Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa3aef32-ca31-3eed-803e-2d477c6bd6e3.roa
File: fa3aef32-ca31-3eed-803e-2d477c6bd6e3.roa (raw, json)
Hash identifier: bck5QF1k18Gxn4nuEFu6DgD8ux7Ssk8Z44/pyrMn3Lo=
Subject key identifier: FD:61:F8:65:12:57:5C:29:68:E0:4C:A7:30:94:FB:15:84:F3:9C:9B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AF2BAF75ECE143F99C12D880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa3aef32-ca31-3eed-803e-2d477c6bd6e3.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 36631
IP address blocks: 192.81.185.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:af:75:ec:e1:43:f9:9c:12:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=66e56d50-2a55-46af-b3f5-2e527f7f60cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:f6:b3:81:37:28:78:c6:f1:16:98:d5:e9:
67:d2:67:f4:b5:33:2d:5a:85:71:8e:86:6b:11:d9:
d2:d9:47:6f:6f:19:f7:96:dc:c1:c0:01:5f:72:f6:
47:ce:6a:ce:e3:14:3d:3f:64:c9:c6:5a:37:68:61:
45:8d:8e:e2:1d:20:d8:23:f9:ef:d2:bd:ab:63:9d:
92:0a:48:e6:d2:81:20:fc:20:a0:2d:75:60:b2:13:
56:d5:68:21:63:2b:a1:41:6f:c6:bd:54:ac:37:91:
b5:9a:d4:89:f3:c2:85:4d:f1:97:85:26:c1:da:4c:
6b:b3:5e:f8:1b:03:c5:a9:da:2a:8a:f8:6f:08:75:
06:7d:62:ad:ad:82:f8:2c:a9:5e:d4:7b:17:9d:e2:
b6:52:bc:7e:84:e7:1d:62:44:d3:55:09:9a:5e:f6:
3a:d3:ba:50:f8:72:f6:04:29:4a:8e:ff:9f:bc:cf:
25:5e:4e:b7:f7:e7:e2:ad:73:4f:25:ca:00:de:2d:
f4:6f:40:5c:22:b4:de:3b:74:0e:12:d2:4e:c6:e9:
1f:12:00:1a:87:09:fd:5b:36:c7:e1:de:18:82:8c:
83:d3:3a:3d:88:51:ea:0d:16:60:37:87:2c:95:49:
1c:b6:13:06:de:b7:02:2d:f1:4e:1b:ed:75:8e:bd:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:F8:65:12:57:5C:29:68:E0:4C:A7:30:94:FB:15:84:F3:9C:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa3aef32-ca31-3eed-803e-2d477c6bd6e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.185.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:a7:59:8c:d3:a3:ed:15:40:8c:c2:48:4a:dd:e1:10:36:70:
23:53:32:88:2d:16:42:6b:19:bc:b8:16:5f:68:b9:63:29:4d:
47:3a:d0:54:a7:c1:7c:b9:6e:5b:48:b7:a5:08:c7:b9:b9:24:
3c:cd:9d:78:0c:da:a7:72:9b:06:33:4a:35:e6:e7:7d:d7:5c:
be:f3:11:8d:b8:5f:ae:7f:df:87:72:ee:d0:4a:da:04:a5:d8:
dd:cd:10:9a:dd:42:51:a9:6a:35:c1:63:8d:eb:66:df:93:03:
df:69:b7:1e:3b:54:4f:1f:9b:c6:92:84:71:54:3f:90:d4:13:
e6:50:85:b7:90:6e:f6:b6:ff:62:40:ed:bf:6e:02:be:35:1c:
2e:ed:06:17:63:47:eb:a9:ba:26:4b:83:18:0b:39:59:2a:66:
5e:1b:00:07:cd:14:94:6c:9c:eb:e2:cc:16:c0:af:7d:28:1f:
b4:bb:97:9a:58:2b:5a:d1:26:2b:3b:31:d7:fe:b4:62:62:67:
75:37:17:22:74:76:2e:7a:2a:3e:da:c4:ad:1e:8c:77:6e:f2:
f8:fa:e1:12:74:0a:a6:a0:cc:2e:24:33:f6:bb:eb:b1:a9:38:
ec:29:de:9d:3e:fb:a4:fd:a6:fc:78:ba:2d:23:f3:2c:78:04:
b0:a4:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:40 2025 by rpki-client