Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1c20289-ad1a-3ac3-9832-39cdfa5b92a3.roa
File: b1c20289-ad1a-3ac3-9832-39cdfa5b92a3.roa (raw, json)
Hash identifier: Q0fkjbDJj+UC66myFsJA1Q/FUkEynQdPpClNxJ5FEds=
Subject key identifier: F6:EE:13:F3:0A:23:6D:1F:CF:5F:FF:70:1D:EA:CC:26:7A:3C:1A:4B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424313DBD13DC12F01561200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1c20289-ad1a-3ac3-9832-39cdfa5b92a3.roa
Signing time: Thu 19 Dec 2024 13:45:23 +0000
ROA not before: Thu 19 Dec 2024 13:45:23 +0000
ROA not after: Wed 19 Mar 2025 12:45:23 +0000
asID: 396570
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:13:db:d1:3d:c1:2f:01:56:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:23 2024 GMT
Not After : Mar 19 12:45:23 2025 GMT
Subject: CN=9b4445dc-b857-459d-91c9-add97a9cb60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:a5:01:64:47:fa:45:b1:2d:d4:51:08:cb:
3d:d3:33:ea:50:90:54:96:27:9b:9f:1a:c8:9a:9d:
dd:80:9c:e9:dc:4c:bf:99:25:51:b4:8b:9c:10:9b:
78:7f:9c:3f:c9:8d:ef:d3:91:07:32:e1:23:68:8f:
38:25:75:fd:f1:c4:43:c0:81:66:0f:d7:db:e5:73:
d8:5d:aa:15:58:99:71:16:e7:a8:e3:61:07:b4:ca:
e1:7e:a9:8b:d4:6a:9d:42:60:4a:9e:ed:ef:47:1c:
ba:0d:a0:57:27:96:85:d8:d9:71:5d:ab:24:05:b6:
6d:da:0d:76:1a:71:58:55:79:28:7c:a9:88:c3:8a:
d1:f7:83:a7:38:96:00:27:b2:ed:8b:eb:e8:34:9e:
40:9e:17:34:b7:29:12:b8:ab:5d:6c:92:d8:f3:a0:
c9:9c:40:5d:71:98:78:bf:47:af:21:74:1a:d3:0e:
7a:29:fa:21:45:0f:9e:a4:b4:72:92:94:4f:5b:b1:
8e:7a:26:8b:1d:fc:b3:ad:19:7f:0b:33:9d:dc:b8:
53:04:b4:47:fd:c4:2b:c2:97:c0:0b:2b:28:93:34:
20:ad:41:92:ee:9b:2b:6a:0b:04:95:b5:fc:01:0c:
e3:87:8b:20:75:3a:d9:b5:fe:25:e8:7c:0b:b8:ec:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:13:F3:0A:23:6D:1F:CF:5F:FF:70:1D:EA:CC:26:7A:3C:1A:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1c20289-ad1a-3ac3-9832-39cdfa5b92a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:97:b4:5c:00:cb:47:9c:07:ef:75:f1:a2:3a:4f:1b:e4:bf:
6c:e1:0f:34:3a:aa:c0:b7:fd:0e:06:8e:de:b2:3a:11:1a:7d:
80:61:12:f3:67:69:cb:ac:d8:f0:4c:83:99:64:8e:fe:0c:eb:
0f:1f:7f:51:b2:f3:07:05:35:8a:2c:1a:d4:b2:fc:10:a0:b1:
d2:16:85:41:0c:33:a1:ba:3b:39:51:3b:6c:cb:9a:ca:16:34:
18:6b:be:db:da:4c:9b:b3:c7:2d:db:87:2f:f3:e9:e7:ec:13:
68:dd:9c:fb:d8:c6:03:3a:c8:e4:fa:d9:dd:7e:5d:03:07:25:
e3:20:a2:8d:0b:25:27:eb:ee:6e:74:10:bb:05:cd:12:34:ea:
42:f3:5e:81:fc:4a:41:66:82:f8:7a:c0:67:bc:18:ea:a2:f1:
37:74:20:68:68:65:10:74:de:0c:21:f9:ef:73:23:36:10:8c:
01:83:2b:08:66:72:08:aa:28:8b:19:6d:5c:1b:c4:4c:8d:76:
5a:86:4b:ff:f0:2f:4a:a8:cb:b5:bb:9c:e2:5b:7f:2e:49:e8:
12:a9:24:cb:a2:69:24:71:33:b9:64:76:ea:61:ca:6e:14:a4:
f2:88:78:b2:e8:fe:23:50:d1:85:49:8c:78:3f:52:4b:cb:a8:
14:9c:39:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:57 2025 by rpki-client