Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/435223b0-15fe-34e9-9cf5-8d89f4dba351.roa
File: 435223b0-15fe-34e9-9cf5-8d89f4dba351.roa (raw, json)
Hash identifier: BCFHU7VwuVDFLnf5SZlWV13xMb0PKH+xSTCZPopQApg=
Subject key identifier: 66:46:9B:18:EF:BB:08:49:BF:DB:1C:65:28:7C:6E:3E:B2:BE:A3:DD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584840E5C4AF41CE38686239AA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/435223b0-15fe-34e9-9cf5-8d89f4dba351.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 396584
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:c4:af:41:ce:38:68:62:39:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=1f75ed7d-8aa8-4bef-ad6c-6d7680e2a71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:9a:f5:fd:c2:d0:bc:32:6b:e0:ac:59:6c:
3a:07:1f:7d:08:b0:19:9b:09:a0:c0:36:0a:d2:3d:
4d:92:61:f7:5b:95:70:b2:e5:37:50:55:94:e5:6b:
be:0a:95:3c:40:cd:f2:8d:2a:76:fa:33:03:c0:6f:
a5:a8:73:5c:d5:d0:e0:ad:b5:b5:7f:06:48:36:07:
16:7c:e6:b8:20:90:55:cd:b8:fd:1b:34:63:7f:e1:
d9:88:79:d5:44:7c:65:5e:e3:24:55:9f:55:cb:c4:
31:0c:4f:da:64:6b:95:8e:54:89:6c:21:c8:3c:bf:
f1:65:cb:76:5b:36:56:9a:df:14:71:75:fd:07:cb:
f1:d8:d5:09:ab:84:fd:49:c6:3d:3b:58:6e:2e:6c:
c4:6b:27:ec:9f:55:46:12:cc:fa:33:d2:95:a8:37:
f2:f4:81:48:78:33:ab:25:b9:ae:fa:25:1f:e6:ae:
07:d7:8c:25:66:05:a4:76:da:f5:da:98:c6:8f:fb:
46:32:5b:1b:04:e4:63:3f:28:77:46:6c:41:3a:13:
fe:bd:76:9e:55:b0:51:9e:50:66:9d:f2:d2:c6:c5:
ef:a8:fa:14:26:32:30:92:24:10:56:29:f3:ef:75:
99:83:08:98:61:f2:da:d1:66:67:2e:cd:dc:1e:10:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:46:9B:18:EF:BB:08:49:BF:DB:1C:65:28:7C:6E:3E:B2:BE:A3:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/435223b0-15fe-34e9-9cf5-8d89f4dba351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:f9:ed:6f:eb:a8:d9:a8:87:3e:44:ff:a7:a0:30:9d:95:25:
30:0f:57:46:f0:de:f1:a1:bc:1d:bb:eb:03:bc:13:4d:0a:bd:
26:37:24:44:bd:7b:fc:39:c1:27:8c:07:1f:5c:9b:0b:4d:bc:
b0:fb:b5:c9:61:12:83:02:ad:9a:98:79:04:12:d5:ca:6a:1a:
80:af:76:58:fb:d7:d8:76:dc:dd:37:fd:ca:3e:34:4e:fb:4f:
36:02:66:87:7a:80:e6:aa:86:c6:e9:c0:a5:f7:f3:af:a4:97:
4d:07:38:d6:44:73:d7:28:db:50:f3:c2:d5:c2:c3:81:ee:22:
7a:dc:c9:57:b6:c9:ad:6b:5a:44:e3:5a:e7:27:19:a0:a6:1b:
38:4e:42:0c:4c:77:be:f9:25:73:60:3a:a4:95:a8:60:f1:aa:
23:72:10:c2:fe:7c:07:a7:c7:1e:e3:1c:51:ff:67:43:eb:6c:
d5:82:02:1d:6e:48:f2:ed:95:6a:3c:25:54:f4:52:16:1f:b3:
ac:11:66:de:48:b4:ce:ea:9e:8f:1b:25:21:0c:2c:a5:be:27:
50:a1:56:d2:1b:99:eb:cc:ea:84:02:d3:50:e1:7c:bb:9f:18:
e6:47:09:47:4f:ae:d3:bf:f5:7a:15:b2:81:c6:bf:9e:20:10:
24:8e:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:05 2025 by rpki-client