Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa
File: 3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa (raw, json)
Hash identifier: CNjDzaENMWzSCYikE7xLRHfOx/k/w4frtmVZVMIAaJc=
Subject key identifier: E2:C9:6C:D2:5C:FE:A7:27:F0:E2:AE:B2:F3:82:B8:F1:89:D0:82:1C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484D75A3B9A91259F9A1506240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 397197
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:a3:b9:a9:12:59:f9:a1:50:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=a4d4f0eb-4518-4f6a-bda0-6683d6ba3dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:46:9b:95:63:7c:0a:19:3b:3e:8b:fd:b5:
00:14:6c:97:26:c4:e3:a2:04:56:17:4a:e4:47:c3:
c4:3d:30:25:64:df:41:99:cc:91:cf:a5:aa:5a:95:
04:12:6f:0c:56:6b:16:ef:9a:d8:dc:4b:5b:64:c8:
6b:55:8f:32:33:04:01:60:b8:c0:e3:f3:fc:2e:8f:
f0:f0:91:33:7f:92:38:f8:82:d4:f2:95:b8:d6:31:
8f:7a:18:5d:e0:2c:14:b8:9c:32:00:31:0c:47:1e:
39:15:a0:ab:72:b3:cc:54:32:c7:fb:2d:e5:fa:22:
76:3f:71:bc:95:7d:dc:00:e5:9f:13:ca:cf:3c:0e:
a2:97:0b:b8:c0:8d:e0:90:60:e7:69:0f:8d:9a:a2:
3d:c5:fe:87:9d:c3:01:9c:33:bd:be:ee:59:51:4c:
c2:7d:96:94:75:88:6e:1a:d4:e8:8c:f8:da:0a:4f:
cb:79:25:b4:eb:b6:77:93:fa:fd:fe:cb:30:77:3d:
21:0a:88:ff:11:97:84:2e:df:5b:56:56:1e:20:85:
59:41:01:f7:d0:c1:56:6d:1a:b7:a9:48:d0:e4:1e:
95:5a:c9:a8:da:99:cc:83:f2:5c:42:b3:87:6b:97:
3e:9d:ec:22:c2:dd:6d:98:24:c8:79:cf:f0:28:93:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:6C:D2:5C:FE:A7:27:F0:E2:AE:B2:F3:82:B8:F1:89:D0:82:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:b2:13:09:34:cc:be:02:b4:ac:a9:5c:81:78:73:8a:a0:8a:
75:ef:a5:21:06:32:ba:db:52:d8:10:18:bf:4a:24:f6:ad:2c:
eb:be:bd:26:11:fb:6f:57:c6:8b:1e:b2:4a:79:7b:40:e0:33:
1b:38:0c:19:46:e5:37:92:4b:5e:b5:22:e4:c8:b2:55:9f:92:
2d:f5:e5:f5:f1:3f:d8:c5:64:24:56:c2:c5:b8:0e:c2:26:4b:
8e:d3:3b:e8:11:03:f6:99:04:96:58:1f:50:27:a8:79:e0:fb:
39:0f:9b:ad:05:52:2c:78:99:4a:8c:e0:6e:eb:62:d4:5a:00:
37:c8:cf:b6:27:50:c4:e5:2b:33:51:e8:2c:d8:36:ec:56:5f:
72:74:f9:4f:05:c6:dd:3c:ae:fc:aa:b7:6f:3e:54:83:5f:3c:
42:2b:70:40:73:dd:1e:e8:fc:92:e1:63:b3:d6:d4:ba:c7:21:
7a:57:31:3b:b9:13:86:63:d5:97:d8:a3:75:cb:6d:c6:84:5a:
3c:bc:80:b5:d6:26:fd:3c:71:f5:11:c9:02:1c:74:83:9a:48:
35:81:06:85:67:8e:bd:48:67:c7:75:81:8d:60:70:f0:3c:12:
e0:4f:e2:ae:d5:24:5c:f3:e7:fa:6a:d0:ac:2e:eb:8e:7d:60:
04:c6:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:39:51 2025 by rpki-client