Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa
File: 8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa (raw, json)
Hash identifier: TadxROvUfiIYJ4ih6XX+f2Dj1EGnSLu/pyvI4Z/IEVE=
Subject key identifier: 04:65:FD:6D:C5:C8:7D:26:67:0E:5B:6C:D2:7C:95:99:25:69:08:B7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492CB23A6666488F753DF87E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 396611
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:3a:66:66:48:8f:75:3d:f8:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=626c1269-c5da-4b12-86bf-b205ae399853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:50:74:92:b4:0c:63:44:72:3c:69:eb:aa:
bf:e4:2b:c5:34:91:42:e3:4c:03:c1:ab:31:4c:a6:
75:ea:dd:cc:1e:d6:a0:d0:98:59:8d:cf:17:ca:f3:
5a:dc:ee:85:7d:d1:22:ca:43:18:7f:a2:67:a9:d7:
4f:db:c1:b2:bb:8a:f4:06:62:dd:b6:a3:a8:6d:1f:
a1:44:11:af:b4:6a:de:90:0a:99:cf:c8:02:a0:93:
79:63:71:bb:9b:61:26:a3:fa:c5:8b:01:d0:d2:0b:
c0:7d:58:b1:30:a7:78:39:ec:4c:d9:ff:c5:f2:99:
f7:cf:99:5a:ec:bb:00:b4:79:c4:10:90:e7:67:ba:
9b:17:dc:e9:3e:1a:14:37:8c:d4:9d:fa:e1:5a:6b:
82:94:c6:61:2e:07:38:68:9e:05:49:b4:43:6b:48:
50:65:78:e4:43:a7:e3:77:0b:a1:25:6a:ac:d8:0e:
17:59:ce:37:da:a6:e4:c4:09:3d:49:fb:3b:cf:ff:
10:b8:2e:0e:25:84:ac:1f:db:eb:90:12:29:1f:73:
1b:7e:02:83:2d:e4:75:2f:c7:e1:cd:08:86:37:25:
f2:42:dd:f8:c2:7a:cc:d8:e6:a7:1a:89:a0:f2:bc:
c9:a8:b4:50:b3:6f:d5:75:bd:b8:9d:65:e1:00:f5:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:65:FD:6D:C5:C8:7D:26:67:0E:5B:6C:D2:7C:95:99:25:69:08:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:fe:73:24:ca:a5:09:d6:d2:22:d8:92:97:85:36:93:52:d4:
86:9e:92:46:1a:5a:ff:2b:ca:fc:d6:68:d5:92:21:05:6a:a3:
ef:68:41:2e:50:da:46:25:d6:d5:9d:75:3d:6f:2f:65:a4:14:
d3:3b:81:45:e0:18:59:af:d3:06:f3:a7:83:89:f6:65:78:e1:
bc:aa:3c:7d:29:72:cd:b6:cc:d4:d6:ea:68:c6:6d:04:6a:80:
98:e6:ed:48:7b:89:37:c7:9d:58:e0:0c:c9:49:54:a1:80:0a:
f1:1d:83:4c:08:e3:af:90:54:51:1a:e1:ae:09:f1:c3:9c:85:
4b:1e:93:72:96:22:b5:6a:f1:52:88:b9:07:87:74:40:fd:17:
00:8c:24:4d:63:bb:ee:3c:69:ff:fe:eb:a0:8e:66:b9:eb:7a:
81:a3:c0:c0:4c:ad:3a:5e:e6:41:de:5e:f3:21:f4:7a:2c:43:
62:81:35:43:2a:a4:e2:e9:8e:bd:ca:8d:52:73:27:37:28:35:
fd:b7:4f:f7:0b:e6:45:de:08:53:5b:ae:92:16:a7:4e:7b:4f:
74:47:87:4b:1f:09:04:d6:a3:0c:aa:7d:bb:8f:8d:21:95:28:
39:03:02:90:a2:7b:b6:a9:30:ce:29:a3:2d:44:51:cf:94:33:
77:39:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:38 2025 by rpki-client