Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8afbc9ee-49ca-3a77-8c54-f47540dc1bdc.roa
File: 8afbc9ee-49ca-3a77-8c54-f47540dc1bdc.roa (raw, json)
Hash identifier: +1k4DSAd6lyRce2N0KYpx+0sFIbEd56axb9QMqmktVQ=
Subject key identifier: 0A:31:BA:E2:B4:3F:32:F0:8D:E0:75:5F:7D:E4:44:99:D0:83:2A:72
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584840E5C174933D1CDCAC5FE580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8afbc9ee-49ca-3a77-8c54-f47540dc1bdc.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 397200
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:c1:74:93:3d:1c:dc:ac:5f:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=536c37b4-36ea-4e57-8411-8c53dae0fff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:0f:84:0f:03:50:f8:9c:4a:05:1a:05:c1:
2e:f6:41:6c:be:92:df:6b:ff:03:78:64:ea:6a:bc:
97:bb:58:e5:9a:14:bc:c9:de:1d:8c:6d:59:bf:64:
bf:e2:46:35:3b:ef:c1:21:93:a5:65:0c:67:b9:eb:
15:cd:c7:2a:83:22:f8:22:55:69:0d:8b:e5:2f:c4:
95:eb:55:3f:bd:44:28:ee:15:5f:83:1c:cf:03:e9:
1f:41:48:d7:69:fa:da:8f:80:23:de:31:64:08:ab:
1e:4b:c1:a5:05:b9:c2:a7:b9:f4:3a:9a:24:00:7f:
e8:1b:3f:42:da:13:f3:91:09:c0:7c:e4:1c:5c:28:
27:0c:f7:77:94:3f:10:da:b6:06:6f:30:ce:ff:21:
09:db:fa:11:d6:62:5b:e9:4d:09:63:a1:cc:ff:2d:
03:66:28:08:5b:96:02:a4:fc:32:5e:1c:87:59:ba:
c7:6f:a6:2c:f1:47:4d:c9:ce:9d:c9:04:6b:a5:7a:
49:51:a0:75:11:13:bb:d5:7d:96:6d:c5:3b:34:dd:
d7:8f:3d:f4:cf:f6:4e:62:47:7c:e0:0b:cd:a2:09:
43:58:f5:4a:d1:a2:4f:4f:83:d0:d6:43:08:79:03:
50:64:64:2a:e3:00:82:57:41:c0:6b:d2:f9:77:e0:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:31:BA:E2:B4:3F:32:F0:8D:E0:75:5F:7D:E4:44:99:D0:83:2A:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8afbc9ee-49ca-3a77-8c54-f47540dc1bdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:26:14:87:4c:11:89:b2:c9:b6:c1:bf:95:43:be:8e:bd:6e:
bc:04:6f:0b:e1:a1:ff:a3:92:db:1b:04:a1:62:4d:b3:18:af:
0d:b5:40:00:60:71:1a:9f:b5:dd:55:68:11:c4:16:d0:5d:7f:
bc:20:68:eb:67:23:82:95:88:17:2c:a1:44:53:6c:50:cd:2d:
08:15:b9:ed:e4:96:93:94:b1:fc:ac:91:9a:d5:5f:60:98:8f:
46:c2:5b:39:6f:01:ae:f5:d1:dd:f8:63:5c:d6:53:97:8f:8c:
b2:37:d4:08:a4:fd:71:1d:0e:38:5e:62:fc:a1:f6:cf:25:ae:
e1:16:03:3c:ec:75:54:2a:46:d4:a5:12:95:32:b7:6a:3e:a0:
9f:5c:71:1d:4f:96:2b:4d:9b:72:92:e8:00:e5:25:93:2c:db:
b9:ca:eb:a8:bf:f0:ed:92:04:02:90:26:2c:2c:8a:7d:d7:3c:
bb:13:20:32:2f:fe:b5:26:a5:0f:f8:6a:ab:18:e1:24:a0:bf:
a6:c4:6b:20:47:9a:c5:b2:48:53:4e:3d:02:76:0c:05:8a:e9:
1d:e2:3d:6c:fa:77:7e:ac:36:6d:fe:98:86:2b:26:55:81:f3:
0b:33:7a:e9:d6:ed:45:1b:41:a0:cf:33:1c:bf:56:04:e3:de:
74:56:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:35:19 2025 by rpki-client