Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22f87a14-af08-3e1a-b319-8ccd0761d9a1.roa
File: 22f87a14-af08-3e1a-b319-8ccd0761d9a1.roa (raw, json)
Hash identifier: zWPJLwIPKYNjcTMCHoBAkHUrg2PG6DxGg92xxxJj3Ks=
Subject key identifier: 4F:CD:4A:4F:B2:8A:52:87:E4:7B:D8:69:86:C6:34:FC:64:FE:6B:33
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F58567EB9CBECFFA0D3E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22f87a14-af08-3e1a-b319-8ccd0761d9a1.roa
Signing time: Thu 23 Jan 2025 13:38:21 +0000
ROA not before: Thu 23 Jan 2025 13:38:21 +0000
ROA not after: Wed 23 Apr 2025 12:38:21 +0000
asID: 396606
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:85:67:eb:9c:be:cf:fa:0d:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:21 2025 GMT
Not After : Apr 23 12:38:21 2025 GMT
Subject: CN=eecd18da-60f3-4405-9345-ec1fc4b5a37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f5:d8:d3:42:c7:2a:d8:94:10:95:69:d8:a4:
5d:da:38:7a:37:c4:2e:d1:79:c2:ab:e8:52:a1:d1:
e0:6f:b3:e2:e6:7b:f9:87:b9:38:c6:70:62:16:a8:
50:ee:e0:33:1c:db:7c:dd:d6:dd:07:2b:11:42:3e:
3c:42:e3:3d:4a:df:a5:0d:35:ce:6a:a0:8d:49:ca:
b0:01:29:f1:1b:d1:77:1c:f7:1e:27:84:fc:58:ee:
61:06:b2:25:47:c7:7b:4e:b3:5b:3f:10:18:48:e3:
62:f6:07:56:ef:c7:c1:af:42:af:fb:c9:10:4b:16:
a4:85:dd:94:29:8e:f6:0e:26:42:b7:bc:6a:ba:a2:
f0:07:37:4f:9e:00:d9:ac:37:f6:dd:c7:6d:44:ae:
f9:b3:0d:31:af:39:69:b5:0f:e0:eb:ea:e4:1d:46:
a9:f0:d9:3e:ce:0e:53:10:10:a5:39:6a:cc:bf:59:
e1:6e:47:8f:dc:23:2d:25:8c:d3:8d:72:d6:0e:5f:
8a:46:dc:60:39:4f:cf:ba:fc:0e:5a:64:a2:af:d4:
c7:c0:01:2a:6a:c1:70:67:f4:d7:2c:c5:c9:ad:1e:
de:53:14:43:5c:a5:6d:71:ed:7a:80:ef:29:b2:24:
59:2a:65:ce:ad:df:9e:74:ee:d5:e0:75:94:e4:6d:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:4A:4F:B2:8A:52:87:E4:7B:D8:69:86:C6:34:FC:64:FE:6B:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22f87a14-af08-3e1a-b319-8ccd0761d9a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:fc:c3:d9:e3:27:a4:bd:98:e0:4b:6e:97:ee:02:d1:8a:d6:
26:f8:b0:4e:df:d4:93:48:c2:51:94:d8:cc:92:b1:00:91:57:
70:10:18:33:70:a2:30:6b:a2:2d:81:ad:69:6f:a9:eb:22:ed:
53:c0:4b:90:a6:43:7c:61:38:65:cb:fc:3a:af:8c:5e:76:59:
8d:62:66:45:0d:45:4e:94:a3:a2:53:8f:96:8b:51:aa:c2:8c:
ad:52:e1:77:54:be:0b:1f:df:a0:8a:b3:e7:4a:91:a6:06:9c:
af:3e:e1:9d:ae:96:c5:21:87:ca:e2:28:ab:36:5e:c5:2b:14:
f2:c2:68:09:c6:78:4b:2e:d2:69:44:4a:8d:ed:b3:98:ff:57:
f8:89:92:89:7c:70:b9:1f:67:3f:39:cd:56:9c:72:ec:95:89:
d3:ec:22:e4:14:bc:0f:fb:a5:1a:eb:2a:f6:b5:62:07:64:38:
ca:ba:7e:3e:e8:4a:90:05:1a:26:cb:49:b7:8e:8d:a7:66:07:
c8:c2:e6:54:d5:52:23:f6:75:2b:74:78:ec:72:c5:88:da:a5:
61:9b:69:99:57:20:6a:b9:d6:88:11:56:bb:89:44:5a:06:5d:
55:e7:dc:fb:e0:f0:96:df:df:5d:72:8c:7d:6d:68:bd:16:96:
3c:30:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:01 2025 by rpki-client