Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa
File: f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa (raw, json)
Hash identifier: oWjWuzzJzHohH/iebuby+IRoX3nAX7IF81x5KbkG7qs=
Subject key identifier: 02:B5:52:D6:1C:08:74:C6:5F:09:FB:25:8F:EE:13:A9:A6:72:40:C0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849203C7FE54723E308BBC24600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 36621
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:7f:e5:47:23:e3:08:bb:c2:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=4e8520f9-d869-4068-b881-a29a9094ea53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:fc:e2:f8:a8:2e:73:aa:3f:84:e8:ae:9e:
ed:e9:4b:d8:2c:0c:a9:60:72:b7:1a:01:44:09:67:
6f:6a:dd:9f:39:4c:4f:b4:16:78:87:c1:d1:51:e5:
88:fd:40:b1:44:a3:cd:30:46:60:3e:ac:57:0f:ea:
14:c5:e3:7b:e4:0b:72:e8:b6:1b:42:a8:db:31:10:
bc:8a:a1:25:8e:38:ca:c1:46:30:33:3c:4a:cc:a5:
48:7e:52:e7:d7:ea:42:f1:67:b2:e9:cc:62:c0:96:
65:16:a8:f1:38:e0:f8:42:40:07:87:ab:b4:7a:31:
e2:44:46:29:f5:5f:5e:ef:16:ee:8f:be:3b:36:a2:
9a:da:bf:d9:68:c5:2f:9d:52:29:6e:b0:68:00:9d:
67:21:5b:4d:22:40:b0:dc:00:3b:28:5c:a7:98:7c:
06:a4:07:8b:35:d7:72:4c:db:60:44:ce:24:6f:8b:
07:43:85:22:8e:af:b4:df:42:2e:1c:a8:a8:74:2a:
61:83:23:49:9a:c3:6a:29:0e:af:db:e3:2f:43:13:
7b:32:af:18:50:3b:04:5f:f0:7f:99:24:27:05:a3:
9b:bd:1e:77:31:5f:ae:f7:4b:f8:91:7e:33:88:f0:
d9:38:34:ee:7a:f9:34:eb:45:66:36:fc:9f:d4:46:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:52:D6:1C:08:74:C6:5F:09:FB:25:8F:EE:13:A9:A6:72:40:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:d9:60:55:05:40:c6:07:af:bb:5f:bb:1e:5c:33:25:b0:c7:
09:64:79:e5:be:52:16:a4:65:2d:a0:ee:ab:0c:ec:f1:77:a0:
fc:bb:5c:6a:5e:eb:8e:4c:34:00:c9:17:4b:be:f8:c0:b6:a3:
11:4d:a8:84:ad:94:c6:fb:23:40:ba:e0:73:9e:05:e3:18:76:
e5:3e:73:48:e2:a6:7e:87:44:46:bc:33:28:33:c0:d0:f1:b3:
2c:75:44:94:a0:45:0d:44:22:65:a6:2b:e8:33:1c:21:9e:94:
d6:5d:9b:e5:4e:1e:1c:df:43:51:03:17:76:62:ca:d5:93:9f:
61:ac:0e:10:51:62:a9:4d:72:6b:2d:ed:1c:b5:db:b5:43:dd:
d6:ba:90:95:90:f8:87:b4:86:99:5d:4c:dd:0d:8a:70:cf:de:
69:e2:ea:b8:e7:47:25:82:0c:41:17:15:d8:c8:47:52:2b:4e:
b8:7f:31:51:6c:cc:8d:c0:f2:4e:7b:cc:7f:b1:e1:df:6b:56:
32:56:b9:ea:3e:c9:9e:4c:fb:cc:c4:87:fd:6f:af:f3:10:95:
af:a3:cf:72:dc:79:33:51:95:eb:8b:70:1d:66:78:16:c7:15:
ed:2d:0a:93:31:f3:d5:b3:49:f0:17:e1:6d:d6:f3:34:85:ac:
d8:37:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:48 2025 by rpki-client