Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa
File: a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa (raw, json)
Hash identifier: H4VKCM3olr9LQU4GacZTO996yREgBdgXQymiuI6l71A=
Subject key identifier: 37:5C:8D:D5:E8:69:2A:E3:87:91:37:62:94:90:C6:FE:64:54:FB:D8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492CB236C7E773328A665AC7F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 396581
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:36:c7:e7:73:32:8a:66:5a:c7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b49f380a-09ae-495c-8406-678e4c3e11c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:16:88:02:ab:08:b2:f0:17:28:c2:a7:9a:
c7:21:03:8d:0c:a7:09:ba:3a:b0:ce:3e:f2:a4:29:
5a:60:b3:c3:36:e8:8d:8f:aa:76:57:6d:58:7a:28:
8a:eb:c3:3e:0e:4a:a8:0d:b6:e4:f3:c1:9c:3c:7b:
d6:30:78:2a:28:f7:e0:47:6e:a0:55:f2:72:c9:cc:
12:16:12:01:3f:29:61:f9:6d:85:e6:77:d4:a3:92:
6c:67:06:f3:85:43:9f:2a:02:5a:a2:09:9e:eb:cd:
4c:2f:86:ec:49:76:6a:36:f9:1a:e3:0f:2b:b3:22:
d9:0a:4f:14:01:c1:72:65:7a:1f:38:6d:e7:90:cf:
b7:5f:24:05:5c:35:58:e0:43:80:fe:d6:a7:ac:08:
72:c5:f3:73:c7:92:83:9f:9c:d3:2d:27:2d:d2:fd:
35:fb:7d:f0:c4:97:b4:51:80:f0:d3:87:08:33:93:
12:de:59:2f:6d:2d:a6:18:4f:8d:59:73:0e:6a:d9:
d4:e9:34:b9:ae:02:1b:99:85:4e:13:fa:d2:18:a8:
5a:f6:3b:e4:24:82:f9:c2:88:82:e2:44:f2:92:d6:
5c:3d:1f:e2:d3:f0:38:26:32:22:e4:40:fb:65:0e:
23:39:5b:db:ca:30:fa:c2:43:fe:14:db:86:f5:74:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:8D:D5:E8:69:2A:E3:87:91:37:62:94:90:C6:FE:64:54:FB:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:8d:31:29:a4:20:89:95:f3:96:5d:3b:58:1b:cb:85:cf:9f:
2e:b5:a5:a4:e2:52:33:07:03:f6:dd:d4:ea:ff:ec:82:b9:a3:
2c:62:82:24:1e:ef:c2:c4:47:63:5f:e5:8a:8a:31:fa:01:3f:
4b:01:f2:39:ea:1f:e2:24:58:42:13:7b:d9:73:ad:ab:2a:6c:
78:1c:86:5a:a3:ab:4e:b2:18:58:af:0f:01:17:6b:04:89:19:
75:6e:cd:03:e8:4f:17:cd:58:a3:b6:d9:c8:c2:ec:85:62:bc:
50:67:6a:b5:c1:06:bc:2b:5d:5a:1d:18:56:85:74:48:25:33:
75:5a:86:ad:cb:a7:df:97:ea:6e:8c:c6:1e:ad:24:b8:82:b3:
62:ea:40:84:99:e6:b1:b9:5a:06:15:a0:43:98:02:56:62:87:
42:7e:83:f6:23:15:af:aa:75:a4:66:16:f0:5f:cd:f6:c9:78:
bb:cc:07:ff:78:61:ad:ac:71:f8:5a:e9:0a:6b:5d:b9:6a:74:
67:d1:33:13:9b:ec:b3:ba:83:d3:5c:60:7e:16:0f:cf:57:aa:
39:e8:29:98:35:99:7f:ba:c3:bf:33:3a:8c:ba:a9:c3:de:b9:
b0:61:3f:d6:92:12:62:62:ff:68:e8:20:f7:0d:63:cc:de:a2:
bb:98:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:34 2025 by rpki-client