Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/192d6f3e-49fb-3200-81c1-507ad761ee89.roa
File: 192d6f3e-49fb-3200-81c1-507ad761ee89.roa (raw, json)
Hash identifier: oON7BnZ/qaGGGsdxCHJPo5HG8G2/2yTflZ8lUz/Olso=
Subject key identifier: 74:06:E2:07:7F:9E:D9:D7:45:B5:11:D9:7B:CF:C2:1C:03:94:17:1B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BAFA5A74874D2212BB20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/192d6f3e-49fb-3200-81c1-507ad761ee89.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 36629
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ba:fa:5a:74:87:4d:22:12:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=0d8d8f2e-ec31-45ae-9190-4075fe358731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:e9:f1:c7:e0:5a:41:ca:6c:db:a0:80:40:
54:e7:5f:ae:6b:12:a4:00:1f:84:a5:1a:4b:e6:78:
ce:00:37:33:5e:34:93:77:c2:9a:1a:4f:f1:28:b4:
43:b0:11:9c:63:55:17:1a:46:d9:93:08:99:0e:b9:
1f:9f:21:ff:50:42:46:13:4a:cd:32:85:b0:7f:82:
a7:97:f6:00:5c:2d:cc:94:3a:78:b0:26:36:ef:1e:
4e:cf:f4:de:14:95:38:c2:30:1b:fa:f8:c5:f4:56:
eb:a8:19:7f:8b:19:e5:a1:b5:c7:b1:01:fb:cc:0a:
52:59:ba:c5:c1:e0:f3:b9:e4:f1:32:76:b3:c0:e0:
97:ff:9f:dc:41:dc:3b:02:f0:18:cf:38:d2:41:a0:
2f:9c:45:30:96:b3:c8:ff:8f:30:e2:12:6a:72:e4:
a1:00:fd:5b:df:5a:09:99:54:59:e6:1b:3c:19:1e:
4a:b6:48:c8:0b:79:cb:c5:a4:4d:09:0f:0d:09:06:
18:e5:ff:42:83:78:8c:1d:1d:26:24:a8:7b:d8:b7:
00:44:4c:0e:dd:31:49:71:50:b7:1d:36:31:33:6c:
3b:64:fc:62:e6:1e:79:ba:0b:3d:32:50:5f:e8:6d:
0e:ef:e1:09:81:0d:6a:ed:12:68:06:44:24:e7:cd:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:06:E2:07:7F:9E:D9:D7:45:B5:11:D9:7B:CF:C2:1C:03:94:17:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/192d6f3e-49fb-3200-81c1-507ad761ee89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:f6:de:8c:66:18:a8:0f:a6:b1:49:7a:8f:c9:c0:64:5a:32:
25:32:a7:f8:bc:55:e8:dc:f4:4d:b1:64:41:d9:fb:c8:f7:00:
91:4c:af:48:3f:38:8c:64:d1:02:99:76:4c:7d:1a:9f:ac:84:
61:12:c8:17:11:44:c6:1b:c3:d4:57:b9:8a:66:6a:ed:b7:1c:
2c:0b:dd:d2:c1:c0:45:65:65:40:50:9c:df:ee:9c:54:d5:78:
6c:a0:7d:cc:ea:c4:3f:c3:c2:90:b4:e8:36:8f:06:69:72:85:
5f:58:17:a1:88:b6:94:15:da:79:89:e1:ed:60:75:e6:18:70:
50:10:12:ff:f2:91:33:c0:b0:10:30:3b:2b:87:07:d3:33:4d:
1f:c9:0a:f9:16:b8:d0:51:6c:b8:05:7a:ad:a9:8e:6b:1f:47:
ed:5a:db:9d:c0:dd:db:31:c0:e7:a4:34:eb:70:3a:08:5d:fa:
47:25:32:64:eb:4c:08:0d:c7:ad:6e:d8:e1:b2:88:db:1a:5b:
10:55:e4:5a:f3:5d:85:c3:14:ef:83:47:1d:04:92:38:55:fa:
da:94:36:00:99:68:ba:33:77:61:a9:1d:f1:67:20:90:75:9c:
9f:34:d8:d2:6d:95:68:dd:d1:5b:16:3f:01:fc:41:af:81:7d:
26:96:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:37 2025 by rpki-client