Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de16341a-9087-32bc-8f9d-37d027e77360.roa
File: de16341a-9087-32bc-8f9d-37d027e77360.roa (raw, json)
Hash identifier: Yc0GUeBaRNDkB3OxLWk1NQcUaO+b1pg4LkUnfEaXWFw=
Subject key identifier: 3F:BD:C4:5B:04:1A:4D:D1:E1:3B:6C:96:66:3E:2B:E2:C0:FB:1C:5A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492CB23588164388457D971900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de16341a-9087-32bc-8f9d-37d027e77360.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 396558
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:35:88:16:43:88:45:7d:97:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=cf564c1f-5015-4969-8993-b4dfd0f4887e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:42:9a:15:31:b0:a5:5f:0f:3b:de:2d:ac:
4e:ba:12:75:9f:9f:b1:cc:9e:75:17:81:b9:e4:dc:
97:ee:f7:bb:3e:e4:58:4b:2d:c2:23:a0:fc:a2:57:
a9:91:ea:a7:8f:b1:8c:73:41:bc:a2:d0:67:ce:5e:
37:61:d6:59:fe:54:a6:47:60:2a:5e:1c:21:96:1c:
d4:d9:f4:e0:33:e2:8f:2c:a7:76:7c:bb:54:10:fa:
6e:10:81:30:24:f9:bc:d6:87:cd:10:9a:41:48:54:
95:53:6e:66:6a:0f:23:04:85:4a:b2:67:b8:43:1f:
62:91:dc:41:f8:51:3f:1a:94:af:26:52:89:a1:57:
e1:fe:02:10:a6:b9:55:19:2e:35:2b:1a:07:c1:2a:
a5:59:4d:38:d8:14:5f:90:7c:10:7a:2d:55:1e:39:
00:29:33:c1:2b:82:65:91:11:86:54:c5:10:00:a5:
09:c3:b7:ea:2d:86:c8:12:46:ce:21:c7:0b:84:14:
7b:b1:9d:ea:8b:5a:ff:2b:8c:40:d0:39:47:f3:58:
89:f1:ea:4d:67:0f:11:d1:d0:9b:aa:93:00:1d:eb:
60:a7:14:ba:00:93:02:43:b9:fe:3c:5e:30:50:03:
48:4a:c3:9f:74:8d:8e:9a:51:1a:56:4d:a9:ee:cc:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BD:C4:5B:04:1A:4D:D1:E1:3B:6C:96:66:3E:2B:E2:C0:FB:1C:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de16341a-9087-32bc-8f9d-37d027e77360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:a7:73:7f:6c:5c:1c:e0:e3:35:88:8c:e3:e1:b7:b9:ab:8f:
b0:4a:9f:7f:3f:a9:18:2f:cc:33:93:21:07:3f:6e:09:8d:3c:
0a:2b:3e:6b:a3:7a:07:98:d5:c0:07:76:73:90:c0:51:1d:58:
2f:3d:cf:89:2f:03:bf:40:69:58:7e:66:3f:0a:20:82:46:d5:
94:43:7d:83:24:a6:bd:ec:0e:b8:5e:12:7e:a9:44:28:f1:6e:
3b:56:fa:51:06:4f:d9:bd:32:8c:25:d5:14:6e:25:75:23:8e:
53:74:3a:b9:5b:2c:aa:ed:b7:a2:4d:f9:ed:63:70:6a:fa:55:
09:f7:02:8b:aa:35:cb:11:f7:be:e4:81:ab:8f:21:93:1b:27:
cc:43:16:62:ba:68:cf:14:01:d4:e3:e8:b5:5e:ec:46:36:15:
d3:ae:30:bb:28:8f:b1:96:57:6c:31:13:82:b6:b2:70:cf:bf:
e6:01:3e:f6:b0:2f:23:01:36:b6:34:7d:76:37:09:23:86:21:
9a:c8:b0:d1:88:5a:13:6f:8b:76:81:6a:9d:3c:79:f2:55:b5:
4f:4f:2d:19:d1:ea:34:11:79:6c:e5:cc:5c:9b:22:d3:0c:55:
2f:55:3e:b9:fb:13:96:d9:d7:b3:25:0f:50:b0:cb:3d:25:da:
3e:1a:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:40 2025 by rpki-client