Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a73ebee5-b304-35b2-b8ba-607e02a583f9.roa
File: a73ebee5-b304-35b2-b8ba-607e02a583f9.roa (raw, json)
Hash identifier: oGwSWKdwjVqBfVefFnU8czdGENFJ6XbfK6RF1nk402o=
Subject key identifier: 28:2A:34:95:2D:21:79:AD:49:53:0F:B0:5F:01:2A:CF:B3:AB:E6:87
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584840E5C4E9D52B0B1D6FADDF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a73ebee5-b304-35b2-b8ba-607e02a583f9.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 396562
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:c4:e9:d5:2b:0b:1d:6f:ad:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=84b98705-8115-49f8-8a15-002fdcde7ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:8c:0b:db:64:e7:83:d8:30:10:58:d2:a7:
e8:a4:95:32:b1:b6:74:5a:5a:39:fc:99:5a:47:e3:
e2:03:6c:20:de:06:48:10:5a:ee:0f:38:81:57:9b:
c1:4b:54:91:11:dc:2e:13:1a:e5:f6:dc:c2:61:cb:
8c:ee:55:38:50:51:97:9a:14:3e:b1:43:64:5e:a2:
72:46:a0:f6:a5:65:9e:07:a8:e8:bf:ac:b8:4a:fd:
c4:96:16:0e:ff:18:bb:b8:11:ae:a6:21:1c:c3:9a:
e4:c9:c0:2c:a9:fe:53:c7:25:70:da:09:54:e7:00:
17:d2:86:f2:86:d7:0e:ce:90:0b:26:74:d0:83:68:
cd:1d:ce:1a:ed:81:a0:de:52:2b:7f:b1:8b:36:bd:
be:22:68:b0:94:68:a7:a7:e5:32:bc:5a:8f:c5:1e:
4e:06:f0:c3:6e:72:15:c4:44:1f:65:41:96:db:2e:
02:70:3a:33:72:50:33:64:20:73:7c:a9:18:c5:75:
74:94:e3:a9:5b:8e:54:f8:92:7a:49:4c:89:ff:a4:
94:56:80:96:27:92:32:2b:51:20:8e:8d:2b:7c:0e:
72:ec:dc:86:a9:73:3b:20:e0:97:59:48:ca:25:76:
62:f7:5f:f1:88:9e:7b:1c:27:22:13:23:14:de:43:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:34:95:2D:21:79:AD:49:53:0F:B0:5F:01:2A:CF:B3:AB:E6:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a73ebee5-b304-35b2-b8ba-607e02a583f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:71:c2:69:c9:ff:a6:87:3a:a2:17:a7:5c:cf:63:b6:76:76:
14:4f:a8:a3:cb:b0:23:4a:f3:c9:12:11:76:b2:7d:e5:f1:a0:
70:b9:47:f8:5a:81:1b:4d:2f:e7:bb:93:0a:33:2e:08:6d:60:
ed:78:7e:f7:32:a3:25:f7:c0:3c:2f:4d:63:7e:42:e3:31:0d:
b3:19:db:0c:6f:b5:4b:24:9c:f7:8b:b2:25:86:9b:8e:34:04:
8e:14:84:40:3a:53:03:96:5a:a0:43:b6:2b:57:b7:23:37:49:
3f:e5:7e:5f:0e:8e:1b:11:88:00:d5:3c:9c:bc:d6:8c:6c:3e:
be:8e:9e:09:9e:3b:88:49:3a:37:65:5a:09:66:5f:1f:3e:66:
63:39:70:fd:ff:42:7f:4d:a5:7e:9e:d2:79:fe:ec:ee:59:d8:
c9:76:30:03:5a:2c:d3:5c:84:0b:4b:15:1e:7b:a6:df:81:a0:
bd:eb:20:2b:64:b7:ae:29:0d:02:44:89:38:d2:12:bf:6a:bf:
18:f6:34:ea:3d:15:7b:72:68:3a:56:f1:96:0f:ed:a5:5e:dd:
9e:12:a4:3d:06:4a:d1:42:30:b9:d0:97:74:9d:d0:d2:26:d0:
bb:a7:4e:13:40:7a:36:67:4c:dd:fa:71:8c:c4:28:c2:b3:f3:
64:62:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:35:09 2025 by rpki-client