Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04262a55-bfd7-32dd-9781-3ab51f8bd1b6.roa
File: 04262a55-bfd7-32dd-9781-3ab51f8bd1b6.roa (raw, json)
Hash identifier: F9TJt7YrvaUpSvonA1EGJB7L5RNmhcfpK5UtIevu0/Y=
Subject key identifier: 8D:48:2C:4B:A9:AC:90:48:40:D6:42:EC:69:12:97:1B:EC:B6:CB:F5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848CB08A2BBC92369AE887441E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04262a55-bfd7-32dd-9781-3ab51f8bd1b6.roa
Signing time: Thu 06 Feb 2025 13:33:23 +0000
ROA not before: Thu 06 Feb 2025 13:33:23 +0000
ROA not after: Wed 07 May 2025 12:33:23 +0000
asID: 20431
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:08:a2:bb:c9:23:69:ae:88:74:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 6 13:33:23 2025 GMT
Not After : May 7 12:33:23 2025 GMT
Subject: CN=5d1d05b9-6dfa-4787-a6c3-b85fcb6053fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:a1:28:34:04:16:ce:88:58:2e:3b:3e:43:
12:69:5f:87:4c:43:f9:dc:c7:a1:6e:d5:66:e9:c6:
eb:57:a4:c1:2b:4e:10:9c:b7:d8:a6:b9:ad:2e:e7:
1d:b3:8c:f9:18:22:93:37:14:7a:55:3d:b6:e2:8a:
aa:c2:fb:01:bb:6b:5c:b8:95:90:2a:2e:1b:11:c7:
31:43:b8:69:67:91:7f:8d:f0:da:7c:7d:e5:da:72:
6d:21:54:a8:04:6c:2e:32:d7:61:06:b9:ad:17:9c:
da:51:14:dd:e8:40:28:2a:90:0a:c3:15:28:53:71:
4d:cc:16:35:bf:d7:01:6c:fd:da:3a:40:2c:16:74:
23:56:32:c3:11:05:62:9f:a1:a7:ec:10:63:dc:08:
4f:8b:78:02:c9:b2:58:82:92:fb:f7:9c:c6:90:4d:
0f:ae:dd:79:dd:75:9b:76:9e:4f:1d:c7:49:28:d1:
fb:c9:2e:08:62:eb:39:e7:96:44:30:9d:1f:ca:c0:
23:cd:10:96:9b:3d:f9:40:b8:a3:a4:0c:96:b9:34:
59:b2:99:6a:0b:6b:f2:7f:e0:c0:39:db:01:08:75:
c9:31:25:4a:f3:a8:d3:22:ca:c3:64:ef:7e:8a:6d:
32:f9:e7:e5:dc:42:b2:65:de:ad:46:81:f1:05:f1:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:48:2C:4B:A9:AC:90:48:40:D6:42:EC:69:12:97:1B:EC:B6:CB:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04262a55-bfd7-32dd-9781-3ab51f8bd1b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:77:10:79:f6:0a:7a:c8:31:78:bf:eb:32:43:ec:6d:41:6b:
f7:7f:93:9a:90:75:1f:c0:2a:d4:b0:19:03:cf:47:eb:71:2b:
b8:be:8d:bc:97:b6:c4:3e:d5:65:14:4a:2c:ad:a3:3e:6f:50:
a5:e8:06:07:12:ef:48:7a:14:49:c2:a5:ee:d6:2a:6c:18:f7:
a2:03:1a:d0:cc:45:22:ae:2a:43:e4:b8:aa:54:d6:be:dd:89:
04:5a:2a:ce:e4:91:58:fc:62:fc:db:b8:8d:7a:4d:67:e7:89:
80:ee:5a:ca:86:cb:11:8a:9c:d2:6f:44:d3:30:5a:8a:de:77:
90:cf:18:d0:4a:c3:b0:8f:8f:a9:8f:9d:80:f1:71:0e:c6:22:
5a:b8:09:71:f2:0d:0b:79:1d:8c:15:1b:69:0c:59:5b:46:38:
a7:4e:34:35:56:73:fe:7d:2b:e4:92:22:08:f9:4d:ce:b0:0a:
ef:b9:d4:8b:87:30:f0:1c:cb:28:80:1f:6b:43:64:52:fd:9a:
4f:ff:26:bc:61:8c:bb:e5:b1:56:9f:71:95:12:6b:1d:5b:01:
3d:e1:13:29:a9:33:37:de:f4:d8:9b:ea:7c:ff:07:38:b5:6f:
21:73:fb:10:be:2a:27:6d:a4:7b:2a:76:fb:a2:72:47:5c:9d:
e9:b9:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:06:50 2025 by rpki-client