Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa
File: f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa (raw, json)
Hash identifier: vgBxqXyRN3vwQeg4tBU8mvk1bQE8DZ4u221inhkoTd8=
Subject key identifier: 3B:69:6B:A1:6C:47:D9:78:B8:28:4C:77:C1:38:BF:12:CC:2E:97:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584840E5C4BDE01563B847E9EC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 36621
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:c4:bd:e0:15:63:b8:47:e9:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=e6381e7e-7c6a-4f43-8b35-3687c6542a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:5b:9b:dd:a2:01:01:2e:38:98:6b:6d:29:
19:39:92:98:aa:64:e5:f5:ec:a0:b9:76:f7:52:6b:
da:e7:ea:8c:5b:8f:a4:cd:2f:e4:c5:aa:18:ae:2e:
90:44:b7:40:ab:45:e0:ef:67:ed:20:6a:25:3c:60:
3b:7a:f1:3f:e6:4c:82:7a:fe:7b:da:61:ad:8e:d4:
bc:b9:e0:de:da:2c:9d:71:22:0c:36:00:39:38:65:
1d:3c:de:6f:a5:f4:a5:9e:26:5c:4e:5a:98:65:fc:
f4:0c:a2:e6:7f:e6:34:88:0d:db:ce:9c:4c:c4:7c:
cd:7d:8a:53:fe:30:51:71:b7:b4:40:42:d3:76:00:
55:18:86:bc:5b:72:d3:d5:5a:32:48:3b:2e:e2:79:
4c:7b:e0:68:dd:85:b8:0c:9c:21:b2:d2:66:ec:3e:
20:d3:88:33:91:f5:95:62:26:95:bd:aa:ce:db:de:
0c:db:5c:38:50:57:e1:d4:ee:15:7c:d2:d7:9d:71:
88:8f:1c:2f:58:9c:cc:19:61:0e:e8:96:8b:c3:ca:
60:1e:ab:89:20:d1:2e:36:bd:98:37:68:78:f2:f7:
2b:61:7a:2d:59:e9:12:db:bd:44:1e:88:a7:2e:54:
da:8c:75:9f:60:42:07:04:aa:d2:3b:c4:5a:09:84:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:6B:A1:6C:47:D9:78:B8:28:4C:77:C1:38:BF:12:CC:2E:97:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:3a:de:9a:0d:a8:0a:6e:0c:68:46:bb:e5:fc:c6:fe:22:39:
61:d7:c6:2f:3e:65:2a:bc:80:5f:48:dd:f7:e9:d1:d5:3c:c0:
fb:41:32:cb:3d:b5:b0:1d:33:9e:42:e5:82:52:e5:15:64:02:
e1:36:09:cf:6b:5f:dd:42:be:8d:a7:d5:fb:bc:58:27:41:fb:
45:03:5b:21:a5:6f:a2:91:b0:a7:15:5d:ee:b3:c2:2c:21:3d:
d8:78:b9:a4:ba:3d:3d:82:c1:52:90:83:ac:1c:62:88:c1:8a:
24:be:5d:96:29:4c:7a:1c:4e:63:94:8a:2b:37:85:a4:35:78:
08:71:75:b6:79:5b:c6:e0:b6:1b:be:c6:07:19:cb:47:e8:ae:
65:d4:f6:02:b1:ce:91:95:42:d3:4b:66:48:ff:17:c1:67:b4:
45:ba:02:f1:24:b8:fb:e7:6a:22:7e:8e:f3:70:08:58:af:1f:
3a:bb:20:c4:a2:f2:3b:db:28:f5:d1:a4:16:ea:96:0e:e3:67:
8a:f0:10:40:71:77:e7:de:08:73:99:c0:ed:0a:f3:a2:a1:e1:
fc:55:45:ab:81:07:58:31:58:88:ef:a6:8b:dc:39:cb:af:9c:
7b:80:ba:fe:c5:a4:42:d5:2d:71:98:60:bc:21:e1:b8:2c:9f:
60:82:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:20:35 2025 by rpki-client