Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f180f3f3-eca2-31fa-be4d-f72f53e407db.roa
File: f180f3f3-eca2-31fa-be4d-f72f53e407db.roa (raw, json)
Hash identifier: a2bAAxMTrPl5IypFG17qwtzYkGyCLyUwy5bFygl3OfI=
Subject key identifier: B3:E0:1C:EA:D9:04:8B:FE:9C:F0:A1:D6:14:F8:48:9E:BA:20:87:C2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584840E5C6747A14ABE3A836F080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f180f3f3-eca2-31fa-be4d-f72f53e407db.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 20431
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:c6:74:7a:14:ab:e3:a8:36:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=e8b2e695-e601-4efb-a905-db73a425bd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:bb:35:ea:8d:52:ce:06:36:57:0c:44:29:
f4:67:be:64:6b:95:06:ce:a4:16:99:61:90:8b:5d:
0e:03:a6:32:16:88:9b:93:b1:f0:f1:56:2e:27:de:
22:49:75:54:2e:ca:f0:97:94:d8:cf:b0:63:20:2b:
ef:91:f3:23:a2:4d:76:fc:60:a6:d1:fc:45:b5:4d:
e6:54:9d:f8:5c:d8:7f:b7:b0:cf:f1:5d:55:f8:d6:
da:f2:ac:69:ec:bd:28:ad:50:23:85:19:f9:de:2a:
94:e1:c5:b8:da:cb:6d:ee:90:20:8d:c8:15:85:73:
1e:3f:ac:64:97:9b:e4:db:32:9f:c6:8f:c8:da:2e:
dd:6c:a3:07:ba:1f:c7:f5:6b:6d:1a:7f:78:3d:89:
83:4e:1a:7a:19:f6:6a:a1:2f:ce:7f:64:ff:e2:af:
e7:20:a7:64:ff:fa:6d:61:82:84:f2:e9:80:a7:2c:
a2:ce:56:d5:e4:6f:85:02:34:ef:23:7f:e7:1e:c9:
51:60:ab:63:91:dc:59:66:83:2c:37:77:b9:c1:97:
c9:32:47:81:6c:7a:bf:06:f9:38:0b:29:39:4f:5a:
bb:c6:cf:cc:72:15:6b:aa:1e:8f:82:45:7e:d7:60:
69:f3:bd:fe:f5:5d:99:bb:83:97:dd:6c:1c:03:af:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:1C:EA:D9:04:8B:FE:9C:F0:A1:D6:14:F8:48:9E:BA:20:87:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f180f3f3-eca2-31fa-be4d-f72f53e407db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:35:f4:a3:0e:c6:f1:9c:6b:a1:e1:34:ae:40:fa:30:a8:76:
76:94:ee:ec:de:f6:ea:6f:69:55:64:41:0b:65:fb:f2:f9:e5:
11:0a:4b:3b:a8:bc:f7:4b:a3:0d:27:51:02:15:86:4d:77:70:
ec:87:75:1c:4a:5e:55:d5:97:43:a0:f2:e8:16:2f:8a:d2:50:
42:f5:6e:91:32:c7:83:78:46:8a:0d:28:24:a8:ee:e4:c3:46:
41:8d:d5:c1:d8:59:8e:eb:7e:92:ad:83:e9:3b:22:12:76:cf:
1b:db:15:bd:73:98:3b:a9:5e:b5:f3:3b:b5:50:20:0c:ee:c4:
9c:ff:df:8e:5d:21:89:7b:63:eb:ce:e8:89:eb:1e:e7:e8:b9:
51:ed:3b:71:f4:ac:cd:28:bc:76:18:65:be:9e:ee:4c:c7:fe:
a2:5b:17:b7:b2:33:af:86:d6:bb:3a:e4:53:64:8d:54:d5:db:
52:f5:0d:9f:07:7c:e3:a6:65:c9:06:23:1a:dc:5e:c5:45:71:
81:b5:6c:cf:3c:5e:4a:a6:66:ea:b4:85:24:94:72:54:36:22:
01:17:05:94:40:77:da:c1:f0:85:f4:6a:3a:bb:9f:fd:fd:a8:
61:80:8e:44:eb:08:08:53:5e:b8:33:64:d1:cf:d5:f3:88:06:
2f:70:bf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:11 2025 by rpki-client