Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa
File: c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa (raw, json)
Hash identifier: CGVl+HJlCqjaF7nxVNiqnsrzt8z5Hkgk2PeOrso+1rE=
Subject key identifier: 52:D9:58:ED:AC:BF:14:42:21:34:75:25:4F:2A:BB:72:2D:0C:84:81
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183EF48C105CA2E27AFBC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 397200
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:ef:48:c1:05:ca:2e:27:af:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=a90754e9-ab79-475a-bb03-abfebae2dab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:be:ac:3b:a3:87:2c:17:83:90:97:53:c8:
18:5f:4d:6f:82:70:66:3d:f4:e2:12:ac:e3:ff:85:
56:f6:90:3b:55:5a:ea:e2:99:0f:dd:b9:f4:e2:af:
1b:02:01:6f:3d:74:81:80:d6:a9:1b:20:75:af:c3:
3d:8d:13:e2:97:b6:51:74:73:18:bd:21:46:0e:e3:
ef:63:33:7f:fb:a3:4c:22:f7:45:63:7e:75:7b:e0:
c5:5a:33:6c:65:83:c3:d4:49:73:c1:50:fe:10:94:
25:39:fe:27:1a:73:8a:57:73:34:3c:d5:28:35:a2:
da:34:a0:6e:c6:da:ab:da:c0:40:23:4b:e3:3f:5e:
36:f1:a2:2b:ea:ee:13:3e:be:99:99:46:c4:b6:8b:
d7:b9:2e:88:f6:27:a4:c5:fd:84:ea:53:e0:ba:a4:
74:cc:31:e4:ea:8a:02:7d:b0:cc:60:eb:ab:56:ad:
6b:9d:df:27:2e:21:5c:98:bf:4a:ad:78:bc:b3:34:
ee:51:05:19:7c:07:fa:3d:f5:a2:13:01:1b:2f:f2:
be:d0:b3:37:1b:65:a1:da:fd:bb:0b:b5:46:b7:ca:
87:ba:29:3f:0d:a6:f0:ec:a4:5d:71:90:70:7c:f6:
12:f1:d9:11:08:eb:8a:ab:24:bc:3c:af:29:27:76:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:58:ED:AC:BF:14:42:21:34:75:25:4F:2A:BB:72:2D:0C:84:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:af:af:f7:ff:a8:23:a6:a1:1b:36:b5:14:65:ec:5a:09:09:
21:1f:ca:a7:67:f0:83:5a:ae:e3:e7:3b:5a:34:8c:bd:5a:e8:
a5:80:aa:41:9e:7c:1d:99:58:65:4a:0a:b0:5d:29:06:7a:aa:
35:ab:7a:f3:83:f4:0c:4b:c5:2a:fc:06:9c:5b:ce:93:4a:52:
b8:9b:7f:6d:da:6e:75:ae:8e:fc:78:ef:5a:64:ca:1b:4e:44:
d5:c3:1b:98:38:62:3e:20:9f:ac:78:1a:69:9f:31:3c:1e:a5:
59:c7:3d:31:d3:d5:46:df:df:63:c4:f0:dd:38:90:a1:a4:15:
c8:78:47:c1:0b:0a:7e:3d:8e:0c:9b:00:79:1b:10:f1:6a:3b:
68:6e:8e:6a:ee:f4:53:f1:65:75:84:77:63:84:db:c9:cd:b0:
b0:ce:ec:0a:75:0b:0f:37:16:67:2c:5d:0f:e0:f4:98:b4:4e:
89:ce:56:c6:20:cf:e3:5b:fa:c2:d9:da:9e:aa:bf:c3:27:ae:
7e:37:1b:7c:5d:af:c3:78:f9:26:86:e0:cd:e2:94:c8:7e:10:
c3:c6:19:3c:ed:46:07:df:bc:bb:38:69:ee:1c:e4:79:29:cf:
ed:2c:90:98:b2:d6:5e:fa:a8:b5:56:10:e8:3d:70:1f:a9:cd:
6f:0b:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:26 2025 by rpki-client