Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c2a0368-e602-3a53-b942-d16b2dd2147e.roa
File: 4c2a0368-e602-3a53-b942-d16b2dd2147e.roa (raw, json)
Hash identifier: 8FsEsDC8BuuVYgssLVjd6LP5tKC2AHsnx80OAY180RI=
Subject key identifier: C3:C0:F0:96:03:A1:B5:F5:2C:28:8B:50:67:2A:A4:10:7A:7D:BC:92
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584842430558C77A8FBBC2E6DC70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c2a0368-e602-3a53-b942-d16b2dd2147e.roa
Signing time: Thu 19 Dec 2024 13:45:17 +0000
ROA not before: Thu 19 Dec 2024 13:45:17 +0000
ROA not after: Wed 19 Mar 2025 12:45:17 +0000
asID: 36622
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:05:58:c7:7a:8f:bb:c2:e6:dc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:17 2024 GMT
Not After : Mar 19 12:45:17 2025 GMT
Subject: CN=a4971e35-fc9a-49f4-91d1-8981a80c2406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:bf:ad:e1:6c:5e:3b:ba:2b:0c:52:83:bc:
e7:a2:5c:47:91:cc:83:ed:ab:d7:fe:e7:d7:c6:de:
77:85:51:8a:c3:93:aa:07:bc:7c:f1:ba:a8:48:cf:
29:c0:31:16:3e:7b:46:cf:a0:04:b8:09:c6:b1:5c:
bb:d9:cc:36:5c:69:06:8b:99:ef:f1:14:4b:ab:ab:
0d:0c:32:2f:34:91:0a:a9:7b:77:7a:2a:f7:77:0e:
59:cf:fb:d7:ce:f8:1f:a6:2d:d3:22:79:fd:68:a2:
1f:02:f2:b3:7a:0b:1e:b1:0a:c9:06:68:10:90:4d:
66:8d:b2:ed:8e:63:a2:58:e9:e3:60:33:80:8d:48:
26:67:28:3a:66:18:16:ae:5a:fb:71:f9:2f:63:ba:
f0:dc:43:88:10:c9:c1:9a:64:46:b6:9c:44:02:27:
77:49:ea:a3:04:0a:63:31:cb:de:c0:ec:bc:77:85:
2b:22:d4:55:da:40:0b:56:2e:89:bd:19:d6:6d:cd:
fc:76:4b:fe:44:16:1d:9a:7e:e8:1d:b6:da:e3:7a:
e6:a8:c3:ed:33:98:3c:5f:75:16:43:72:c0:93:1a:
94:8c:6b:4e:cd:34:28:22:27:50:50:20:b0:88:90:
01:90:f3:30:f2:89:26:b4:96:f6:67:5b:16:6e:43:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:F0:96:03:A1:B5:F5:2C:28:8B:50:67:2A:A4:10:7A:7D:BC:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c2a0368-e602-3a53-b942-d16b2dd2147e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:fc:7c:fe:b4:63:62:bb:b4:d3:71:b1:2e:6b:71:c7:e1:bc:
1d:95:09:62:9a:49:65:3d:55:58:0a:3f:54:04:5f:58:d3:bf:
90:f7:83:7c:c2:93:4f:06:bf:56:77:09:61:42:28:e9:fb:ff:
a2:00:94:e9:24:14:91:49:fb:6e:1e:b4:a5:7f:22:67:60:34:
a1:0b:b5:61:d6:4b:b3:df:aa:69:46:55:d2:eb:6a:22:51:81:
a2:33:02:8f:ae:6f:de:7c:0e:05:88:ad:fa:a5:80:9b:1a:76:
4c:4f:c2:55:23:e9:c9:6f:78:1d:ca:89:d9:3d:f5:4b:05:1f:
16:19:2b:14:53:e2:51:b4:50:fe:5e:2b:21:23:50:5c:2c:01:
af:95:32:6a:f9:44:f5:5f:4a:4a:f5:41:70:6b:9e:7e:72:09:
43:9d:c5:44:2a:11:e1:bc:2e:6f:cc:5c:09:b6:36:cb:3f:19:
f5:b8:47:2b:b6:76:8a:34:d4:b3:ce:00:0b:e1:fa:bf:0d:fd:
36:ea:e5:87:58:1e:75:14:ae:6f:ee:79:de:be:5e:dc:fb:53:
0a:59:82:7a:ca:52:2e:30:e5:c2:de:d1:58:3a:f8:cc:07:61:
61:0f:d5:e9:ed:cf:6a:bc:f7:71:6d:9a:f0:af:41:25:ca:3f:
97:3f:85:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:50 2025 by rpki-client