Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb99d8c8-cfc1-3493-b64c-9b2058ec5b32.roa
File: bb99d8c8-cfc1-3493-b64c-9b2058ec5b32.roa (raw, json)
Hash identifier: pdMp7Rlblaq2QUi0ceGBs3EY5xWuP1FJlBMz+5q8oaU=
Subject key identifier: 7D:4B:A3:46:A1:C9:1E:A4:FE:C9:19:68:A6:24:5D:7F:D7:75:12:D9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492CB23E27875F8F2019FEC000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb99d8c8-cfc1-3493-b64c-9b2058ec5b32.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 396604
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:3e:27:87:5f:8f:20:19:fe:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=75ea3139-7eb4-478f-91b5-06d6438cf6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:75:da:33:e3:97:72:fd:21:40:76:83:03:
01:76:83:14:d9:f2:56:ad:ab:60:e2:6f:66:c0:05:
b6:23:37:de:40:47:e0:f5:c7:1e:cb:f8:fb:c6:bc:
e7:5a:e8:49:ab:d8:2f:6e:67:24:de:a0:58:bb:31:
fb:b1:6b:c1:75:a3:0b:86:18:59:e3:28:3a:23:f4:
2d:51:73:a9:ca:26:e9:52:3c:d1:bd:d3:2f:7a:35:
04:12:bb:cb:39:a7:e3:23:81:93:fa:d7:05:90:ae:
03:c3:bb:43:0c:57:94:b6:23:12:3f:a7:fb:89:21:
36:a7:ba:f1:ca:44:fe:6e:82:34:08:b4:e9:3f:fa:
40:c7:d3:a3:3c:1d:12:6d:16:67:60:45:36:24:93:
bf:70:46:e2:2b:8f:2d:64:dd:3c:c1:15:f8:62:a0:
de:2a:a4:06:29:97:4f:14:dd:86:b8:19:3f:5c:79:
cf:83:1a:5c:c1:68:82:a3:6e:f4:d9:d6:fd:1e:22:
ed:9d:4e:e2:13:d3:05:71:dc:1f:1b:25:82:ab:eb:
01:2c:4f:a2:0a:b9:c4:87:dd:41:3d:98:fa:39:25:
77:bf:f7:e6:6a:c1:82:7c:eb:a6:4a:eb:28:37:ee:
b5:fc:cc:a3:02:cc:13:2b:19:73:1a:f8:3e:8f:32:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4B:A3:46:A1:C9:1E:A4:FE:C9:19:68:A6:24:5D:7F:D7:75:12:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb99d8c8-cfc1-3493-b64c-9b2058ec5b32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:42:b0:5f:9e:70:47:71:81:40:04:aa:65:46:f4:c4:42:88:
91:32:ad:9d:64:bf:a8:11:31:bf:93:7b:e5:27:a0:24:0a:6a:
fd:7b:45:37:ea:3e:1b:22:30:00:e2:91:d0:6b:0b:28:4e:26:
9d:c7:13:d8:f8:a2:c0:7b:12:60:78:81:c5:c5:0c:ed:87:9f:
5c:ac:b6:24:88:9a:07:23:66:de:2e:eb:ea:70:46:8e:2c:cd:
52:78:4b:74:e2:e2:f7:a8:19:09:cb:86:89:c2:72:82:20:d9:
de:72:a4:c8:f7:fb:00:75:ba:e7:42:21:32:d9:1e:ea:6f:fb:
03:96:26:bd:17:d3:59:74:24:d8:a1:4e:77:c8:f6:8f:ea:f5:
3c:4b:bc:38:bb:2f:2b:fe:45:c1:39:a1:a5:fc:70:40:1b:1e:
56:c4:5d:c1:aa:f4:c2:05:b2:45:fb:07:e8:6e:c5:d4:ba:50:
f1:1c:57:f2:36:87:8a:6a:f8:33:5a:12:5d:6e:3f:23:0c:20:
f2:28:b8:98:05:98:6d:31:7a:44:43:b4:92:42:ff:be:b3:be:
55:d6:ab:cb:32:c7:42:f8:f7:3a:0b:9a:3d:2b:7c:be:d5:35:
e8:73:6e:da:39:ab:58:8a:0f:2e:bf:5e:3f:2c:a1:8b:7a:4c:
14:d6:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:35 2025 by rpki-client