Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8aa5a9b-e494-34b7-9df8-58230a9a70dd.roa
File: e8aa5a9b-e494-34b7-9df8-58230a9a70dd.roa (raw, json)
Hash identifier: S+N+JYhPkPBMhY4Hz4UXIJlLA0+6LktkLay5B5ZDGWg=
Subject key identifier: 59:D6:8F:31:0B:0F:CA:59:5B:73:2B:13:46:15:0A:CA:83:6A:43:03
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D7E1F529CAE171C2B220
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8aa5a9b-e494-34b7-9df8-58230a9a70dd.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396582
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d7:e1:f5:29:ca:e1:71:c2:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=eea76374-dd7f-4b74-9ab2-70e7d822cfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:e3:d1:4c:dd:7a:29:64:eb:d3:2c:ef:9b:
2e:13:f7:71:e2:f6:2e:46:52:43:c0:cf:02:9f:cd:
f0:88:b5:79:78:1c:ac:dc:99:8a:52:ea:a0:fc:83:
74:31:cc:1a:e6:14:03:82:29:76:23:02:1d:7a:94:
bc:3f:c8:c9:c0:9a:a7:a0:d9:fc:92:2f:f4:32:f8:
1d:7d:67:3c:ff:d8:d3:12:15:1a:35:33:2e:20:7d:
51:a5:38:be:e4:a4:17:71:ee:a4:f8:df:92:ab:dd:
2b:25:57:11:9b:93:5c:31:0e:85:d0:00:65:67:fb:
a6:f5:31:ae:b3:94:6c:8e:9f:2b:b3:af:33:39:11:
1a:c3:ad:c3:35:82:46:c1:94:7a:2c:7a:97:70:90:
fc:9e:3f:ba:93:dc:70:db:a8:22:49:44:f3:7d:1c:
07:e7:11:7a:03:7c:b7:b2:65:28:2d:2e:39:e9:10:
5c:59:2e:b3:cb:b9:78:e6:f6:8d:30:c7:75:28:61:
6a:3c:a8:65:a2:80:2e:b4:0f:0b:ae:ed:eb:2b:57:
51:de:16:62:97:7a:bf:ff:8f:ae:95:3d:f1:0d:59:
8c:5e:7b:ae:3c:2a:94:94:b6:ee:db:9a:5b:49:b4:
f1:64:51:81:68:9e:22:e4:14:cd:5e:af:64:e2:45:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D6:8F:31:0B:0F:CA:59:5B:73:2B:13:46:15:0A:CA:83:6A:43:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8aa5a9b-e494-34b7-9df8-58230a9a70dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:4b:27:98:90:5f:86:38:24:ea:db:47:e0:5d:97:b0:2b:40:
50:ec:38:9c:55:5e:72:af:db:f2:12:52:eb:b9:40:81:d1:21:
45:7a:7a:a1:25:22:92:33:41:51:86:86:70:ea:10:48:9e:65:
0a:fa:b1:e5:cb:57:b8:f2:88:d3:c2:cd:5c:f7:6f:49:3a:55:
05:f8:f8:9a:6d:0b:d5:6c:45:13:2f:68:a5:b0:19:31:4f:33:
e2:0d:c9:ef:fe:e2:da:3b:a3:18:b2:f0:06:2d:99:07:96:f0:
ca:e3:87:95:63:ec:ad:30:26:cf:8f:f9:a3:f5:8d:1a:3b:82:
61:c3:6c:99:1b:ce:a4:67:06:32:e1:7e:cd:88:14:0a:25:d9:
e2:0f:10:a0:d4:e2:09:20:5e:c5:f2:f3:5d:a7:94:bc:e7:8d:
6e:ca:78:fa:0d:98:30:49:d5:68:fb:dd:bd:b8:75:db:3e:96:
9c:89:16:7b:d5:2e:a2:d7:6d:e0:36:46:55:32:00:c3:82:bb:
15:c4:4b:c0:28:be:3b:3f:51:9c:f1:b8:34:36:62:50:a9:43:
51:39:77:6c:34:64:67:e1:e9:2a:29:fd:fc:66:ed:61:48:dd:
92:15:06:2a:90:8d:d1:1e:00:a5:5e:ae:f2:e5:51:a2:9b:8b:
8f:49:94:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:29 2025 by rpki-client