Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab821372-3fb5-3954-a588-ce9415dd0203.roa
File: ab821372-3fb5-3954-a588-ce9415dd0203.roa (raw, json)
Hash identifier: D5A7LywZT476MKFU1xf9o7MlgCsalDJzt63LGnUdH+g=
Subject key identifier: A3:46:57:E6:A3:82:57:76:3E:76:FD:8A:32:F8:AC:68:B5:75:EA:01
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F58BB7E9931A1B3BB69600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab821372-3fb5-3954-a588-ce9415dd0203.roa
Signing time: Thu 23 Jan 2025 13:38:24 +0000
ROA not before: Thu 23 Jan 2025 13:38:24 +0000
ROA not after: Wed 23 Apr 2025 12:38:24 +0000
asID: 397206
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:8b:b7:e9:93:1a:1b:3b:b6:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:24 2025 GMT
Not After : Apr 23 12:38:24 2025 GMT
Subject: CN=e54a978d-3a19-4c90-b124-e894647b46b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:69:bc:65:ef:d5:96:28:14:38:c0:5c:dd:
b9:54:25:29:6b:61:0c:50:9e:d7:26:25:ad:b8:29:
39:bb:57:0f:76:6d:74:b9:88:84:42:07:34:cd:1f:
58:86:5f:ff:a5:f9:91:a0:2d:07:b1:f5:13:01:fc:
d3:af:14:7d:87:48:37:77:e1:62:57:3b:e8:5a:fc:
af:ce:45:6c:bd:68:57:25:53:42:d4:79:04:e8:83:
56:9d:bd:e0:9d:8d:d9:13:76:57:28:9f:73:67:ac:
ae:86:a2:1d:d0:1f:e9:ac:69:2e:26:29:04:ae:4e:
89:5a:7b:3a:4b:bf:d5:b5:75:76:6c:95:bb:14:a2:
a4:83:b2:e7:b1:f0:01:52:c7:e0:e9:3c:ca:a7:23:
49:d0:1b:88:5f:fb:19:7a:86:63:6c:7b:53:ec:a7:
63:8b:aa:3f:6f:ef:c7:f1:94:bb:fb:86:16:da:08:
14:cb:f8:1e:85:7f:4a:1f:f1:c8:30:e1:34:07:c7:
02:cd:56:4b:54:0e:de:97:f3:ba:58:9c:08:94:3f:
1f:5e:67:d9:ca:8a:65:09:5f:c1:00:83:72:92:ed:
7c:5d:27:df:03:98:75:54:e0:57:a3:1f:54:8e:46:
e3:77:c5:e5:8d:b5:b3:bc:e8:69:42:cd:73:d7:14:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:46:57:E6:A3:82:57:76:3E:76:FD:8A:32:F8:AC:68:B5:75:EA:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab821372-3fb5-3954-a588-ce9415dd0203.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:5b:38:1e:fb:f9:aa:e1:14:86:83:5d:61:ee:43:61:53:ad:
1c:3a:bb:02:40:ab:b9:b8:f1:76:8b:2f:26:ad:88:49:f8:58:
bf:6c:5c:45:1e:00:42:09:f2:89:40:ec:ca:93:6c:1d:8d:03:
5b:84:06:41:5b:da:6e:cf:4e:3f:ff:66:c5:c3:b5:74:6b:42:
6a:ee:48:e2:fc:5e:f4:7d:a3:59:0d:f0:de:37:66:cd:ea:8b:
c2:4c:a8:fe:a8:0b:b9:a7:a7:38:cb:f0:d2:69:9b:29:6a:76:
96:fc:08:0a:4a:26:29:34:8b:1b:ad:15:64:66:c0:a2:2f:e0:
76:d6:e8:1c:39:3f:fe:5d:d9:81:00:5c:d3:46:c9:b8:7a:ee:
59:f7:f6:a0:16:8a:b2:c6:b3:4f:bd:18:6b:5e:95:82:5a:7b:
04:04:de:da:a3:f5:e7:a5:df:4a:a0:4a:fb:77:88:40:ac:cb:
e8:09:4a:fa:a0:8c:7e:fd:a7:2b:3a:d3:4f:16:73:59:26:a5:
35:1e:41:92:f5:3d:0e:04:91:f0:38:d9:d9:13:ee:13:cc:dc:
f6:c3:5b:d0:f6:51:2d:39:c8:cb:90:9f:0f:74:e8:5f:b5:00:
2f:f0:23:51:06:e6:fa:32:51:8d:25:d9:50:3f:fe:01:53:e7:
1d:d6:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:29 2025 by rpki-client