Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e683d821-2aed-3f22-b0c6-a0d8c26aa039.roa
File: e683d821-2aed-3f22-b0c6-a0d8c26aa039.roa (raw, json)
Hash identifier: khzyicSjY8rs5/UBm4DXjDcZSd163DcrDXpRPGAbc90=
Subject key identifier: 0D:B6:C0:B9:68:7E:C8:83:E5:5F:65:44:9C:13:E5:31:9B:C3:F9:CC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183F53EC59AD68A62318E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e683d821-2aed-3f22-b0c6-a0d8c26aa039.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396579
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:f5:3e:c5:9a:d6:8a:62:31:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=f9eaff60-ee3b-4138-afb0-3dd46db26e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:6f:ea:52:74:88:af:e6:7b:88:58:e5:dc:
ac:c7:07:c6:51:8a:eb:29:64:c2:86:f8:dd:e6:d5:
32:0a:44:b7:9a:a1:f9:6c:20:eb:ee:86:e6:c2:40:
6e:f2:53:17:c9:c5:d6:e5:ef:5c:98:95:56:c1:80:
ea:ac:07:1b:60:dc:a3:a3:7c:f8:1c:88:a0:00:c8:
bc:13:2e:fc:6a:29:b1:3d:40:1f:ae:33:0b:dd:09:
21:00:fb:e6:e7:d7:a7:ae:3b:7f:60:8a:6a:38:d3:
36:0e:8c:08:18:6e:59:dc:7a:0b:5f:df:6f:67:22:
35:e3:ab:e2:5b:ad:e9:ff:5f:13:e5:7d:e2:1a:06:
6a:46:43:84:25:00:9d:3f:42:cd:97:3e:28:b5:06:
86:76:c6:a2:e1:1e:0a:93:e8:b4:fa:13:18:84:02:
61:2d:cb:31:92:25:b0:ae:c5:8c:6b:99:84:35:2b:
ed:90:f0:0b:0f:d4:74:32:b4:b1:a6:58:ad:17:78:
07:1e:fa:b7:b9:ea:f4:20:e5:44:8a:8b:96:8c:06:
23:5f:7d:a1:a3:3f:33:44:b6:ce:0a:19:e9:91:84:
1c:df:26:4b:b9:a5:73:85:02:e9:14:59:20:93:96:
c3:f5:d2:8a:b0:5e:c6:97:6b:79:87:3f:18:32:42:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:C0:B9:68:7E:C8:83:E5:5F:65:44:9C:13:E5:31:9B:C3:F9:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e683d821-2aed-3f22-b0c6-a0d8c26aa039.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:b7:77:fb:5c:6a:30:7c:a1:fa:bc:e5:47:6b:82:4c:70:80:
25:00:65:c7:d6:e0:cd:e0:62:b7:a5:c1:b1:8f:e2:99:4f:cb:
05:4e:ec:5d:82:de:97:c9:48:d9:9a:15:33:6b:2c:12:8c:cc:
0e:c7:b6:0e:ce:63:58:41:55:9c:7e:c1:91:b9:50:26:63:b8:
04:e0:f4:38:30:9c:0b:64:42:7e:0f:77:20:f9:95:03:24:c7:
0a:4c:47:89:29:08:98:ea:4a:e6:9e:c9:89:43:65:1d:16:fd:
3e:11:b9:d2:a7:cb:d5:98:96:5c:85:d9:38:34:51:5a:f0:94:
f8:d4:b9:26:f9:11:0d:26:5f:8e:68:8d:16:56:3e:41:35:5a:
3e:5d:e8:fb:24:cb:8f:d3:c8:cb:66:20:1c:4c:6b:bf:51:0a:
ff:f8:ee:12:d7:59:f8:76:38:da:85:8d:b9:01:69:ff:2c:70:
98:eb:30:15:9c:3e:7e:02:92:c1:36:16:3b:08:e9:95:cf:85:
06:af:be:70:4e:ff:8a:3a:b3:93:1a:9f:41:2f:cc:1f:8c:fb:
5f:65:0b:3f:d0:7c:bf:59:11:73:15:37:f0:85:c5:f7:fe:3a:
71:c0:b3:7d:a9:d9:8b:c1:23:0c:bd:4f:8b:fc:04:9f:8b:3e:
5c:d7:30:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:59 2025 by rpki-client