Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3721b45d-bd3c-30f0-bf2a-8be93f3df635.roa
File: 3721b45d-bd3c-30f0-bf2a-8be93f3df635.roa (raw, json)
Hash identifier: ZBRTXDW3nnPJDZxYzq4vzrJVTBMDG0+9Tb/W+GQpVAU=
Subject key identifier: DD:76:12:1C:A8:51:5A:5C:8A:8E:6C:61:D5:00:18:D2:6D:02:A5:13
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BB5456C7416F8B312F18
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3721b45d-bd3c-30f0-bf2a-8be93f3df635.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396582
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bb:54:56:c7:41:6f:8b:31:2f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=c531d667-9d12-4f71-becf-1b4c55cd95ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:bf:b9:7f:71:56:67:ad:12:0d:bc:85:8c:
77:00:0c:54:3c:e9:22:1d:a6:09:cb:ca:3a:7d:ae:
18:ad:53:74:ba:22:85:b5:0c:21:3a:d7:e6:ab:3a:
56:28:b7:9e:f7:1d:e2:7d:54:57:4f:5f:4a:7d:41:
74:f8:7e:3b:3e:3d:04:53:dc:2c:79:7b:6d:35:0c:
53:16:6d:9d:7e:4d:e7:58:04:8b:c8:00:0e:d7:fa:
19:f1:65:33:be:cb:9b:3b:43:fa:bd:56:8c:b5:50:
e1:e7:11:b3:07:33:88:94:62:87:2c:fb:04:79:cf:
63:00:9b:92:46:55:e3:cb:4e:a7:c9:ab:0f:83:e4:
01:6b:35:95:0f:5b:34:61:61:59:0f:93:84:e7:21:
98:4e:ea:3f:7d:05:8f:cf:d8:15:9e:79:5e:03:bc:
94:e3:54:58:b6:a4:92:eb:7b:b5:b3:6f:9c:ef:2a:
7e:be:a0:96:6a:2c:fb:eb:e5:fa:b9:a1:a8:e6:33:
37:42:1c:b8:6c:e0:51:16:d6:2c:5a:b3:ef:52:a3:
23:de:ec:3c:b2:de:00:d1:be:05:a5:69:01:b1:e6:
15:1a:5d:01:6e:c0:b1:35:1d:74:48:17:89:50:3e:
18:e7:81:63:b8:fb:5c:11:8d:ea:86:bd:28:f0:fe:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:12:1C:A8:51:5A:5C:8A:8E:6C:61:D5:00:18:D2:6D:02:A5:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3721b45d-bd3c-30f0-bf2a-8be93f3df635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:93:00:7b:c2:e0:2a:03:f6:9a:a3:b7:08:df:b5:4e:4f:d0:
68:ba:38:41:70:38:8b:9d:a2:a9:99:5a:7d:47:37:61:f1:d2:
dc:a5:39:78:9e:48:b4:5f:53:23:e8:90:f0:bb:34:87:f9:c0:
1b:7b:1e:ed:c0:a3:33:3d:bc:3f:e5:57:c5:16:f5:aa:c5:a8:
ae:1a:7e:c8:18:d7:20:f8:58:b6:cf:e8:e3:c0:6d:29:67:0d:
2c:b4:9f:dc:0b:9c:eb:08:ab:a6:f8:d0:fd:45:52:cb:01:d1:
9d:f1:01:56:54:36:e4:ab:4e:2a:a9:46:55:19:e0:1b:21:86:
1d:3c:ef:5a:c7:ba:a5:2c:1c:9b:2c:08:6b:72:09:4f:fd:cb:
98:bc:3f:9a:31:09:a4:22:99:0b:b8:28:c7:78:e5:ee:b3:30:
3a:88:45:1e:1b:87:d6:c6:50:bc:01:bd:bf:20:2b:99:25:c3:
72:e6:17:a5:93:19:de:52:91:76:2a:ce:c1:ea:2f:eb:11:d5:
0f:b5:c5:d9:95:df:70:4d:9c:d8:de:83:c4:24:8e:ac:cd:aa:
0c:30:8e:f1:74:18:ad:e5:46:05:78:a4:eb:ce:2f:7a:52:3b:
01:7d:f6:a6:16:09:b1:d4:90:69:02:f2:9b:9e:1c:4e:dc:b0:
a9:5e:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:39 2025 by rpki-client