Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa
File: 988a3538-be61-39c9-a1cb-f7b48e5b1200.roa (raw, json)
Hash identifier: 8nzPAIO3EBwQhMnF0m1dkWEz6HJMRwHXOTx5NzD+BJI=
Subject key identifier: AD:44:69:8E:3E:02:3D:C5:84:5F:CB:66:17:60:35:73:99:6C:63:9F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584840E5C3AB9D094D591907E780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 21313
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:c3:ab:9d:09:4d:59:19:07:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=a9838b38-4fd8-47df-a9d7-dd72e6ac3ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:8d:6f:b7:d5:f3:5e:36:04:e7:f1:5b:4d:
db:15:80:18:45:91:53:8a:8d:a6:a8:8e:71:f6:53:
16:e6:d9:65:db:22:72:39:13:fa:77:a5:48:f7:91:
95:2f:49:30:8a:e7:1b:bc:8d:c0:00:05:6f:a8:7f:
6e:64:2a:56:30:89:f0:95:eb:48:51:7e:8e:67:2a:
ce:b7:7c:23:31:46:c6:58:7a:80:f9:c1:91:bf:b5:
6c:1f:fd:63:9a:11:73:2e:74:fa:5d:d8:d5:99:14:
17:97:85:90:6c:4a:88:e1:e9:47:bc:a2:0f:dc:4d:
62:a7:0f:6a:c0:36:0a:4a:2b:83:c0:e9:44:7d:b0:
4b:10:99:06:db:19:15:d9:35:ad:de:ea:3c:0d:a5:
f8:e4:ee:ad:85:ab:38:ea:dd:cc:ed:22:46:bc:42:
fd:92:4c:5f:b5:a6:e6:55:a1:32:45:6e:10:84:7b:
fc:3d:3e:1d:8f:77:9e:59:3d:c6:e9:0a:39:aa:02:
65:f6:5e:05:20:87:d2:a1:12:c6:4c:ce:00:32:8f:
fb:19:3d:27:3b:b3:9e:24:46:4e:54:3c:35:14:08:
10:2f:72:6a:17:4e:e4:1c:96:f4:94:cd:bf:b4:3c:
cb:ff:f5:2e:23:09:ec:ef:d4:7c:d8:75:05:0f:1e:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:44:69:8E:3E:02:3D:C5:84:5F:CB:66:17:60:35:73:99:6C:63:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:08:a1:06:23:5a:19:3e:94:64:28:8a:14:c9:c7:cb:0e:de:
da:9b:1d:2b:f6:88:6b:c6:df:50:d9:de:a3:b7:64:e0:ed:f7:
aa:05:a3:32:23:1b:23:72:fd:ee:9d:ab:d9:dd:76:3d:fe:c8:
68:37:1f:67:81:fa:a4:94:ab:26:bc:89:a2:cb:78:54:96:f5:
b9:3f:83:1e:30:5a:2a:38:41:54:d0:fd:ee:54:c0:5d:fc:ba:
ef:2a:d2:b8:1d:d1:c0:55:37:19:f2:13:4c:0b:60:8b:ec:c7:
4c:f8:94:b6:8b:a0:0c:5d:92:ce:fd:a9:92:5a:66:22:c8:64:
7b:1c:b3:67:f6:d7:b4:20:93:f5:5a:c3:95:a8:b9:a3:24:ab:
dd:73:b3:ac:26:3b:a6:9d:f8:a6:16:f4:14:e4:b6:3f:8c:e7:
c1:b1:28:b7:dc:9e:f6:89:ed:b8:8e:98:4c:d1:05:38:5c:28:
2e:1d:43:37:9e:d1:54:40:19:4b:72:ab:15:b0:92:68:44:6a:
f5:39:2c:3a:6a:5e:89:d9:77:a9:f7:5c:9e:a8:65:fc:fa:88:
aa:8b:37:97:ad:4c:bd:8b:25:83:ea:8a:ef:81:ee:0d:c9:f4:
e7:19:3e:07:8d:1f:c4:03:66:cf:52:f1:17:e3:25:bb:93:f0:
88:56:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:45 2025 by rpki-client