Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87775820-2443-3292-bad7-19f5f7b03077.roa
File: 87775820-2443-3292-bad7-19f5f7b03077.roa (raw, json)
Hash identifier: nttyDKtBcklZ6oTI8UFxt+6MQoU684L9CSenCafs3sc=
Subject key identifier: 62:D2:62:C9:40:3D:FE:17:B7:BB:6D:47:B9:52:F1:02:7D:F1:43:02
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F9020047A91B5E99AC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87775820-2443-3292-bad7-19f5f7b03077.roa
Signing time: Thu 19 Dec 2024 13:45:11 +0000
ROA not before: Thu 19 Dec 2024 13:45:11 +0000
ROA not after: Wed 19 Mar 2025 12:45:11 +0000
asID: 36628
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f9:02:00:47:a9:1b:5e:99:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:11 2024 GMT
Not After : Mar 19 12:45:11 2025 GMT
Subject: CN=37ded131-af6f-482e-8cfb-f204e2900174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:6b:d2:c6:4a:81:04:0a:00:17:fa:e5:7a:
40:e0:f1:d8:1d:88:4f:03:5e:f6:a3:f0:5b:4a:b9:
10:47:1d:a9:51:57:94:42:78:dd:53:7f:44:27:b2:
6d:64:b3:df:bf:86:0b:b8:bc:a4:e6:0e:19:ac:62:
21:ac:5c:c8:00:b1:f5:50:6b:30:70:ad:e3:9f:f9:
6e:7f:16:99:ef:8e:73:5d:15:63:81:ea:e6:26:9d:
d0:63:be:72:de:08:ad:ea:25:ff:8e:88:db:ce:11:
3c:39:a4:39:7c:af:b4:a5:c0:a9:e7:3c:0d:b5:f3:
19:f8:fb:3a:70:66:21:3b:b9:6b:00:52:65:31:5e:
e1:7d:66:79:90:97:fa:99:27:22:ea:5c:fc:c9:76:
99:12:18:a8:48:3a:28:a7:92:2c:c6:e6:9b:cb:68:
0a:47:b1:8b:34:02:43:f5:24:65:bd:df:54:2d:6b:
37:ab:9b:67:c6:7d:1d:0c:5d:20:7f:ca:ee:35:02:
8d:a4:2d:0c:38:66:41:64:e8:f0:58:3b:a4:22:4d:
c9:2d:cf:2d:f7:3d:44:ec:77:28:1d:7c:0d:7c:a0:
8d:81:63:f4:c0:5c:c6:c0:61:e8:13:cf:40:87:6f:
3c:33:c0:51:37:2b:c1:58:29:8a:9e:33:05:49:18:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D2:62:C9:40:3D:FE:17:B7:BB:6D:47:B9:52:F1:02:7D:F1:43:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87775820-2443-3292-bad7-19f5f7b03077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:1c:a8:14:ad:bf:b4:93:1b:55:ff:6c:50:84:ca:4d:eb:6a:
21:b9:85:6e:06:a0:79:de:96:45:b0:e9:b5:52:e6:19:3a:fe:
ac:d5:4a:8f:d3:2f:57:ef:19:0a:c3:86:12:3a:e7:1e:7e:2f:
41:cf:59:42:e0:7a:ec:d6:31:19:a0:19:4d:4b:13:e1:3e:5b:
e3:10:aa:75:20:8f:5f:47:e7:90:6a:1e:cc:34:02:3e:6d:50:
7f:36:ca:b4:42:d6:3b:1d:ac:52:d8:d6:b3:72:ac:df:de:a0:
33:f7:38:8e:8e:c6:dd:7d:5a:65:ae:6c:4b:0b:5a:e0:28:d3:
5e:9b:ce:f9:88:4a:e5:d0:f7:0a:56:8f:89:6b:67:a1:8c:4c:
d6:4d:aa:b9:e6:a5:22:f2:fc:5c:34:a1:31:74:e9:af:fd:10:
b9:6c:aa:41:3b:63:ce:89:a6:9a:9e:44:b2:dc:01:29:06:cb:
34:2a:f6:30:ac:6c:23:23:85:17:49:a8:92:71:25:64:2d:b4:
55:ce:06:7c:10:fa:ec:71:04:23:50:6b:e6:10:d3:f8:c7:08:
55:70:bf:e0:c6:2e:51:18:0e:bd:d4:f3:e5:d5:36:f7:c4:0d:
fc:f2:0f:9c:16:63:7d:1c:68:0e:e9:62:34:83:38:19:4f:ce:
14:a2:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:39:59 2025 by rpki-client