c6:c3:7d:5c:e5:cf:75:f3:f9:8d:ae:c8:86:78:
62:ba:67:27:48:dd:c0:c3:df:72:c0:ad:49:b0:c2:b8:c4:8e:
50:26:fd:0b:48:4f:7d:5f:f6:69:03:18:69:07:62:90:52:5f:
5c:70:76:70:f6:89:07:c3:82:be:3a:23:65:dc:5d:53:5e:1b:
40:50:cf:2a:3b:27:6a:31:9d:2e:b8:b3:73:c6:20:93:db:3c:
cb:cb:60:43:de:ca:f7:7c:21:2d:1b:ee:c4:2d:28:00:2a:4b:
be:3e:1f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:54 2025 by rpki-client