Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5c89966-6c81-3e65-9a9d-3dfd582ffca1.roa
File: b5c89966-6c81-3e65-9a9d-3dfd582ffca1.roa (raw, json)
Hash identifier: G0nwnpJgfBAgCbsMMvQPn3iq4tzUv8ZtTTQpcIb2bSI=
Subject key identifier: D7:41:15:D4:01:D5:91:83:51:26:3C:CB:9A:14:ED:9C:6B:A0:97:0B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484D759F7671506B3944DD3700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5c89966-6c81-3e65-9a9d-3dfd582ffca1.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 396606
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:9f:76:71:50:6b:39:44:dd:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=bbc456b8-6928-4077-b616-26dba77a4dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f0:c9:e8:d5:10:7b:20:00:ab:49:68:65:25:
bf:a7:26:eb:20:f5:50:f7:19:83:31:f6:8b:19:94:
4c:26:1d:81:c0:84:ce:17:62:5f:d0:80:54:88:7f:
ae:96:25:b8:5a:ff:c4:c4:e2:8d:69:d7:03:4e:30:
fb:90:22:15:3c:bd:7e:2d:4c:3e:58:88:55:00:69:
67:35:10:e3:30:96:19:e3:a7:90:30:39:0c:2d:b0:
f6:4d:38:8b:46:fe:45:9d:ba:56:ab:8c:cf:b2:18:
f3:5a:45:9c:dc:4b:46:85:1a:44:71:67:b8:e5:83:
55:a0:d6:c9:37:22:95:cf:fb:61:8f:9a:fc:6d:13:
93:d6:45:39:ee:02:4b:c1:b8:73:1c:c2:33:20:90:
dd:81:27:d7:af:93:be:96:66:12:09:f5:61:4b:10:
90:91:1e:02:fb:65:f8:db:75:f9:32:49:7a:1f:6a:
9c:8c:9c:40:0e:c1:26:1b:eb:27:c8:a3:8d:fd:07:
b4:2a:f0:77:73:78:60:4a:54:9a:0b:75:ca:21:be:
04:c7:8f:75:60:ab:96:d2:dc:96:5b:9b:33:58:05:
f3:78:27:a4:1d:00:35:3e:36:ab:43:0b:0e:64:b3:
42:57:ce:8e:b5:44:63:01:b1:18:76:a4:d1:e6:83:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:41:15:D4:01:D5:91:83:51:26:3C:CB:9A:14:ED:9C:6B:A0:97:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5c89966-6c81-3e65-9a9d-3dfd582ffca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:4e:3c:36:7e:fb:6d:66:ca:0f:7a:6c:29:70:89:df:6a:60:
48:09:7a:f6:44:a6:30:2e:83:89:15:57:75:d7:39:85:82:58:
f8:0a:3c:56:ab:a5:c0:d1:63:7c:e0:43:d1:c0:50:1a:35:55:
44:a8:2f:3e:be:29:7e:a4:1d:a6:64:e6:27:c8:15:a7:d8:b9:
86:98:1d:9e:b7:ff:f8:a0:60:7d:be:57:8f:f3:3b:18:84:f4:
4b:a1:90:ad:aa:1e:46:ca:40:ef:d2:7e:1c:ab:86:25:16:6b:
ec:61:24:73:aa:dc:a7:56:e2:d4:04:e5:57:51:81:26:ab:fd:
54:b4:85:09:3d:22:29:77:cd:7f:ee:18:54:23:41:66:e2:4e:
4a:30:b9:82:9c:b3:7d:ef:75:3a:62:1f:59:2a:ac:f6:54:b1:
b2:42:36:94:f0:dc:b6:cd:18:c7:ac:d2:42:ae:1a:95:29:c5:
e9:59:54:53:8b:2a:61:eb:c7:60:d3:7e:5c:bc:70:48:81:32:
65:50:44:25:f7:31:41:d4:27:a6:04:b3:23:4f:22:4a:b2:1d:
5e:e8:f3:56:b4:ef:76:2b:a8:7d:0b:b9:7e:e0:10:b3:e0:6c:
7f:a7:aa:f7:f0:83:c7:b5:82:a2:86:ce:88:7f:a1:49:3b:a2:
71:05:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:24 2025 by rpki-client