Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84ad808-5259-3a89-b4ec-ee12d809fef5.roa
File: f84ad808-5259-3a89-b4ec-ee12d809fef5.roa (raw, json)
Hash identifier: 0ucmM+PEKAukqCTIORUgDhAgxUjM3k0vA1R0rkplpms=
Subject key identifier: F7:A2:8A:5A:EE:9C:22:9F:7F:94:80:05:CE:78:19:63:60:BD:2E:4B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0EE773B6183088253C440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84ad808-5259-3a89-b4ec-ee12d809fef5.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 27544
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ee:77:3b:61:83:08:82:53:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=1af398e6-ea5e-43c7-b5ce-30f226d8f963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:ea:d3:58:c9:e8:7d:72:55:52:5f:c3:3e:
f3:be:e5:53:11:46:ff:28:0b:6b:9a:3a:01:d9:8d:
71:d3:00:d5:aa:c2:cb:b9:2e:d1:90:4e:8d:0c:48:
58:a3:0e:b7:df:fb:73:69:3b:ec:52:3c:73:d7:03:
45:37:07:ce:4e:84:f2:09:c8:67:25:9a:62:10:01:
aa:87:a9:12:c1:09:9f:c4:e0:94:85:f8:53:51:14:
c1:f1:11:2b:6b:fc:5c:d9:e7:83:55:91:28:57:64:
9d:10:84:f1:24:68:7c:34:79:a8:b8:cf:24:30:51:
57:38:fb:88:7d:3a:33:60:be:8a:cb:f6:1e:63:47:
e0:a3:83:aa:8b:1f:40:e7:5f:dc:e4:b5:3b:24:47:
4b:3c:f4:b8:73:de:3d:f0:5e:2d:6e:f3:e3:fc:62:
ed:69:c1:59:a6:e7:26:3f:10:85:74:08:4c:1d:db:
3d:00:ef:9b:01:79:f0:14:1e:03:82:01:e6:63:98:
cd:35:94:25:60:50:17:b2:96:52:f7:a1:4b:b5:4b:
53:34:4b:e7:42:55:91:cb:a2:b0:50:77:a1:fe:2a:
bb:52:3d:83:3b:e3:4e:57:91:1d:90:fa:b0:62:64:
0e:46:fc:9a:bc:af:32:30:d4:b4:5a:ce:e6:9a:37:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A2:8A:5A:EE:9C:22:9F:7F:94:80:05:CE:78:19:63:60:BD:2E:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84ad808-5259-3a89-b4ec-ee12d809fef5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:da:11:8b:d4:37:05:81:9e:04:80:9c:ca:95:1e:37:4c:41:
c1:8d:c3:5f:2d:39:07:96:5c:42:d2:b8:45:14:bd:41:f9:5a:
b7:39:39:bb:ae:a3:26:9f:e5:76:11:43:31:ac:b8:ae:d3:e3:
03:54:9d:50:0b:2d:5d:c9:e9:2b:95:fd:02:2f:db:00:be:dc:
d3:91:54:1c:23:ff:ca:b6:eb:30:42:27:50:b4:34:37:a1:70:
57:2d:0a:af:4d:ba:4a:45:42:67:df:7e:e4:e3:4b:62:b9:95:
3f:80:7d:4d:bb:72:a0:25:2a:77:6e:b8:d8:e4:04:9c:b6:23:
b6:e2:c1:28:a0:52:3c:ef:ef:ee:ef:bb:48:a2:81:73:44:cd:
e0:80:c0:1d:67:f3:60:bc:3c:ed:c8:99:bf:da:96:7e:08:89:
21:c6:58:11:b2:9d:dc:12:a4:9d:87:01:61:6a:e8:de:87:d7:
97:15:92:5c:10:9d:70:aa:12:6b:8f:0f:8d:76:8b:0a:33:34:
8d:4b:f8:c0:de:cb:f2:cc:7a:ba:27:7d:35:c0:ab:91:7b:47:
93:c8:bf:b8:d8:0f:30:ad:86:b2:89:85:93:0d:cb:ea:60:a7:
4f:db:ff:40:57:79:f4:20:77:cc:a7:38:2f:a6:7e:40:38:32:
86:83:7f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:55 2025 by rpki-client