Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6442d74-e349-3e1d-9b98-6753d26a6f39.roa
File: c6442d74-e349-3e1d-9b98-6753d26a6f39.roa (raw, json)
Hash identifier: Mq9cKjVztQSSovZu/41d7pAms3cpQxa37VVeZ88Msqs=
Subject key identifier: C5:23:0D:D4:44:E3:BE:CB:9D:A8:61:AC:D5:32:50:98:38:C3:73:CE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D92CA7FCB0A0F034AE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6442d74-e349-3e1d-9b98-6753d26a6f39.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396582
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d9:2c:a7:fc:b0:a0:f0:34:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=d0d9580c-c3d7-4d48-8a2e-60179089a266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:3f:b0:c0:d6:a2:0b:d4:9a:4f:3b:11:11:
5e:f1:77:af:2a:33:96:11:ac:c6:62:c9:37:de:af:
15:81:71:6c:1d:83:51:16:c4:3e:ef:dd:ab:bc:0f:
91:c3:1a:c7:f5:23:9e:94:3e:21:8e:0e:97:86:4e:
1f:57:94:a7:61:48:43:41:32:8b:b5:b0:9a:8a:5c:
e9:40:37:c7:f8:0b:a6:20:0b:37:d7:9b:6e:41:9e:
66:0a:9e:ed:91:3e:90:d0:78:0d:3d:31:94:c0:54:
8b:19:96:20:23:e0:6e:85:46:f4:e4:0b:cb:32:07:
3d:a6:c5:c2:f3:1d:6d:32:a3:9e:cb:67:9a:61:49:
e7:49:1d:1b:56:e0:ba:21:e7:19:cc:7b:0a:3e:0f:
95:5e:5e:fe:98:18:34:86:a9:59:44:91:1a:18:5a:
64:6c:d8:84:ca:37:a5:ef:79:77:0f:0f:33:05:1f:
b8:f1:f9:6c:65:67:d0:f8:1a:b3:77:73:15:4d:f0:
09:ba:8a:4b:97:80:41:fa:6f:c3:56:14:03:23:2e:
ad:aa:04:c1:15:e8:68:7a:ab:dd:43:41:ef:af:31:
81:7b:8c:fb:0b:33:03:c4:5c:cd:f4:ad:1d:ac:5d:
04:ac:c9:e6:3c:ba:0f:67:60:47:2c:a8:81:51:5d:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:23:0D:D4:44:E3:BE:CB:9D:A8:61:AC:D5:32:50:98:38:C3:73:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6442d74-e349-3e1d-9b98-6753d26a6f39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:80:ce:ff:f4:9b:d0:ae:ca:5a:dd:f5:5f:19:88:cc:1f:f9:
48:89:bd:e5:1c:16:6a:8d:fc:80:d2:9b:8d:f4:ae:e0:f9:a8:
49:dc:af:5f:a9:93:ed:21:59:c7:37:ca:e0:ed:8b:50:66:2c:
ae:ef:61:3b:b7:8e:29:00:77:86:6f:13:e1:6d:46:0c:ca:fc:
13:d1:ce:61:4d:b2:7d:f1:77:7d:c5:6e:a8:2b:39:c7:fe:6e:
3d:7f:b4:8a:7c:36:f1:2b:b9:76:a3:f6:f0:ba:4b:de:5f:c1:
61:ed:0b:4e:fe:35:b7:2f:78:bc:5f:a5:a6:7e:c4:19:7b:81:
b5:10:14:4a:1a:14:d9:67:a7:c3:fb:30:a9:4d:5e:f3:4c:31:
36:28:14:19:76:86:3a:a8:ba:4e:65:01:65:7d:27:65:f4:59:
46:3c:81:30:a8:5d:c8:70:98:ae:29:f9:1c:8f:fc:39:84:43:
df:f9:31:dc:e9:ba:d4:22:56:fa:99:5f:c3:76:9e:93:fc:2f:
2c:96:eb:09:f3:5d:18:61:2e:03:c1:7f:da:53:45:74:35:bf:
e0:10:08:41:19:f4:fa:aa:12:f8:7b:00:ed:a0:6c:df:eb:90:
a3:4a:dc:fe:37:dc:38:24:38:73:32:f9:c0:18:22:75:12:eb:
e1:53:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:37 2025 by rpki-client