Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa
File: e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa (raw, json)
Hash identifier: keDAW8fsG9hdZx0C/cqiPwUvt7FSnLrPkjH41/TDNmg=
Subject key identifier: A1:7B:B0:87:F8:FE:45:09:23:E3:4E:9C:D2:D5:35:B7:FC:AC:E7:FC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484242F718FBC136EA279791B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa
Signing time: Thu 19 Dec 2024 13:45:10 +0000
ROA not before: Thu 19 Dec 2024 13:45:10 +0000
ROA not after: Wed 19 Mar 2025 12:45:10 +0000
asID: 21313
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:42:f7:18:fb:c1:36:ea:27:97:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 13:45:10 2024 GMT
Not After : Mar 19 12:45:10 2025 GMT
Subject: CN=a31fad3a-b5a3-4f96-b4e7-68c260331295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:52:36:b2:db:4d:26:86:dc:5f:c6:34:f3:cb:
b2:2d:df:72:19:57:3e:83:89:97:d9:b8:9c:48:09:
7d:6c:3b:b9:a5:11:72:b1:07:d9:6c:f8:0d:6d:ea:
42:93:b1:09:1a:2e:dd:2d:5f:42:03:6f:00:9e:aa:
df:6b:19:07:d2:fc:5b:f5:7a:02:ec:c0:9c:89:7a:
e5:c7:c4:9b:98:67:b8:23:b2:e8:29:93:fe:9a:9d:
af:23:b7:44:23:72:91:08:5a:7b:39:e5:36:47:d8:
a1:6d:83:0f:6b:00:2a:76:88:41:5c:2a:c6:e4:52:
94:e0:95:b4:20:a9:fb:fd:65:4a:88:36:d9:83:3a:
97:85:6d:f1:b4:f8:83:cd:89:72:73:f3:1f:9a:19:
61:23:a0:65:d1:43:3d:63:69:ba:62:00:6f:8f:d5:
df:d9:f6:3b:0e:38:9c:20:7d:78:8e:e4:f4:01:ac:
63:3c:f1:95:14:a0:2b:83:9b:17:02:07:1f:8c:50:
dd:a7:86:9c:72:03:66:5a:09:e5:6c:3d:0b:42:3c:
f3:2f:25:4f:d3:ed:34:38:46:29:eb:f6:81:d3:ee:
35:ce:5f:21:f8:4c:77:b2:be:14:71:dc:f3:16:69:
83:02:24:ff:99:5a:8d:16:8e:ee:81:58:d6:05:62:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7B:B0:87:F8:FE:45:09:23:E3:4E:9C:D2:D5:35:B7:FC:AC:E7:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:8a:96:bb:b7:10:45:0f:86:f5:14:b3:56:f1:70:cd:d8:dd:
10:02:83:7a:f5:77:b0:71:0c:4d:35:8c:4d:f5:84:21:43:f2:
22:bf:4b:93:8c:aa:b0:37:67:f7:64:43:f9:2b:6b:ee:5c:0e:
a2:f5:2f:53:d4:41:79:c8:4a:53:c2:d3:fe:b3:5e:27:c7:3e:
b0:14:2b:d9:bc:89:19:78:aa:87:5e:73:d0:a4:7f:23:80:18:
91:69:71:f6:fe:a9:15:f5:5d:6f:d1:bb:05:ec:32:f1:46:8d:
81:7a:43:9d:b0:0a:ee:dc:3d:10:bd:54:df:b6:48:30:f7:0e:
54:e0:5f:7d:c2:c5:a6:db:87:c1:a2:e1:2d:d0:0e:61:d5:9c:
4b:28:56:cc:b3:5b:69:c1:02:f9:6a:7e:af:e0:2c:31:d6:07:
37:13:88:6c:86:26:07:15:3b:90:5c:66:52:61:b8:04:2f:a0:
94:b7:c0:c8:37:55:48:5e:ce:99:b1:a1:34:40:6d:91:30:9f:
09:b8:4c:5b:13:bc:95:e2:3b:94:23:7a:fb:2d:93:0b:af:10:
5a:6c:cc:0f:1b:a9:00:a4:a1:d5:33:ad:19:09:5f:99:43:07:
9d:38:c2:88:c0:05:31:10:0c:4e:bf:1e:bb:ca:ee:7a:03:dc:
23:b7:53:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:37 2025 by rpki-client