Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2552ecef-6986-38c2-a293-2d60cf5b3fd7.roa
File: 2552ecef-6986-38c2-a293-2d60cf5b3fd7.roa (raw, json)
Hash identifier: vWME4ILvmdk3+b6vyKirV5zXi8DS8nAtIRnz9X8Z0nM=
Subject key identifier: 38:F7:BC:99:E7:04:7F:C4:9E:1A:CB:F7:6B:B1:9A:E8:C0:C2:8E:93
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C31132A818FE79F984C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2552ecef-6986-38c2-a293-2d60cf5b3fd7.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396613
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c3:11:32:a8:18:fe:79:f9:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=8d597946-37f1-404a-a430-204a27e2d2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:17:a3:fc:4d:f8:ec:ed:3a:64:b4:37:70:
57:34:76:23:25:a1:8c:1f:5d:78:15:59:21:d6:c1:
da:39:20:ce:a2:94:dd:38:63:40:14:14:8b:e1:e3:
58:57:2c:8c:a0:9a:84:62:f0:20:b9:df:06:83:f1:
25:ee:33:5d:cd:3a:38:53:ba:3e:51:1b:69:68:87:
f8:0d:5d:aa:85:cf:5f:bd:84:f1:9c:fd:ac:e5:b9:
04:ef:5e:a3:dd:55:e2:a7:1a:06:50:ef:27:68:21:
92:67:66:7f:65:c5:0e:f0:40:13:23:14:89:80:05:
b7:ff:5c:38:cb:9b:8b:a1:00:81:52:fe:26:16:b0:
8c:96:85:e7:e1:0d:c5:30:5e:3d:c8:2e:11:b2:d5:
8c:25:6f:01:00:97:58:e8:80:11:10:2d:32:ea:89:
d4:98:f6:8c:d5:27:6f:1d:5f:4a:3e:f8:c0:ea:d3:
02:62:45:45:33:47:28:e4:65:d5:38:2b:c9:e1:95:
9f:d4:72:17:de:21:eb:9a:3e:60:b9:4a:9b:de:aa:
2b:cc:39:20:fd:62:86:11:e3:e7:dc:2c:0d:af:35:
a7:30:ce:80:c5:3d:96:0b:db:a8:32:79:f0:3d:bb:
71:57:a2:dd:fc:93:8c:1a:fd:40:de:80:c8:8c:ca:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F7:BC:99:E7:04:7F:C4:9E:1A:CB:F7:6B:B1:9A:E8:C0:C2:8E:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2552ecef-6986-38c2-a293-2d60cf5b3fd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:cb:58:76:a0:c1:1e:86:06:42:ec:ed:7a:be:9b:75:d2:6c:
de:ff:f2:8a:7f:98:a1:47:ec:1a:b8:79:f5:a3:20:5c:84:41:
49:93:d8:fc:4d:c7:f5:59:a3:db:3c:d0:16:cf:ff:18:99:47:
fa:8a:ab:31:ed:3e:d9:d6:9c:f6:77:e0:9f:a2:85:4e:fe:0e:
54:b9:f4:d2:07:fa:4b:26:3a:60:a9:ce:f1:9f:6c:d1:7d:88:
b3:9a:5a:94:f8:b9:61:07:c6:cf:d1:49:13:cc:af:95:db:68:
9b:6c:bb:c9:e4:29:fd:c0:28:9f:a6:cf:f6:22:b0:52:b0:7d:
98:0f:f6:4e:36:fa:c6:62:fe:b6:49:03:be:50:48:82:4d:3b:
68:07:c0:ca:51:a6:c6:24:f7:f4:b1:b5:29:98:ad:83:81:2a:
36:22:cb:25:f4:76:61:1c:bf:e6:40:66:8c:ca:ab:80:02:1d:
bf:eb:86:77:6e:db:aa:f9:25:97:87:a1:4e:c2:d3:52:b1:35:
a9:e6:67:25:96:67:ad:30:c1:05:51:3d:9e:6c:37:6f:0f:65:
c9:c8:1c:8f:d2:98:44:7e:54:66:4d:b8:a3:44:d0:32:e9:bd:
3f:c2:73:26:e6:4d:c9:2c:8f:ef:2f:79:53:3d:4f:7a:e6:78:
64:0c:66:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:24 2025 by rpki-client