Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aee4edd5-bcae-3b65-875c-4b9f46b79747.roa
File: aee4edd5-bcae-3b65-875c-4b9f46b79747.roa (raw, json)
Hash identifier: c/3xLVZEOFSYtGyJYqZKn1rYhS/GHpMGgHGQT1Nc2Pc=
Subject key identifier: 16:5F:B4:F3:95:08:E4:17:69:CD:4E:02:B1:C6:FD:CE:7D:CF:E8:01
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848CB089EE3E07D7FB55D2E9780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aee4edd5-bcae-3b65-875c-4b9f46b79747.roa
Signing time: Thu 06 Feb 2025 13:33:21 +0000
ROA not before: Thu 06 Feb 2025 13:33:21 +0000
ROA not after: Wed 07 May 2025 12:33:21 +0000
asID: 396593
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:08:9e:e3:e0:7d:7f:b5:5d:2e:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 6 13:33:21 2025 GMT
Not After : May 7 12:33:21 2025 GMT
Subject: CN=3b872041-14a8-4450-825a-20784d8c8fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:53:94:3e:0f:52:b8:6d:c7:50:b7:b5:4d:
f3:4e:fd:48:bf:5d:2d:95:bb:26:27:c5:6b:9e:e9:
e0:18:0b:84:af:04:f1:e3:eb:0c:b6:a4:ac:c7:f0:
37:ec:bb:f3:24:d6:a8:c1:a6:3a:18:0a:af:1e:b3:
7e:29:fc:9d:6c:98:a5:f7:da:61:22:25:10:c7:fd:
f3:1e:18:fc:55:3f:b8:75:51:99:cf:3f:7a:d3:72:
0b:8a:ce:56:83:ba:54:a7:4e:4d:92:76:ea:26:92:
03:f6:87:f2:2d:b6:ac:84:ab:c5:a7:1f:1d:86:de:
8d:5a:55:98:48:13:a4:16:46:68:81:32:f4:91:d1:
be:93:f3:aa:aa:5b:85:3e:92:6c:d5:9a:e9:b2:b4:
a8:a1:ff:16:cc:be:a8:12:77:44:0d:21:2f:85:d7:
4a:18:52:df:7d:e8:d8:4c:03:9e:aa:05:e1:4d:1d:
86:36:f4:06:fc:66:d9:61:c0:7c:27:17:ed:f2:bd:
36:0f:ac:fe:53:7a:f0:64:c4:0f:fb:de:c7:a2:61:
95:37:86:a8:96:96:2c:69:a3:b6:33:fd:4f:0d:45:
4f:4d:8e:77:28:4a:31:eb:6b:d2:cd:d2:11:18:5c:
db:91:e0:fd:8e:cf:ec:8a:30:b1:2a:cd:4f:21:f9:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5F:B4:F3:95:08:E4:17:69:CD:4E:02:B1:C6:FD:CE:7D:CF:E8:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aee4edd5-bcae-3b65-875c-4b9f46b79747.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:22:8a:85:07:95:78:9d:f3:4b:27:cf:b1:6e:86:b6:89:2a:
1e:31:d8:23:d0:85:37:f6:68:2c:f9:11:5f:77:a9:40:88:84:
64:f2:76:7d:01:3a:03:22:60:b5:7b:6c:ca:1d:35:22:c5:04:
95:e3:e5:33:42:e0:61:6f:f3:f1:2a:aa:e1:45:fd:dd:be:ed:
7d:36:11:0a:27:e5:74:f5:66:b7:5b:ac:b5:71:24:84:74:04:
f6:bf:9c:70:5e:49:ca:21:ef:78:08:86:86:96:89:f2:61:07:
de:df:58:a1:d8:9c:8e:eb:0c:70:aa:94:7a:eb:b3:18:db:c3:
35:82:f6:09:2a:8a:55:5b:bd:5c:f6:f2:68:8c:30:a2:6a:f3:
dc:7c:b1:4e:61:74:0b:39:40:49:32:70:07:de:de:81:95:1d:
e1:3f:cb:62:6b:50:01:4b:cf:cb:be:58:08:a9:a6:42:de:67:
41:63:94:52:49:ab:ff:42:f1:1f:6d:48:57:6c:31:26:85:32:
fe:ee:65:b5:84:5a:9f:df:f0:cb:7c:b6:4e:24:ad:50:70:c5:
51:5b:b6:d9:59:7e:0f:38:16:e1:04:b7:3e:83:fb:8f:4a:37:
8d:21:fa:6b:25:15:7e:13:28:ae:9f:d5:1f:07:e8:e0:49:97:
77:48:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:26 2025 by rpki-client