Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e2e4f82-4808-39d5-9981-b09b273f6ab6.roa
File: 9e2e4f82-4808-39d5-9981-b09b273f6ab6.roa (raw, json)
Hash identifier: CnN8APlLQvxuiM2+SPWw98iSLJeLGSI1vTsYEOpPKxs=
Subject key identifier: 4A:27:27:A6:6F:7A:66:3F:A4:CC:9E:CE:8C:D3:30:71:98:F0:4B:C1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584840E5C6466090E6FB0C4D28C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e2e4f82-4808-39d5-9981-b09b273f6ab6.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 36628
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:c6:46:60:90:e6:fb:0c:4d:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=e476ff1d-3361-4be9-987e-61921eb5bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:72:82:70:4b:6a:d1:57:b7:32:27:19:06:
88:37:4c:0c:42:ee:92:84:8d:28:ea:ef:69:ff:38:
24:03:40:12:29:4a:e8:dc:16:41:ff:b7:22:48:ac:
fc:a3:51:bb:95:23:e4:d8:fe:02:ea:14:25:2e:ff:
19:e8:81:b4:6a:98:27:c4:4d:51:2e:98:99:91:20:
b2:9d:c5:18:87:67:eb:f8:91:c4:50:56:fb:18:a4:
dc:9f:ba:28:8b:1d:de:c8:98:38:f4:07:8f:df:3f:
ee:c7:76:e2:8d:75:23:7d:d4:70:98:e1:d9:1e:7e:
9f:b7:7d:da:06:19:d8:62:0b:cc:bb:89:5d:1e:92:
44:c4:e1:56:c6:57:99:77:8b:20:ea:df:ed:71:6b:
31:4b:c6:97:bb:4c:4c:aa:2e:52:33:11:67:be:9c:
98:0a:ca:b3:ba:a6:74:a7:6e:d0:4e:8c:71:b1:b6:
bb:de:dc:58:31:d6:2f:f0:b8:3a:18:71:a6:8d:aa:
c3:be:04:94:6d:73:fa:32:50:d0:fd:76:1d:4e:94:
a8:ca:ac:42:66:86:2f:6a:89:96:fc:96:50:f5:cb:
69:5f:4a:62:35:39:d4:e3:4e:b2:5b:ca:1a:4d:4c:
a1:ad:7c:ff:dc:06:e0:54:91:a2:a1:85:2a:96:16:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:27:27:A6:6F:7A:66:3F:A4:CC:9E:CE:8C:D3:30:71:98:F0:4B:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e2e4f82-4808-39d5-9981-b09b273f6ab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:19:c6:de:c6:b3:f0:27:84:40:54:12:24:33:66:2d:19:3e:
ea:84:a0:51:ad:79:10:3c:2b:5b:32:23:74:65:0a:3d:fc:60:
c5:7f:f0:99:88:47:c0:43:9b:6c:00:c6:0c:d2:ce:e0:c4:f4:
ad:ea:23:12:15:32:5d:91:d4:6c:77:f0:0f:a8:1e:8d:b7:8e:
a5:9a:43:42:0a:ac:6f:b2:b4:f1:bc:a4:36:51:33:e8:74:18:
2f:30:83:5a:de:c7:6b:f1:0c:e5:26:70:0e:67:d1:53:e2:d1:
e0:48:83:50:c7:54:04:4d:3e:58:6f:b2:6b:21:c0:f5:40:85:
fe:2d:55:a4:58:7b:c9:44:5f:3b:17:83:fa:15:53:ed:5b:ad:
c9:34:e8:fb:89:43:ea:00:8f:4e:95:f2:36:c3:58:71:ab:a3:
8b:ad:d9:0b:74:dd:75:bf:c1:53:a5:6c:42:aa:46:b4:b0:dc:
59:4d:23:a5:66:5c:ae:7d:a0:cf:b8:83:10:c1:b7:2f:d7:da:
8e:38:57:df:41:3e:b0:59:d2:17:df:8a:91:3d:b4:f5:24:7c:
0f:03:38:e0:f5:7b:ec:5d:77:75:8a:48:88:df:8e:6b:68:9d:
da:32:9d:23:a2:91:a7:51:a3:b3:b2:66:67:95:39:ee:83:bc:
83:ef:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:17:42 2025 by rpki-client