Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f92d8bf6-cd7e-34c6-ba30-b203f55be1c5.roa
File: f92d8bf6-cd7e-34c6-ba30-b203f55be1c5.roa (raw, json)
Hash identifier: qHlh12MLFsQ7I18Y3OQrhyp12tzsXGMPsE7bCU+Frlw=
Subject key identifier: 29:4F:9F:56:73:3E:41:C6:B7:D2:32:63:42:02:D6:CD:72:E7:84:F1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848CB089E39A9AE6DAE4B7FA4C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f92d8bf6-cd7e-34c6-ba30-b203f55be1c5.roa
Signing time: Thu 06 Feb 2025 13:33:21 +0000
ROA not before: Thu 06 Feb 2025 13:33:21 +0000
ROA not after: Wed 07 May 2025 12:33:21 +0000
asID: 36617
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:08:9e:39:a9:ae:6d:ae:4b:7f:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 6 13:33:21 2025 GMT
Not After : May 7 12:33:21 2025 GMT
Subject: CN=78e84fad-778a-4611-ae90-11b48db0734c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:2d:b9:58:f6:e1:57:b4:67:a6:a4:12:d0:
4a:ae:69:05:6b:48:85:d0:b9:55:25:76:25:d7:e0:
e0:40:00:21:65:dd:8f:1d:6a:9f:72:e0:72:0b:6d:
ef:7c:17:5c:c0:30:58:74:bc:84:65:3c:2c:f4:7f:
6f:63:66:8c:fe:ed:29:35:9d:db:77:aa:36:b3:88:
44:c8:ab:66:5c:49:b6:c4:0c:4b:76:b6:16:68:92:
69:ea:cd:d8:88:b3:a2:52:77:d0:78:b9:f9:71:4a:
90:2c:9c:a8:04:17:b2:56:ff:72:81:76:f5:5f:6d:
9e:6a:70:f7:5c:3b:e7:6b:89:b0:60:90:c6:a3:15:
e7:e3:cc:83:15:b3:96:be:91:a8:af:60:75:aa:2e:
ba:e5:0c:c9:d2:2a:29:ee:b8:67:2c:1c:62:6a:07:
e8:7c:aa:78:36:58:d9:51:93:27:2a:48:9a:b0:7a:
f6:a7:e7:a9:d8:b6:07:2e:fa:44:d0:6e:64:d8:f3:
6a:3c:9a:55:4a:9b:74:ec:e5:ad:8f:1c:f5:62:2b:
5c:cd:07:20:41:db:fa:be:04:3c:a6:4d:8f:d3:3d:
e7:c4:59:59:cb:f1:a1:97:9c:96:bc:ea:53:2a:01:
5e:e9:34:6e:7d:cf:f9:3b:29:bb:1a:7b:9b:d3:62:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4F:9F:56:73:3E:41:C6:B7:D2:32:63:42:02:D6:CD:72:E7:84:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f92d8bf6-cd7e-34c6-ba30-b203f55be1c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:bd:e2:07:9d:12:d9:d8:c7:0d:b6:8b:f8:16:dc:e7:bd:7a:
66:69:13:b8:38:be:4c:8b:ff:5c:02:76:32:d9:9a:3c:0b:31:
26:8a:b2:95:08:32:4b:e7:0c:bb:29:f8:2a:50:40:22:1d:6e:
d9:74:2f:fd:5b:59:53:00:83:48:42:1a:3a:8e:d7:de:fa:88:
37:55:62:c2:5e:8a:d7:b1:e2:ba:39:85:ec:46:25:d0:55:95:
3a:a8:35:a0:06:a5:48:7f:74:6d:d4:41:03:90:05:c1:37:c3:
f2:c7:e1:aa:66:1e:34:1b:ab:6e:6a:e3:c0:df:62:f8:10:b2:
6b:54:24:bb:99:01:7e:e8:e2:0b:14:dc:b5:ba:7b:b3:50:4c:
9e:2e:2e:97:6b:72:e4:52:2e:14:f9:40:1b:ab:52:fb:cd:ed:
de:b5:31:11:20:84:75:1d:9e:fd:62:47:5f:28:40:d9:f3:66:
93:29:ad:38:15:7b:d4:d3:f5:29:32:df:d7:88:9a:99:ca:f5:
f6:31:7b:19:51:7b:e5:19:e7:09:f7:b1:c4:29:f2:7b:44:5b:
35:11:d7:43:ef:59:91:dd:da:de:ae:5b:9a:6c:1c:d6:0d:c4:
33:1f:46:14:d1:3d:07:86:61:fa:1e:02:a4:96:5f:19:9b:7c:
dc:e1:78:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:31 2025 by rpki-client