Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7706376-df18-38f7-b4fb-4c3c01bddfbb.roa
File: a7706376-df18-38f7-b4fb-4c3c01bddfbb.roa (raw, json)
Hash identifier: 9ZQmH5wYMapXFATcU2n/IacvWz67YfHCKrELVkk4hRE=
Subject key identifier: 55:B9:75:6B:06:97:84:F5:AA:FF:BD:CB:47:17:1A:AB:65:F4:6A:36
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F7F30412C96B5DD386C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7706376-df18-38f7-b4fb-4c3c01bddfbb.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396591
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f7:f3:04:12:c9:6b:5d:d3:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=604beaf5-829e-4793-baf1-4aae22eb870d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:22:02:74:9e:cc:00:18:4c:39:27:6a:f5:
8b:20:83:29:e1:b5:4e:47:a8:d6:03:52:10:96:00:
3a:5b:93:a9:ac:73:93:8d:68:4a:99:6e:0b:55:07:
7c:31:c2:a5:9a:5c:34:11:83:61:66:90:c9:84:8d:
e9:9b:53:62:a9:4f:5b:05:e4:46:00:57:a8:1a:04:
af:9e:a4:8a:f8:aa:ca:39:07:1c:aa:82:44:4e:37:
54:8a:c4:9f:26:5e:ac:05:72:cf:26:aa:52:77:92:
5e:c6:fe:87:23:62:41:e2:b4:e1:10:0e:ed:5d:51:
60:67:7f:18:e3:f9:30:e5:54:64:ff:07:0c:71:1b:
08:b6:0f:e6:ff:d0:71:11:59:55:ab:06:54:6e:1d:
2f:37:89:cc:78:6e:6b:52:36:34:ac:5b:66:a9:84:
1b:77:55:93:1a:31:53:d9:3b:a6:cd:dd:d8:ef:63:
ad:e8:6e:bc:5e:d6:fd:1e:20:58:4c:4a:88:c1:75:
82:2c:47:de:eb:a9:32:ac:e7:71:68:13:58:05:0e:
2c:22:80:e8:d5:a4:13:3d:f6:c4:61:15:e8:d9:1f:
d2:3e:a2:0c:ea:62:c1:fa:e2:94:70:03:f6:f3:d4:
9b:1e:83:60:dc:5a:a5:3a:01:46:62:d3:93:d8:f2:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:75:6B:06:97:84:F5:AA:FF:BD:CB:47:17:1A:AB:65:F4:6A:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7706376-df18-38f7-b4fb-4c3c01bddfbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:7a:df:30:5c:a9:86:dc:14:5f:48:a7:26:9a:f6:dc:81:82:
42:05:8f:d6:7d:be:c0:3b:70:ee:88:0f:1e:41:01:94:5d:ea:
6b:2d:3e:9d:82:d4:67:f9:77:a9:22:ca:a8:e9:4f:b1:3a:02:
ce:e5:ff:2c:5c:61:31:8c:0e:95:f4:27:0d:01:35:51:0f:40:
dc:e5:fa:25:6d:b6:fc:9a:95:63:57:42:55:e2:f4:77:fb:f3:
bc:9d:27:db:b8:21:1d:62:8c:35:98:8d:62:a9:0e:7e:3f:d3:
5b:d4:8c:7f:50:38:6a:2c:da:be:f7:2c:cd:93:33:54:1f:08:
b6:e0:11:45:6d:58:96:f9:8c:71:96:07:99:d0:fc:7c:d6:f2:
e1:26:ab:9c:a4:96:e0:00:b7:69:f6:58:cb:c9:34:df:7e:b9:
da:01:2d:e2:46:8f:60:ac:65:4f:0f:1b:e5:f2:f3:12:5f:44:
ce:59:58:35:cd:d0:e4:9c:d8:a7:37:56:0f:80:50:9e:55:05:
09:e5:bc:0a:ea:f6:21:83:96:b0:44:c9:95:0a:4d:08:a1:8b:
c9:19:df:19:2a:f5:d1:75:26:cc:af:03:dd:7c:09:0c:0c:d7:
06:9d:db:86:3f:1e:89:0d:47:f9:40:00:8f:76:1d:5f:b2:a5:
ee:aa:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:35 2025 by rpki-client