Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a8a42d1-3d19-3621-aac8-6eeaf57f6de6.roa
File: 3a8a42d1-3d19-3621-aac8-6eeaf57f6de6.roa (raw, json)
Hash identifier: 0xLCy0Sy7dIfrsyGaObj71MEHzFskXbLDUtB0Ez43So=
Subject key identifier: 38:4A:EA:79:9B:79:2B:6A:6D:73:37:FA:7E:D0:AD:7B:97:8E:8C:41
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F8947BE1A434259B3580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a8a42d1-3d19-3621-aac8-6eeaf57f6de6.roa
Signing time: Thu 19 Dec 2024 13:45:11 +0000
ROA not before: Thu 19 Dec 2024 13:45:11 +0000
ROA not after: Wed 19 Mar 2025 12:45:11 +0000
asID: 20431
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f8:94:7b:e1:a4:34:25:9b:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:11 2024 GMT
Not After : Mar 19 12:45:11 2025 GMT
Subject: CN=75d7f4ea-8a96-4e46-ba7f-9294a342bd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:ae:04:c1:79:ab:e8:43:fc:75:b2:78:73:
69:dc:99:34:ad:f4:b0:bb:f8:51:8e:1d:32:df:11:
b7:67:9f:a7:0d:ee:78:f7:1c:69:7e:de:ba:9d:11:
30:3e:a3:3d:ec:2a:ef:16:5a:1c:9c:aa:a6:84:22:
99:47:8b:7b:fc:5f:4d:38:bf:cf:58:76:a7:a0:49:
03:ae:e7:83:0e:01:29:e8:fb:63:bd:45:c9:39:80:
87:1b:01:36:47:2e:13:a1:44:86:65:d0:cc:67:a1:
fa:45:39:41:60:2c:0a:16:bc:7f:12:5e:0b:5f:18:
bf:b7:a5:8a:bd:c3:69:3d:1c:13:08:ff:0f:21:7d:
7f:a4:4f:d7:e8:24:ae:b8:32:12:7d:6f:94:77:d0:
03:f6:ba:50:03:e3:27:65:2d:8b:d3:52:17:b5:4e:
33:5a:8b:ef:a6:d3:0f:bb:13:6d:7d:5b:4b:0f:cb:
c6:64:b6:0e:a7:94:f9:63:87:20:1b:0b:12:d8:25:
3d:24:f7:c9:fd:b0:5f:69:ba:58:15:88:b5:8b:64:
f8:31:34:05:14:83:a8:29:eb:8c:62:ab:f8:b7:6d:
db:f9:4c:09:36:58:06:0e:f8:7b:fa:13:0a:0c:96:
8a:dc:57:29:15:ba:24:0e:f9:4d:2a:2d:ff:ed:92:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:EA:79:9B:79:2B:6A:6D:73:37:FA:7E:D0:AD:7B:97:8E:8C:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a8a42d1-3d19-3621-aac8-6eeaf57f6de6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:32:a5:61:90:c4:17:fb:12:2e:4b:50:4f:82:c2:47:bd:8b:
49:59:34:13:16:b7:f1:fe:33:c2:ff:40:2f:0e:cc:ff:32:68:
ce:90:42:2b:47:c8:32:3e:28:f9:45:51:ea:dd:67:90:b6:06:
90:5a:a2:00:56:8d:4f:1c:79:d8:1c:fd:83:df:84:79:05:e1:
9f:d4:a6:f0:c4:11:45:f8:35:d5:83:ae:ca:97:8b:99:44:3c:
f6:c1:76:3e:a5:a7:b9:6f:5d:ff:3e:4f:2c:f8:e9:6f:2b:a7:
ae:29:eb:b3:a8:81:39:a1:11:f5:1b:2f:ad:9f:08:da:65:be:
7c:be:52:69:fb:5b:de:0d:16:b0:11:ff:d1:c7:9f:e5:b7:8f:
3a:e0:a9:8a:fa:84:8f:29:d6:ca:d0:86:fd:a9:1c:ed:9d:a1:
54:a0:c3:96:8d:d9:c6:db:6d:b7:8b:69:d8:5c:1d:37:14:f0:
c1:07:29:a1:8b:cb:3e:57:2a:81:4d:50:6f:ca:12:f8:8a:d6:
75:3c:bb:ea:0e:bf:67:51:26:8c:b1:d0:81:59:2c:5e:5b:65:
78:dd:a0:30:53:99:26:b5:e9:23:79:6e:9d:62:12:48:32:d9:
c4:21:a1:9e:d6:85:80:2c:b9:8e:ee:a4:78:32:73:47:f0:d9:
af:ab:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:33 2025 by rpki-client