Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5629a573-e636-3a0f-a9a9-ddc5a0e230c2.roa
File: 5629a573-e636-3a0f-a9a9-ddc5a0e230c2.roa (raw, json)
Hash identifier: tbuXTHPNxxsEyHkq+s+28DMvvZe2JoJMjaR1gn8SV3c=
Subject key identifier: 1F:01:FF:7B:10:1C:2A:4D:4D:30:2F:F9:A9:FD:B1:4D:82:58:A1:B3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484D75A0F159CAF9D4D5397A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5629a573-e636-3a0f-a9a9-ddc5a0e230c2.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 20172
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:a0:f1:59:ca:f9:d4:d5:39:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=1859be2f-9ea1-4739-b554-0343b2019e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:3c:6f:ac:25:61:42:01:78:02:3e:b5:a6:
90:fb:90:d3:ee:05:43:b2:aa:03:03:d2:aa:40:24:
2c:1f:a8:67:9f:5f:24:89:0e:bb:ea:e8:df:93:09:
6b:24:56:49:eb:07:2c:9f:60:31:eb:f7:ae:c2:77:
d9:af:1c:aa:14:a5:db:80:6d:1c:89:81:7d:1d:f9:
6a:65:6d:f2:8f:9a:ed:1c:f2:f0:3f:64:1d:2e:29:
86:a2:7b:36:7b:38:c2:37:1e:ca:74:e0:30:4e:8d:
89:06:85:13:c8:36:58:d4:fe:94:a0:a3:84:c3:d7:
50:83:52:5a:5a:06:c2:90:0e:75:7b:a4:97:98:52:
f4:a1:3c:c2:e4:ef:e4:0e:b8:a7:c7:82:d6:76:ac:
ec:f1:e5:69:4d:35:ae:a7:5d:34:90:39:d3:80:62:
07:d5:4b:55:38:7b:50:aa:7d:4c:47:62:46:aa:e3:
e6:6c:2c:df:fe:54:d0:53:ec:67:01:b8:32:ac:9d:
5d:00:1a:64:13:00:9d:88:7d:96:d2:cf:43:bf:ae:
9d:ee:64:b2:b7:b6:37:6e:e4:78:ff:7d:a3:9c:10:
50:56:21:10:bf:de:6e:0c:fb:96:3a:4d:a6:d6:0a:
64:e7:4a:39:ea:f7:1e:01:fd:f5:56:0a:62:d4:7b:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:01:FF:7B:10:1C:2A:4D:4D:30:2F:F9:A9:FD:B1:4D:82:58:A1:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5629a573-e636-3a0f-a9a9-ddc5a0e230c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:45:28:cb:ce:c6:6d:e1:d9:19:51:74:4d:b8:4f:0d:88:dd:
93:82:e3:07:1f:21:80:fd:9f:c2:76:bf:bf:b0:97:b5:31:e5:
a6:d8:0c:ad:5d:a7:4e:28:bc:a3:53:0b:d3:73:7e:4d:46:a4:
13:50:f0:0a:8d:a6:87:24:78:00:35:98:48:4d:95:a1:7e:05:
fd:a8:79:e3:eb:a1:96:c7:4e:2a:47:f2:66:a0:d2:60:87:b2:
aa:43:e5:98:59:71:2c:be:39:a9:26:e7:ec:db:96:88:70:8b:
73:1d:a4:58:fc:58:8e:01:81:f6:68:3e:3b:9d:d8:96:fd:30:
f8:1f:d5:b4:5f:d8:9c:60:fa:0f:91:70:1c:11:bc:63:f6:59:
e4:e2:e4:61:43:a9:df:34:65:ea:88:a1:ef:70:e7:bb:2f:4e:
01:92:fa:b2:1d:a4:ee:16:00:90:a9:c0:89:09:80:cb:21:b2:
79:85:27:ea:e8:ca:ad:f3:1b:b0:4b:30:8b:7d:24:b6:d5:de:
ef:44:f2:c2:9f:04:47:be:13:5a:41:61:5d:b4:90:76:f9:6f:
b1:fb:2d:22:e4:82:ad:ab:44:0c:a2:09:a8:0c:36:16:1b:d5:
11:91:44:65:f4:b0:1c:59:4a:b5:0c:15:11:e2:4c:03:2d:fa:
12:c6:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:11:01 2025 by rpki-client