Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c177d8ee-a258-39c3-866d-7159cf7dcf3b.roa
File: c177d8ee-a258-39c3-866d-7159cf7dcf3b.roa (raw, json)
Hash identifier: dz15BDUaF+XP05vzgejlWxGmvRJHxL99zfF2FBAfpog=
Subject key identifier: 97:C1:DA:8F:7B:25:CB:3D:F8:FA:79:16:2A:5D:64:B9:5F:1A:A4:FA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849203C7CA3080A81179A358380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c177d8ee-a258-39c3-866d-7159cf7dcf3b.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 397195
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:7c:a3:08:0a:81:17:9a:35:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=9d39b972-555e-4206-aaa5-cd62314574ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:25:9a:c8:6b:78:d2:de:96:34:67:8f:0c:
5c:68:6a:05:fe:af:25:d1:a7:45:d5:f1:c9:c1:ab:
44:ed:ed:ef:44:a6:23:1d:91:11:0d:c1:0e:6c:52:
87:52:3e:c1:73:74:2a:53:7f:38:cd:b1:e9:a0:14:
7a:ad:35:88:f6:9f:5e:9b:02:7e:f7:fd:72:e8:d6:
11:37:0a:f3:d0:ae:05:43:52:ef:4c:58:be:a5:f5:
03:a5:56:84:f1:da:c7:72:f7:b8:8c:b9:70:bf:60:
05:96:60:25:5f:71:d5:e9:04:53:8d:81:75:e2:fa:
45:c4:fb:09:44:b1:05:0d:59:77:0c:dc:7f:68:4d:
66:c8:b1:0c:bf:aa:2d:7b:35:43:bb:21:61:94:af:
09:85:76:4c:75:68:0c:2b:21:f2:af:29:94:3e:0f:
4d:4f:5d:e7:3e:c6:6c:15:de:58:66:1c:3b:76:f3:
d6:4f:19:bb:9e:2b:3c:19:f7:05:f2:5a:d0:58:e7:
a2:f7:99:89:b5:72:bb:2e:17:d6:2f:dc:12:ee:2b:
df:7c:f0:88:fb:d3:69:b0:67:26:c5:b5:01:aa:62:
4a:be:e5:e8:b6:98:bc:a4:93:ce:f9:81:6a:42:36:
10:53:9a:d9:81:63:a6:e2:06:69:5c:ee:4e:2c:64:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C1:DA:8F:7B:25:CB:3D:F8:FA:79:16:2A:5D:64:B9:5F:1A:A4:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c177d8ee-a258-39c3-866d-7159cf7dcf3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ba:d1:b1:a3:e0:8f:5b:71:60:39:b5:a7:a1:b0:58:0c:8d:
e2:bf:c3:5e:3d:24:cb:f4:c3:cd:a7:94:00:8e:56:73:bf:66:
c7:85:d4:12:58:89:aa:59:42:d3:f9:ac:02:2a:a9:0d:f4:16:
3f:c9:a9:47:a8:9e:c5:bc:5f:75:86:67:2a:92:14:87:7b:84:
3d:67:ad:0e:59:05:6a:03:fe:90:a3:3e:99:fe:ea:9b:96:09:
be:29:25:9d:4f:4c:26:8c:86:bb:c5:71:34:ab:b3:4a:0f:52:
3d:db:d9:d8:81:9f:72:5b:0a:2a:1b:c1:d9:31:d1:e2:7f:93:
c5:d2:4e:c1:b7:68:89:a1:9a:84:12:ec:d8:2b:e2:11:6c:93:
8b:9e:be:28:4e:25:ce:78:69:9b:bc:a4:8b:6a:52:c0:da:9f:
ce:4e:d3:bd:09:73:3b:f2:69:88:a6:56:08:a5:8f:f4:fd:85:
af:89:7a:4c:c0:62:1b:f6:b9:aa:31:3a:f9:a5:15:db:16:e4:
48:49:68:ad:c8:bb:c0:0f:03:af:ca:4c:a8:52:e5:03:21:59:
31:8f:61:89:b8:2a:10:d1:c9:bc:6a:50:be:a4:9c:ee:ab:a8:
80:45:eb:96:64:3b:db:e8:bc:aa:a1:da:c6:63:95:f9:d2:9b:
ed:c4:e6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:30 2025 by rpki-client