Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd5f7b53-d51e-32b6-9c45-4e5ddfba5b28.roa
File: fd5f7b53-d51e-32b6-9c45-4e5ddfba5b28.roa (raw, json)
Hash identifier: cPRtbpZZg4Tt7OtfCg4ryzhKcn6v1sJUdRyDzsRjvFM=
Subject key identifier: 59:FC:11:14:74:B3:83:82:6A:F4:BE:9C:FD:96:66:FD:37:BE:CC:B9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858484D759FCECE733CD793944180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd5f7b53-d51e-32b6-9c45-4e5ddfba5b28.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 396586
IP address blocks: 192.30.45.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:9f:ce:ce:73:3c:d7:93:94:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=690aeb29-8220-40a7-a0eb-8d299fb16a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:62:19:55:4d:80:ce:71:48:5f:eb:3c:37:
ee:2e:6b:ca:6e:e2:f9:a1:4d:d1:fb:7e:db:a4:a2:
d2:f3:f5:a4:68:63:b2:74:08:be:b6:9f:b9:38:9a:
4c:13:99:bc:ba:93:9f:df:78:bb:7d:82:90:e6:31:
57:d0:5f:ee:f2:e3:28:6d:aa:4b:5e:a9:60:10:67:
69:49:5f:e0:fa:ac:55:64:77:b2:9c:b9:b7:8e:56:
dc:04:36:71:99:b8:ab:8e:97:70:71:2c:dc:3f:59:
4c:38:37:f4:94:44:9e:ba:ae:c9:27:19:3c:c0:a0:
2e:62:a4:e7:4e:e3:67:11:0c:5b:30:03:42:92:a9:
9d:dd:7a:34:9d:5b:8a:19:94:88:d6:73:44:a3:17:
f9:6c:9f:15:a1:5e:b4:d5:15:72:02:4b:11:62:ef:
d0:79:cf:9a:67:c2:59:65:88:09:62:32:4c:54:6f:
e0:85:1b:bf:cf:ea:bf:3f:32:8c:dc:08:dd:ca:2d:
63:dd:ff:80:47:cb:5e:5b:3a:6f:fc:d8:e4:02:79:
d2:66:7a:9e:15:89:d9:15:e5:a5:c0:08:97:85:3c:
08:6d:ee:c5:9f:fb:27:23:4c:0d:33:6b:65:94:64:
65:b1:fa:02:c9:72:02:72:31:65:7b:df:fa:b6:1d:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:11:14:74:B3:83:82:6A:F4:BE:9C:FD:96:66:FD:37:BE:CC:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd5f7b53-d51e-32b6-9c45-4e5ddfba5b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.45.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:52:3b:a7:f0:e8:b6:ba:b5:e9:3c:6a:39:3c:f8:23:a3:90:
16:ff:94:04:96:88:78:14:29:65:b6:47:3f:21:96:b2:fa:11:
26:d1:9a:7a:ee:60:c6:1c:90:e5:f6:d2:dc:68:48:16:5a:e1:
ab:47:7a:5b:d3:19:88:3a:38:ef:08:73:b5:4b:55:9b:fd:2a:
7b:ed:7c:06:33:a6:a7:bc:e6:81:18:d2:23:4d:5c:e5:e7:46:
e5:cc:78:89:23:91:01:34:fd:86:8e:ae:49:cc:c1:50:0b:f0:
23:87:c8:73:ad:ce:92:89:1e:e3:df:b8:53:c6:39:fb:e2:59:
12:ac:8f:48:0e:5f:79:a2:92:fe:16:55:de:24:ad:23:e7:45:
22:23:08:ae:9a:73:f5:1e:37:c6:e9:71:9c:a6:46:2b:8a:ee:
3d:15:16:5e:4d:64:1d:0e:d6:96:90:83:57:98:43:95:cf:ad:
8e:85:e6:3b:af:68:7c:99:24:14:a4:72:3a:92:32:f0:ab:27:
45:bc:4e:4c:4c:58:33:b8:d5:4a:91:99:28:97:f6:4f:08:db:
33:78:38:65:61:d5:3e:77:91:72:f0:4e:38:f8:e3:9c:14:cd:
af:24:1c:0b:5d:b5:de:d5:df:a8:b9:d3:c6:9a:21:38:89:5e:
f4:e8:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:53 2025 by rpki-client