Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d222e505-50c8-372f-8677-8bd1a952d8e9.roa
File: d222e505-50c8-372f-8677-8bd1a952d8e9.roa (raw, json)
Hash identifier: yycadnFyJFF/7Qn585Y1z3lEtnzq0IxtNkB5vEn/vw8=
Subject key identifier: 20:C0:76:1F:90:A6:3E:6B:B3:B0:8D:F5:F1:48:9B:3F:69:D9:00:70
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484D75A1B3F6D4337BF2F5CCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d222e505-50c8-372f-8677-8bd1a952d8e9.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 396557
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:a1:b3:f6:d4:33:7b:f2:f5:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=191f3258-3f50-469e-b4e5-0af1da970598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:d7:44:2d:79:4f:be:7a:af:51:d2:f8:14:
f6:1e:26:cc:07:85:e7:38:01:3d:21:1e:b9:81:45:
be:cd:4f:bc:28:02:4a:dd:89:df:42:8d:0d:87:55:
88:cd:e7:a6:08:a7:d3:a0:42:39:3c:d0:cd:b6:26:
4a:5e:ab:0e:96:5e:30:8b:7d:07:c6:c8:74:10:2a:
d0:12:a4:2d:90:15:6b:92:84:eb:32:6b:fe:c5:b2:
ff:c4:8c:37:dc:5d:d0:b6:2a:1e:e7:d8:d1:a7:0a:
1c:75:fa:dc:7a:6b:92:dc:75:8b:28:2b:eb:24:e0:
97:fb:05:b3:d8:de:e6:23:cc:3c:4a:ba:7b:62:6c:
e8:16:a5:e9:0f:83:0c:3a:f8:89:ee:7f:22:d3:e4:
f5:20:80:9d:e2:d4:4c:61:d4:cf:7a:05:a0:7e:fc:
0d:76:9d:7c:69:17:8d:07:1d:9c:d8:8d:45:71:73:
7e:0a:e1:ed:81:f9:05:fc:59:c7:6b:cc:d2:34:5c:
93:3f:6f:67:1d:22:e0:ca:32:15:aa:15:e8:d3:be:
26:5b:f1:54:6c:1a:3e:d0:44:5b:57:a8:aa:17:2d:
33:fa:a1:7f:c8:d7:48:27:e0:54:90:c2:84:08:40:
5d:09:91:b2:2b:ab:72:04:ed:e4:7a:5f:2b:7d:3d:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C0:76:1F:90:A6:3E:6B:B3:B0:8D:F5:F1:48:9B:3F:69:D9:00:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d222e505-50c8-372f-8677-8bd1a952d8e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:53:3d:ec:1a:04:e4:88:99:88:aa:16:09:16:69:c2:31:78:
c7:be:eb:aa:2b:1a:f9:f3:c8:64:33:e8:82:a7:89:84:e9:24:
2a:ac:e7:d4:db:e1:86:ef:2e:ab:0e:85:d2:30:ab:09:bf:00:
19:26:87:8e:e3:ab:6c:2a:1e:62:f6:72:39:90:d7:28:8d:18:
1b:4a:59:53:97:aa:56:17:92:65:ed:aa:3b:51:a4:b0:07:ee:
e9:ac:6e:8f:b4:4d:e7:66:f3:e7:f8:88:ea:59:47:6f:62:aa:
07:f0:19:8d:60:23:ce:80:95:a9:c2:cb:ef:59:9d:f3:50:21:
81:1c:ae:c9:80:4d:da:73:10:dc:98:dc:91:82:fa:b9:62:82:
b9:a7:18:82:a0:eb:10:bc:e6:8b:db:82:5d:0e:d9:1d:28:4c:
67:80:79:fe:cc:5a:48:fd:51:4d:65:10:ea:97:81:b1:31:f0:
db:c4:5a:b7:52:59:7e:b5:53:52:bf:b8:41:3e:ce:0b:12:9c:
a3:1a:21:83:85:05:a3:e8:0f:6f:44:8f:bd:e2:75:ba:59:e1:
72:64:86:64:93:54:8a:54:56:5b:ba:5e:00:32:9a:1a:e8:6a:
24:d1:99:a2:3c:79:31:b9:5f:cc:20:4a:a5:1c:33:6c:c1:df:
60:23:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:34 2025 by rpki-client