Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0ebc216-48be-39e5-b678-cde5700d2f3d.roa
File: f0ebc216-48be-39e5-b678-cde5700d2f3d.roa (raw, json)
Hash identifier: uuYXyg6fhMf0ZJzgXoaYSX8iwrx2tkcOJKebcjI/OMA=
Subject key identifier: BE:7C:5D:F0:29:2B:DE:33:7B:AF:E1:0A:66:DD:B1:AC:87:4A:C3:04
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584840E5C05D5FA02280BE0F9CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0ebc216-48be-39e5-b678-cde5700d2f3d.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 396567
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:c0:5d:5f:a0:22:80:be:0f:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=73f3daa2-313e-4bf0-87f0-eeea7e8c7176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:cf:06:29:f5:6f:de:f7:bd:97:cc:f9:6e:
46:39:a1:58:e0:7e:ad:e4:df:4d:29:cf:59:53:9b:
68:c4:43:68:5d:df:e6:42:fd:1c:85:41:95:ec:a6:
ae:35:d1:b2:3d:86:69:1c:5b:18:9b:1b:3b:90:9c:
3f:44:0b:0e:6a:62:c5:53:24:d8:31:23:a5:70:a0:
f2:de:a7:85:39:ea:23:01:ba:1e:e3:de:04:1c:74:
cd:6b:dd:88:c9:ae:5d:60:63:19:00:92:12:f1:75:
e0:ac:49:1c:08:2c:35:67:13:7e:48:08:59:a0:10:
8b:c2:ba:db:04:9c:e2:f9:f6:48:0d:66:4e:21:e6:
9d:ed:36:98:41:a3:29:0c:49:db:5a:a0:a0:65:0f:
c6:cd:6d:7d:c2:80:2b:83:1b:ad:a8:92:2b:48:97:
0e:22:a5:87:43:de:97:37:aa:f8:7e:d6:6d:a6:31:
b2:68:31:be:b0:ee:a8:35:fb:00:55:cb:5c:d6:63:
5a:10:b3:8f:b5:c4:77:26:26:a0:74:cb:76:c8:a8:
66:40:85:95:c8:c9:5a:c8:1e:a6:de:45:bb:87:60:
ac:6b:b5:ff:0b:0f:e8:13:29:7b:35:47:80:75:69:
e1:f2:14:47:2e:c6:1c:53:ec:87:24:d2:85:bc:b7:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7C:5D:F0:29:2B:DE:33:7B:AF:E1:0A:66:DD:B1:AC:87:4A:C3:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0ebc216-48be-39e5-b678-cde5700d2f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:d5:f1:fa:ec:5d:28:f8:db:9c:fc:0e:55:06:6c:fd:03:17:
66:57:33:04:c7:06:74:ed:71:41:06:73:ac:6a:c3:15:fe:75:
05:34:2c:f1:c1:64:8b:5b:2a:87:6d:02:c5:56:52:8e:ee:63:
f0:8e:42:e0:d8:ae:a9:5d:44:e5:b4:ce:27:52:11:8f:40:99:
01:a5:a6:68:72:b2:eb:b6:b5:7f:f2:31:37:90:e8:e9:d3:ad:
5c:c8:9f:2f:98:94:6c:70:a5:7f:c9:75:bb:f5:0a:40:2d:69:
80:f2:90:45:b3:2d:37:bf:90:e8:d7:d5:94:3e:c7:e8:ed:df:
7e:f7:5f:ff:24:6f:06:53:eb:3d:58:b7:5d:cb:b0:b8:63:80:
76:c7:55:ee:74:94:50:cd:09:53:34:0b:81:a5:f1:31:66:38:
2f:03:02:95:15:d4:a0:96:a4:64:83:11:7f:f1:d2:db:32:13:
72:b9:35:43:35:6b:0d:d0:3d:8f:4b:e5:bc:c9:be:ec:e5:a2:
40:f3:fd:ed:aa:50:cd:46:d0:09:49:ff:05:c5:d4:87:af:6c:
49:5f:c3:ce:5d:3a:17:d2:f8:4a:4e:9c:70:57:33:6d:9b:69:
a6:23:36:fe:28:c1:5e:7c:26:7f:e4:4c:b1:3a:5c:45:ee:e2:
da:48:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:35:17 2025 by rpki-client