Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df7d80a7-42c0-37e3-bd19-39b7fb4fc09b.roa
File: df7d80a7-42c0-37e3-bd19-39b7fb4fc09b.roa (raw, json)
Hash identifier: cZ9OEwCfT0dBz5tOSW02qzKOFDqnH27/jPJeGdoDzOw=
Subject key identifier: 91:92:A1:7D:B2:1F:01:AF:39:9D:9C:14:0C:C2:55:08:D8:54:9F:D5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183C8C8C90E35D46B0A4680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df7d80a7-42c0-37e3-bd19-39b7fb4fc09b.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396617
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:c8:c8:c9:0e:35:d4:6b:0a:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=6812c795-0477-4e4c-8945-5a57c18b92f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:aa:51:27:fb:ee:45:c8:7d:b2:7c:57:c0:
61:2c:3e:f6:77:ea:a8:bd:d8:88:c1:92:00:75:8d:
f1:e6:28:5b:31:f6:fe:1e:b0:10:c7:c3:39:da:ec:
ae:d7:11:71:f4:81:fc:d1:03:55:7b:39:d3:5b:5a:
71:8a:b4:58:82:2f:19:08:3f:4c:e0:2a:e4:b7:84:
d1:ec:44:e8:b5:ba:2a:83:e9:ce:ee:fd:fb:f6:30:
d0:01:ff:49:38:bf:3e:ad:40:96:23:22:ae:41:ca:
42:0c:43:0c:84:7d:b6:14:e3:48:b9:75:a8:98:40:
9d:d8:f1:ef:37:17:92:d7:78:9a:02:57:bf:d0:91:
9e:cd:fe:0f:bb:5b:ad:7f:77:8d:b8:f5:80:43:94:
b1:30:f9:69:5d:c8:bb:90:ac:f3:e5:01:7b:55:66:
c4:d2:df:bd:65:aa:d4:d6:34:ea:8b:b2:af:07:49:
c8:da:5b:2d:69:9c:47:13:e8:56:7b:75:54:6a:5f:
7f:26:30:c6:f5:d9:fa:2e:8a:87:e0:38:0a:7a:aa:
40:43:c0:90:66:0a:ca:5a:97:75:1c:69:b7:cd:4a:
c0:4b:2c:7f:6f:3d:3f:9e:f2:52:51:45:db:6c:91:
1a:5b:76:9a:11:58:28:c2:10:a3:81:80:ee:ed:b8:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:92:A1:7D:B2:1F:01:AF:39:9D:9C:14:0C:C2:55:08:D8:54:9F:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df7d80a7-42c0-37e3-bd19-39b7fb4fc09b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:c0:70:37:ec:0e:70:c2:0e:45:a1:06:be:8d:25:83:5d:9e:
dd:52:8e:e5:60:34:3d:68:41:c2:44:ab:e3:19:81:01:4e:0e:
e6:5d:ce:35:0e:40:a2:fc:ca:5f:e2:97:d2:53:8b:9c:f7:d0:
7b:45:86:22:99:51:6b:ba:e2:1b:5b:fb:e6:0d:c9:5b:86:ee:
6f:78:24:0b:59:44:a9:01:92:b4:b4:28:b4:51:73:b5:f2:79:
67:69:2e:96:bf:f0:3e:1f:fa:08:9f:9c:61:19:1f:2c:f6:4b:
9f:88:e3:e3:36:1a:51:14:e9:61:4b:7e:23:de:4d:65:ad:23:
20:28:1d:9b:9a:b5:9f:47:96:07:7c:f3:35:99:7b:2f:21:d1:
7f:08:28:ff:d1:75:aa:d8:bd:dc:94:38:35:77:6a:3f:30:10:
53:31:ea:66:72:b2:9f:97:d0:85:fa:4d:2b:ef:ad:6a:f6:03:
65:6c:f2:e1:1c:a2:d5:ed:85:fd:33:2c:d0:d6:ce:f5:12:18:
1b:39:e2:1b:bb:4c:50:35:81:87:9b:58:8d:1b:b2:23:ec:b7:
06:68:65:49:f0:9d:4a:1f:a2:45:42:99:fb:5f:a5:fd:19:26:
70:46:1c:8f:d9:5e:16:11:00:9b:09:dc:0c:14:a7:3f:bb:a4:
9d:0a:0e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:40 2025 by rpki-client