Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2389055d-57d9-3e68-9ab3-2b45ce8d1f67.roa
File: 2389055d-57d9-3e68-9ab3-2b45ce8d1f67.roa (raw, json)
Hash identifier: lgJ/sbzL2NQ6vz7WQ/TF0FC5U5uGdYvq8W+/M2Q0PEE=
Subject key identifier: 64:72:BA:A4:8D:DA:64:5E:61:C1:95:17:DC:C1:51:61:A5:6C:7C:89
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484D759E971A137A63E3988780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2389055d-57d9-3e68-9ab3-2b45ce8d1f67.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 396614
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:9e:97:1a:13:7a:63:e3:98:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=3e7d4feb-fbad-409a-85db-48b505e96cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:34:13:16:46:0d:bb:c4:fe:5f:37:c0:03:a5:
9d:9e:5f:99:1a:21:9a:d8:97:5c:79:47:ea:e0:22:
28:4c:32:55:fc:d7:95:74:09:d3:2a:4a:4e:a9:fc:
e5:00:f2:ad:38:94:b7:cf:40:d4:53:13:22:54:da:
88:66:7c:96:9a:78:a5:7e:fb:d5:4d:d6:a6:71:e5:
23:5b:63:b6:09:aa:16:6b:29:bc:e0:90:33:6b:67:
1b:82:e5:d8:1b:39:66:82:59:7e:24:51:4e:56:a3:
a1:33:5c:54:f0:1d:3b:31:19:fc:26:c3:22:23:34:
80:ba:fb:7e:34:1a:7b:88:8b:ab:78:72:13:48:ae:
93:0d:a1:0e:aa:d1:5f:be:3e:cf:af:f2:26:eb:45:
ba:f6:bd:c9:3d:a1:40:89:75:f1:48:33:74:c3:5b:
1a:16:f5:e3:26:70:da:44:4a:ed:3c:22:c3:f8:99:
14:30:6d:f4:4b:9a:53:a9:cd:54:d7:f9:e7:1e:3b:
3f:d5:69:7d:e9:50:cd:d7:dc:4c:4e:89:cf:60:c2:
4c:00:3d:2b:68:f4:56:37:3c:ce:d7:8b:ee:23:fb:
0f:c7:3a:a6:7a:ac:76:c4:1e:fe:11:99:0a:63:32:
49:46:1f:dc:d1:57:7f:2d:fc:e3:81:08:32:29:57:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:BA:A4:8D:DA:64:5E:61:C1:95:17:DC:C1:51:61:A5:6C:7C:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2389055d-57d9-3e68-9ab3-2b45ce8d1f67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:6d:58:d6:94:29:8b:0e:8e:db:4f:35:e9:3d:8c:83:49:ca:
d5:e5:9f:10:9a:6f:b8:33:16:d5:34:28:07:9a:40:9f:7f:c5:
15:45:49:70:aa:17:d3:b7:38:bb:6c:5a:bd:11:b1:a0:85:68:
c3:3f:6a:a1:0f:bd:8c:b5:b8:f3:25:e2:05:bb:69:0d:d9:00:
a7:e3:5a:34:07:18:e4:54:1c:a6:e0:d2:0f:18:7d:e4:eb:3d:
41:8c:65:7a:21:1f:3d:4a:48:52:92:96:b0:63:43:bd:9d:46:
0d:56:72:c2:15:43:08:b4:02:f6:f1:4b:d9:7a:8f:b2:b2:9d:
e5:27:06:5c:cc:7a:ca:48:60:f3:0a:a4:ef:47:f3:d4:3c:9a:
17:c6:01:9e:0c:94:e9:6c:a7:fb:b5:4f:04:78:fb:e3:0a:ad:
0e:ef:e4:87:c0:79:8e:8d:35:45:e8:20:ea:ad:3c:b8:0d:f7:
4f:13:33:c9:e0:bf:47:6d:b1:79:00:dc:cd:63:84:57:41:28:
85:64:26:b1:6d:02:d2:7b:f9:ca:a8:8c:3b:7c:b4:b3:ed:f1:
14:51:69:fc:7d:72:85:c9:f0:d2:db:67:e0:1a:5c:c6:bb:c4:
33:0f:60:82:82:02:99:05:8d:b1:fc:ce:f3:aa:ed:5d:5d:ef:
a9:0d:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:59:54 2025 by rpki-client