Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce72e5c9-dbb6-3be8-967c-15b6e120865e.roa
File: ce72e5c9-dbb6-3be8-967c-15b6e120865e.roa (raw, json)
Hash identifier: yic1QGO/YxIKdiqvN/kLfjwlbpQwTkQSJJqR4sI6nIg=
Subject key identifier: 22:77:7A:38:BF:4A:00:4B:AC:5A:A6:55:23:CF:CA:21:CF:C3:28:B0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B784498D787B0C2A954D84C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce72e5c9-dbb6-3be8-967c-15b6e120865e.roa
Signing time: Thu 30 Jan 2025 13:46:21 +0000
ROA not before: Thu 30 Jan 2025 13:46:21 +0000
ROA not after: Wed 30 Apr 2025 12:46:21 +0000
asID: 396557
IP address blocks: 192.55.83.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:84:49:8d:78:7b:0c:2a:95:4d:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 30 13:46:21 2025 GMT
Not After : Apr 30 12:46:21 2025 GMT
Subject: CN=218c0678-cf6f-4c43-9ca8-124bbe43f0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:da:83:a1:a6:45:c5:41:12:bf:10:9b:bc:3e:
46:b5:c9:1a:d9:90:19:8b:17:18:f2:8e:0b:ff:ce:
0d:1c:0a:9d:9d:fc:3d:e6:56:83:bc:78:bc:1f:c7:
46:9d:10:71:ba:8b:d5:05:65:d7:b7:0f:08:a1:57:
2f:a2:76:dc:2d:19:f6:1f:2d:19:96:9f:bb:b5:0e:
2b:eb:66:a5:eb:3b:f0:6f:8f:9a:c1:56:b8:55:c7:
33:dc:66:6d:4a:5e:22:83:11:f5:af:9b:11:fb:34:
8f:a8:d4:76:26:38:90:a3:9c:b6:70:ec:df:4e:ff:
b4:95:60:36:e8:fa:bc:ec:fd:07:24:89:4b:12:71:
6a:4e:29:61:ba:4f:84:b1:60:70:87:98:ed:10:04:
f5:14:db:72:42:fc:53:d6:7b:4d:8d:07:ef:65:a2:
97:ee:b8:b7:27:fd:05:0c:51:f3:e9:62:80:c9:c5:
41:08:7f:4e:b7:4d:41:70:b9:02:38:3b:c4:f1:eb:
88:80:6c:52:3f:e8:bc:fb:ea:d6:4f:a4:aa:dd:3d:
17:55:d8:1f:fb:b0:38:bd:45:25:18:71:86:08:17:
d4:a5:8e:3c:f8:f5:c4:f8:e6:77:a4:b0:a6:72:65:
10:59:ae:0b:2d:34:de:5d:78:bb:26:20:de:c5:6d:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:77:7A:38:BF:4A:00:4B:AC:5A:A6:55:23:CF:CA:21:CF:C3:28:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce72e5c9-dbb6-3be8-967c-15b6e120865e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.55.83.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:17:19:04:1a:b0:c2:52:c5:ce:81:30:e6:9a:6a:e9:5d:be:
f2:af:f2:5e:d1:b6:3a:c3:24:a0:f2:6c:5b:33:37:7a:bc:33:
dc:a1:3e:28:ec:86:e0:27:d8:75:3a:cd:d5:66:44:34:e9:54:
fa:ab:5e:6b:25:ab:da:db:ec:ef:af:3f:a3:ee:b7:f5:f2:48:
60:97:87:be:ba:8f:3f:e7:b3:b9:67:70:d5:9d:21:a3:73:59:
bb:20:4b:56:68:df:dc:62:a6:91:97:44:9f:1e:5d:dd:b5:d9:
e1:39:f7:46:86:b4:d6:b9:14:1e:01:ee:b9:c8:5a:0c:96:40:
44:7e:0e:56:35:b8:71:3f:77:ec:87:f6:e6:c7:48:20:77:d9:
c3:e4:bd:83:79:61:6d:98:72:29:d7:ca:95:a7:d5:f6:9c:55:
32:eb:02:22:57:2e:e7:17:07:21:8e:6a:6c:ee:d1:34:e5:c6:
47:6e:d6:03:51:e5:f3:3f:b6:1e:7e:94:28:71:1f:81:ad:23:
97:48:86:c9:1f:c3:6d:20:be:6d:78:ab:ba:d7:0a:76:25:96:
31:5c:b9:a0:ca:26:9d:99:59:d7:9b:24:1b:a8:97:f2:0b:2b:
6c:ef:3e:79:24:06:2e:7a:ad:d2:00:7f:1d:ae:40:b6:8b:f9:
81:c6:6e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:56 2025 by rpki-client