Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/804918a1-40fa-3cec-a061-4c887a82ed93.roa
File: 804918a1-40fa-3cec-a061-4c887a82ed93.roa (raw, json)
Hash identifier: Z8aajvF8VE3EmT0DR38e06p/kEqIJc67z23uzBQzmQ4=
Subject key identifier: 66:81:C8:89:2F:41:48:9F:A5:4F:6A:44:2E:24:3D:F4:07:7E:40:BD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484D759FA4850AF8477038A480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/804918a1-40fa-3cec-a061-4c887a82ed93.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 397208
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:9f:a4:85:0a:f8:47:70:38:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=ce216f67-49c2-4f78-81c2-390c66e15e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:51:14:67:37:94:ff:88:f4:f7:30:2e:e9:83:
1d:47:b4:b5:c6:2c:1f:e9:c7:21:6d:87:95:16:b1:
f0:eb:90:de:20:6c:94:b1:dd:7a:d3:cc:26:ba:8a:
3c:cf:83:a4:c6:fe:c7:8a:5a:cf:c5:bb:73:89:1a:
a0:45:cd:15:1a:91:38:a3:75:92:38:a1:57:65:1c:
f7:91:3d:88:3b:06:81:a5:d5:21:14:b5:f0:b2:5a:
e9:e6:76:1d:ec:63:2e:5d:42:00:4f:2d:45:2b:35:
31:5c:49:83:b8:9c:ec:28:9a:30:04:d2:b1:90:f5:
14:d7:9c:9d:08:5e:07:4b:19:7a:0a:37:06:ff:51:
75:bf:b1:5f:91:ba:e5:8d:d2:9b:59:19:71:c4:a3:
37:45:db:f4:df:1f:d9:f1:e9:06:16:48:ba:34:0a:
e3:03:1f:67:c7:5f:af:72:9c:37:61:b4:a7:46:de:
b0:0f:92:62:bf:09:fe:90:f6:b4:60:0a:cd:2f:91:
81:7a:57:9d:47:6d:af:ba:ff:2d:c3:3c:df:5f:d0:
24:cc:cc:0b:20:ab:74:92:5b:0c:03:9f:bb:c3:5b:
b8:91:1f:7b:f5:b9:7b:85:16:b1:21:60:d4:93:fd:
b5:7a:dc:d9:c9:af:72:28:8c:db:25:91:9e:b0:5c:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:C8:89:2F:41:48:9F:A5:4F:6A:44:2E:24:3D:F4:07:7E:40:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/804918a1-40fa-3cec-a061-4c887a82ed93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:3d:e7:25:41:da:e8:29:05:de:c3:0a:7b:05:13:aa:c9:1a:
b4:87:ed:aa:f3:40:4d:4f:1e:8c:d1:f1:d8:62:e9:e8:55:32:
cc:cb:fe:b8:f0:75:69:90:5e:7e:c5:4a:77:b2:ed:4d:65:e8:
72:13:14:48:1d:cd:9c:52:af:5f:12:3e:cd:ce:ff:0b:0a:62:
c4:ca:c8:82:08:5d:3f:94:e1:fe:6b:19:16:8c:24:eb:79:4d:
75:c8:ac:46:32:90:60:69:5e:e3:6d:9a:df:6c:a7:ed:e9:0e:
fe:e8:d1:f0:c8:d0:fc:2c:1b:b7:aa:df:a4:3f:db:bd:04:0a:
ef:e1:78:a0:7b:06:c5:8f:ed:2c:b5:3e:b5:27:1d:a5:9b:13:
54:d1:67:da:63:36:a2:ee:78:25:ba:fc:c8:91:30:1d:0d:23:
3e:2c:39:d2:13:a5:4e:84:bc:cf:5d:65:41:4c:bf:d6:5c:fd:
b4:5a:20:e0:12:29:d0:70:23:78:e9:ae:eb:24:5b:95:13:51:
eb:cf:d1:e0:54:a1:3d:63:7d:1c:06:c0:42:11:26:ea:10:0f:
d6:78:66:1c:05:50:1a:16:e4:28:94:bc:3f:64:71:b2:f2:21:
83:e0:20:9d:fb:25:68:5b:f3:f8:3a:28:21:df:ab:20:2d:3d:
c0:88:d0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:34 2025 by rpki-client