
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3c52265-9a0e-3979-b1c9-6f273ac6d153.roa
File: c3c52265-9a0e-3979-b1c9-6f273ac6d153.roa (raw, json)
Hash identifier: wcSMwwX34rs4jabrOD/JfuVreCK/hZG47eN8PdkIs5I=
Subject key identifier: EA:B8:DB:07:69:E0:1A:08:80:4F:FD:34:90:07:33:C6:DB:BC:CC:7A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F581F21994FA3CA69AA180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3c52265-9a0e-3979-b1c9-6f273ac6d153.roa
Signing time: Thu 23 Jan 2025 13:38:19 +0000
ROA not before: Thu 23 Jan 2025 13:38:19 +0000
ROA not after: Wed 23 Apr 2025 12:38:19 +0000
asID: 396571
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:81:f2:19:94:fa:3c:a6:9a:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:19 2025 GMT
Not After : Apr 23 12:38:19 2025 GMT
Subject: CN=2ecda2dc-6d9a-48bc-a8ff-fcd03b0b80be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:94:51:00:f2:f1:bc:16:25:14:5a:0e:c2:
15:38:06:66:89:ec:4d:39:29:55:a5:b2:a7:8e:fc:
b4:94:2a:fa:3d:26:67:cf:fe:63:12:8d:90:5a:2b:
3d:e4:cd:35:39:cc:f7:67:cc:1b:60:76:4f:25:e6:
f4:41:c7:14:b1:7c:6a:db:6f:c5:53:6d:92:fb:3a:
f0:00:cc:82:35:4d:0b:a7:d0:29:ba:a6:f3:a3:0a:
98:aa:c5:99:63:2d:61:8a:86:a1:b1:30:6b:05:0f:
ac:ef:41:ff:86:a1:5a:75:0d:95:00:ba:23:26:38:
4a:e4:dd:40:94:76:e4:34:e0:0d:1a:e5:45:d8:8b:
72:d3:84:29:32:5c:e4:a7:b3:4a:8c:9b:0e:b2:bb:
b9:32:ea:e4:ff:55:ba:86:0c:5d:f5:21:c3:d2:11:
eb:d8:62:e5:45:32:6b:8a:2e:1e:4d:de:d2:f6:40:
ab:f4:41:d0:1d:1f:76:a8:3d:71:a9:e9:85:0e:b0:
c1:e3:60:01:25:bf:63:ef:4b:d0:fd:20:31:92:07:
7a:84:7e:f6:6a:5f:3b:5d:a6:a3:39:08:bd:fc:fc:
c5:17:93:e3:6d:1f:40:2a:c5:c4:bd:a7:63:06:db:
8d:c8:e1:b7:63:8a:2b:ed:c5:af:9c:f6:f0:b4:c3:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:DB:07:69:E0:1A:08:80:4F:FD:34:90:07:33:C6:DB:BC:CC:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3c52265-9a0e-3979-b1c9-6f273ac6d153.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:0c:c1:1b:52:3f:bb:b3:63:36:f1:f4:98:65:42:fb:57:4e:
2f:61:39:be:0c:fa:4e:78:09:49:87:b4:bf:69:25:4c:bd:2b:
7f:ec:c3:54:c8:c2:ae:37:2b:76:e1:1e:87:cc:52:07:ed:12:
8a:01:1a:de:66:da:90:7c:68:78:52:8f:1e:ff:26:fe:91:36:
d2:88:08:5a:c3:00:73:16:53:f6:9c:78:80:da:04:29:60:f7:
bc:88:29:94:56:a3:9a:0b:a4:b1:10:54:f7:4e:d4:87:7c:9a:
84:e4:d4:db:c4:8f:7f:da:aa:52:e3:7f:4d:7b:74:10:d5:28:
5f:5e:eb:73:09:35:68:16:c8:ef:50:54:ad:48:6f:56:af:e6:
c2:d7:7a:57:43:4e:c0:84:32:32:b7:69:d3:9d:54:b4:cf:22:
7f:0a:db:73:a1:4e:af:94:ec:12:ba:28:35:80:07:3a:63:84:
d9:b5:99:99:c3:fc:88:d9:42:48:2e:ad:f9:70:de:d8:e3:ee:
6f:93:b3:3f:b0:a7:c8:12:be:2a:51:70:c9:71:02:ee:e6:5a:
64:8f:40:29:0b:45:a2:1b:3a:e2:ec:d6:fa:74:74:c9:b0:ef:
88:85:2b:23:cf:f0:18:59:c4:cd:3b:58:37:25:cc:c1:19:97:
c5:0c:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:54 2025 by rpki-client