Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef35a612-9cd0-320e-99aa-fff21a92777e.roa
File: ef35a612-9cd0-320e-99aa-fff21a92777e.roa (raw, json)
Hash identifier: ZG6ZQqQH7pPNWdEPwQHRUQUD/eIQhav1jntE2cUdXbc=
Subject key identifier: 59:07:D4:E6:85:BA:0A:F8:7D:76:C1:67:15:30:97:58:2F:69:33:B9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858492183D989E98D549CAED15200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef35a612-9cd0-320e-99aa-fff21a92777e.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396547
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:d9:89:e9:8d:54:9c:ae:d1:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=f4c2668e-d6b4-402c-8733-5e19eb84cb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:39:7a:8c:3e:1c:ea:f5:ec:75:03:b0:07:
e1:42:48:1e:35:95:27:17:a9:98:e4:a4:69:20:b6:
d2:91:7d:2c:eb:d2:12:40:31:e1:cc:4d:8e:59:90:
2a:0d:a9:fe:e3:66:67:20:81:f4:b0:5b:5e:bf:00:
04:01:ad:2d:73:12:7e:72:62:7d:7b:0d:31:59:f0:
4d:23:0b:3f:f2:bb:45:5a:10:72:c5:3e:8d:0d:02:
92:35:d7:6a:82:77:e0:c5:5b:77:76:dc:bb:42:ff:
bc:55:9f:42:53:ce:b2:87:6a:7c:fe:29:a6:15:20:
41:f9:de:c6:17:97:0a:be:25:f6:84:db:2c:82:43:
76:74:da:63:76:59:78:63:4e:da:e5:59:9d:33:fa:
f6:81:62:c4:8e:a2:8e:9a:30:4e:f9:a5:c8:de:d7:
b1:24:2f:e5:12:1e:3f:ea:27:d4:ec:b3:d5:b8:a3:
10:0f:98:09:fd:e1:2e:74:8c:ff:e4:c5:da:87:7e:
fa:da:cf:69:b9:ac:76:66:92:2a:20:57:39:06:5a:
7f:ff:ae:0f:a0:b3:33:73:46:88:a5:88:38:26:cd:
3f:91:2c:32:ca:34:15:fa:97:f7:bd:2d:1e:d4:97:
2d:a5:80:70:6b:6b:b4:55:ee:1c:2b:da:8a:6e:0e:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:07:D4:E6:85:BA:0A:F8:7D:76:C1:67:15:30:97:58:2F:69:33:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef35a612-9cd0-320e-99aa-fff21a92777e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ad:ae:ed:1f:bc:9c:40:db:69:9e:53:c2:c1:1f:93:29:0d:
83:68:95:89:3d:28:b4:1a:1e:5d:51:a0:ab:05:bc:f7:85:77:
85:46:96:a9:8a:2f:73:ce:1d:a7:7e:d3:a9:43:1b:78:de:6b:
c4:2b:b5:65:c3:1e:72:c2:81:07:df:88:e0:bc:2a:b9:4b:d4:
5e:08:4c:9d:24:6b:b9:a5:af:cb:12:b1:92:ca:fc:0f:ee:a3:
97:45:26:fd:9b:31:8a:56:b4:d4:33:da:7a:71:71:97:63:65:
a2:03:f5:6e:66:81:d8:31:2b:b0:7a:7a:ab:25:0b:fa:bd:1e:
ba:44:8b:94:65:65:74:5b:ed:85:94:b1:ad:ef:46:57:bd:c3:
47:22:71:62:77:42:b5:e1:fd:50:21:df:76:f2:fe:c4:68:65:
2c:9d:bb:f5:74:06:b1:66:13:4d:47:48:e1:fc:c6:dd:98:18:
dd:cf:74:6f:e4:8e:9c:53:38:8a:5e:3a:e1:13:87:bc:b6:c9:
35:7a:ef:69:a6:93:f4:fd:e5:11:06:3b:27:22:85:c1:41:49:
6b:1e:20:2d:7f:77:c3:36:34:06:a2:0b:54:b7:bb:35:47:c3:
bb:6a:da:2a:19:40:e3:0e:e7:d4:6a:89:19:99:19:e5:1e:bb:
15:2d:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:28 2025 by rpki-client