Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76520a6-0821-3591-a391-f0e2ca02a540.roa
File: d76520a6-0821-3591-a391-f0e2ca02a540.roa (raw, json)
Hash identifier: s5CVEadx0wuwhMMyEuk34ZbXfNAtu6dJPqFVcaH2N7M=
Subject key identifier: 56:12:37:0D:39:F3:27:47:6A:90:CF:6D:EC:E9:56:F8:9C:B2:3D:4B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849203C80B7A45617790BCF7500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76520a6-0821-3591-a391-f0e2ca02a540.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 397194
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:80:b7:a4:56:17:79:0b:cf:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=3832bf73-1003-4042-9480-068370613248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:61:0c:1f:32:d3:d4:c3:79:f0:d1:0a:78:
5e:cf:42:33:73:64:ee:2e:12:9b:41:58:bd:9c:4e:
13:7d:4e:94:7c:49:f0:4f:9f:47:08:d1:d6:6b:75:
b4:2b:bc:1d:11:82:a1:31:cd:2a:0c:9b:9c:e8:f2:
8c:d6:ce:83:fe:a4:f7:5a:80:fd:f2:f7:41:d0:c9:
43:9c:b3:0d:a0:9e:02:e5:1b:ae:0c:34:69:2e:17:
02:33:4d:05:d0:83:85:91:38:5a:ab:41:e0:59:a3:
e2:04:3e:c1:c7:48:6f:cf:49:9d:16:41:4c:ee:ec:
76:df:58:b1:9e:ff:c2:70:e7:38:4d:27:e7:31:b9:
93:2a:c6:e5:50:0b:44:8e:0a:bc:97:8d:46:34:2f:
09:2e:c8:1a:3b:af:27:05:4b:73:bf:82:11:ca:9d:
08:d0:1f:07:69:bc:b3:e8:f4:cc:8d:83:26:35:92:
ac:36:e7:66:c9:22:3e:a1:fd:e5:1b:6a:7f:07:4d:
f5:d1:34:2e:c1:02:60:47:8f:94:92:31:99:c3:a3:
1c:f0:8b:a2:95:c6:f6:0f:28:f1:3f:34:34:c7:8c:
a2:0f:45:82:23:20:38:db:c6:df:a9:2d:75:56:66:
50:64:ac:4f:3d:d9:cd:fb:92:45:66:19:2f:16:97:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:12:37:0D:39:F3:27:47:6A:90:CF:6D:EC:E9:56:F8:9C:B2:3D:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76520a6-0821-3591-a391-f0e2ca02a540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:a2:31:46:5a:5e:98:d0:06:ef:35:39:dd:94:a2:f1:ce:b6:
66:7e:69:95:03:cb:f1:5b:33:1a:a7:66:25:31:e2:5f:92:35:
02:90:0c:f4:fb:ba:31:0e:c4:4a:60:5d:b4:54:15:7b:48:7f:
70:ff:86:f9:89:2c:81:ee:ac:8b:4d:48:b4:10:d5:7c:24:77:
c0:ae:e3:15:c8:db:56:74:a4:15:b5:40:3b:f3:f0:fa:2b:bb:
85:c5:d0:ee:4c:3f:81:ec:5d:f1:82:82:bb:ea:e9:7b:e7:38:
19:bc:32:48:91:c8:7d:a0:d3:9a:be:4c:20:a0:fc:15:30:e5:
57:2b:ef:64:56:d0:f7:ca:00:a8:5b:f9:d3:e0:b8:66:4c:22:
5d:5f:ee:86:93:1a:60:90:e4:ed:f3:a3:da:e6:72:ec:61:f8:
4a:3e:bd:07:96:41:2e:6b:68:42:a0:b6:39:e1:26:a2:c9:18:
da:a1:4f:92:86:b5:93:ac:4e:e4:cb:0c:8d:ac:65:75:47:93:
00:fb:d1:7d:f4:8e:0e:c5:c1:2b:2b:76:1a:42:98:ca:cf:21:
dd:aa:e4:1e:46:e0:7a:37:71:d1:01:cc:2c:39:b3:6e:6c:24:
5c:78:1c:f3:c5:f2:3d:4e:c8:9e:8f:a3:92:d6:4c:d2:a0:4e:
26:bf:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:46 2025 by rpki-client