Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa
File: c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa (raw, json)
Hash identifier: 9ftow+ZLqDo8g8xdypMylxd1bjjlPajArWxadgJkwQk=
Subject key identifier: DA:8E:4E:8E:60:CE:4B:EF:D8:3A:60:D5:41:05:9B:1B:0E:06:B9:0D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848424330438FF3F42328470080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa
Signing time: Thu 19 Dec 2024 13:45:37 +0000
ROA not before: Thu 19 Dec 2024 13:45:37 +0000
ROA not after: Wed 19 Mar 2025 12:45:37 +0000
asID: 397200
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:43:30:43:8f:f3:f4:23:28:47:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:37 2024 GMT
Not After : Mar 19 12:45:37 2025 GMT
Subject: CN=e2157943-4413-4d76-ae7d-1255e6a94ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:98:94:3d:7e:64:c8:20:da:b7:8c:1b:a7:
8c:c6:80:b7:21:c6:c5:de:36:a8:60:2d:dc:0c:8b:
6b:70:3c:62:e2:e1:27:ba:20:13:9b:1b:fe:dd:18:
3a:d2:56:2c:85:37:99:7c:3e:67:00:26:fc:6b:ac:
07:ab:fb:0c:e9:17:7e:60:8c:32:17:d7:3b:c5:6c:
9e:95:9a:67:20:f7:33:d3:68:e5:9f:91:7c:89:4a:
37:58:c8:e1:bd:eb:43:bb:53:7a:d2:01:ef:35:ba:
da:a0:32:b4:6a:e8:2d:cf:be:fe:76:14:61:c8:b7:
9c:c3:f2:69:7b:46:1e:2b:7c:56:fa:f2:ec:cb:94:
26:0f:39:74:20:b4:54:17:32:bb:e9:09:11:aa:e2:
51:90:90:f7:93:8c:a7:58:6c:50:ba:65:07:33:68:
e9:ed:2b:c0:f0:e3:15:bd:46:37:1d:43:e8:4f:38:
d3:15:7c:50:05:56:51:e1:28:e5:18:17:2a:0b:a4:
bf:48:51:2a:36:cc:1d:68:7c:ba:86:c6:98:44:c4:
ce:20:0d:6a:de:cd:d4:96:73:b9:24:23:47:12:80:
eb:86:ba:72:7b:d8:db:2e:27:9f:6f:88:90:2b:d4:
10:f0:6f:3c:ad:70:82:41:98:cc:11:44:a8:ad:45:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8E:4E:8E:60:CE:4B:EF:D8:3A:60:D5:41:05:9B:1B:0E:06:B9:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:17:7e:d2:b9:47:66:5f:fa:b4:80:9d:cc:09:22:5c:32:02:
3c:e6:37:79:36:58:6f:0c:ca:46:40:b8:16:41:48:cd:77:6f:
0f:0d:d6:50:34:22:09:09:01:10:bf:53:79:a8:03:e2:34:e6:
a8:eb:aa:26:79:f0:a9:f9:67:3d:82:ff:43:ee:40:b5:bd:83:
d2:7b:ee:1a:42:b4:e1:a4:82:a5:2d:92:09:c0:dd:be:98:20:
15:2a:44:5d:c0:ef:bc:61:f4:bf:58:fa:48:5b:3b:e5:1a:d5:
ac:2a:37:1b:f1:6b:39:85:c1:b2:71:5a:f7:e7:db:30:71:23:
fb:7b:a2:56:c9:e7:a8:9c:1d:c0:65:50:ad:4e:fc:fa:de:e1:
f7:94:dc:0d:ba:f0:26:01:1a:d1:93:2d:37:4e:30:93:65:e4:
17:19:32:a7:3f:5a:8e:54:a4:85:13:3a:c3:62:46:4b:a1:97:
5f:03:69:a9:2a:ba:15:80:e7:ef:a0:2a:cf:30:36:8f:bd:de:
3f:b0:b9:2e:f5:bf:14:9a:b5:c5:d0:d3:a8:e1:5e:ea:f8:c6:
b1:8b:f3:f4:78:21:d5:f1:df:c8:15:8e:d0:f2:2c:d5:b2:e3:
f7:19:f4:1f:3e:28:f5:4f:14:f7:01:53:7d:1f:98:f3:24:99:
e0:ef:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:04:49 2025 by rpki-client