Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa
File: ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa (raw, json)
Hash identifier: SqN74PkOc3TnkDoMlomM07NFy8hrtWolQ93itktM9dQ=
Subject key identifier: 4F:8C:09:D9:17:47:3D:F6:7C:46:87:E0:FF:79:E0:E2:40:81:1D:E6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584840E5C313437EA35030B16A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 396578
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:c3:13:43:7e:a3:50:30:b1:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=5f70eb63-6836-4a7f-9f61-946d5cd961be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:55:ed:ef:67:b8:3e:75:da:fc:60:b3:69:86:
54:63:3b:9c:88:31:58:91:a0:d7:68:fe:a9:78:14:
30:ed:6e:3e:9d:26:64:07:d0:94:8d:07:7e:f8:e8:
f3:eb:8d:e2:e1:d5:7f:5f:2f:3c:1e:7d:9d:aa:c7:
07:c2:cb:7e:bc:1f:db:ec:45:da:86:57:7e:91:29:
06:19:1d:89:d9:bb:0b:2a:4e:12:c0:e6:de:75:7e:
a9:d6:6d:8e:39:33:9e:a7:ab:37:63:a4:b9:0c:6c:
3a:4a:ab:bf:c0:c2:c3:b8:5d:1d:e6:89:8b:8f:dd:
4d:b4:09:ca:25:9c:b3:c1:78:7f:5d:7c:28:37:6d:
e7:31:5b:a0:a2:83:95:2b:b5:81:63:ac:b3:81:71:
c2:13:a1:aa:24:63:05:8e:f5:32:3b:3f:55:d0:5f:
6e:b4:36:83:81:25:08:06:77:9a:ff:a5:af:ba:e4:
d7:b8:e3:fc:5e:4c:4a:66:b4:c2:ce:af:0c:66:5b:
e3:62:1a:36:39:35:15:76:ef:82:27:73:86:61:5e:
e4:ac:58:46:e3:0b:86:67:cc:ea:96:f8:b7:26:4f:
db:9c:df:27:c9:e7:d8:e5:f4:63:d5:05:4f:88:9a:
c3:a9:3f:ae:bc:45:2d:74:fc:df:6c:60:76:a0:d6:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:09:D9:17:47:3D:F6:7C:46:87:E0:FF:79:E0:E2:40:81:1D:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:3f:c7:9c:23:b8:f1:09:33:27:60:e6:19:78:82:d0:17:9b:
c1:f9:7c:67:04:50:79:06:de:8b:90:10:fa:4d:87:39:a0:a5:
bc:79:19:e7:f5:bc:fe:63:71:a3:15:26:d1:94:d0:23:79:7f:
43:3d:c1:f4:1c:02:a4:1c:fc:22:7c:6e:fa:e7:0a:2e:c8:07:
28:81:4f:d8:31:d3:4d:d5:00:26:97:14:c8:31:04:e5:60:96:
af:25:cd:15:83:9e:1b:2d:b5:53:77:f5:84:46:1d:e5:5d:e0:
52:28:71:63:81:17:28:a0:d9:f7:95:47:c8:1c:e8:ad:cb:38:
64:ed:b2:4f:80:ac:17:01:c0:9c:53:16:39:a4:1a:7a:04:2b:
f4:25:b7:4f:fa:81:6c:59:1f:b5:e9:49:69:6e:e5:dc:33:68:
e7:99:5c:7b:fa:0c:8b:7b:63:d8:23:39:6d:f7:c2:6f:f2:99:
f6:06:50:2b:d3:a1:c4:ae:c7:35:5b:68:11:85:de:99:8a:fa:
0b:c7:62:ef:7f:6b:78:62:8b:0e:f8:39:02:5b:ff:81:74:82:
ea:2b:70:e6:b2:f0:8c:ac:3a:aa:56:04:c8:b4:8e:42:01:d5:
47:3d:38:dc:67:35:46:85:92:1f:65:f2:46:53:9d:5d:ff:52:
00:f6:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:37 2025 by rpki-client