Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ad1f093-1d1f-3080-a07b-e73ecd10a3b5.roa
File: 3ad1f093-1d1f-3080-a07b-e73ecd10a3b5.roa (raw, json)
Hash identifier: EyBPzg1ugZyLCJ2C9mick/wQ19XP2heeRSsIusoi6Lg=
Subject key identifier: B6:5C:B3:B2:0C:D2:BD:6D:71:AA:4D:58:8B:4D:7C:4B:28:AC:A7:CA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0F1C60606D4C92F096F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ad1f093-1d1f-3080-a07b-e73ecd10a3b5.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 397195
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f1:c6:06:06:d4:c9:2f:09:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=6c036452-73dd-473d-a67a-952bb7587e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:8b:9b:7e:ee:28:84:ce:78:aa:ca:67:73:
30:48:3c:9c:c8:84:8e:d3:2c:62:2d:cd:e2:d3:1d:
57:66:f9:e1:6d:a4:65:b7:fd:de:1e:17:c2:af:c0:
40:0c:6e:cc:2c:23:bd:bd:c3:ca:53:e3:10:0e:d5:
54:05:fc:69:1a:d0:34:30:47:01:b3:f5:ab:29:89:
2c:0a:40:57:bd:fc:4f:83:4e:2b:fc:6f:b9:c2:b2:
7e:89:c9:d2:b7:df:d4:da:d9:54:3d:a3:83:5a:84:
67:d6:7a:1f:dd:d4:05:77:52:09:16:2a:44:1f:e1:
04:9b:19:3f:bc:8d:d5:c9:ee:7c:63:db:0e:b7:2c:
f1:3e:85:99:29:77:e5:94:23:c1:9f:e1:2f:6a:53:
e2:78:a1:a5:d4:72:c2:73:66:b0:9e:39:52:1c:a7:
2b:2b:f7:5c:0f:c4:fc:7e:c9:82:ce:c2:6c:68:66:
49:24:63:e5:d0:94:f1:c6:82:e3:90:f6:d2:3b:f3:
a1:20:ee:bc:e1:61:17:d4:d9:e0:11:08:27:eb:11:
3a:a0:89:d9:9a:76:2d:96:ee:e3:d2:b7:53:51:71:
d9:c0:5f:0d:03:65:82:4d:c7:37:9e:7c:ab:49:3b:
02:58:33:bc:e4:90:80:6d:ea:92:bb:80:7d:25:8f:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5C:B3:B2:0C:D2:BD:6D:71:AA:4D:58:8B:4D:7C:4B:28:AC:A7:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ad1f093-1d1f-3080-a07b-e73ecd10a3b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:23:96:4a:be:56:ce:67:6f:af:03:d4:8e:f6:7d:ab:34:ee:
d8:b7:38:46:06:d9:95:2a:8b:44:be:04:5c:ea:3b:97:13:d7:
70:f8:de:a1:88:4d:94:9c:11:41:b0:60:3e:60:8d:e6:19:60:
97:d5:31:e7:ff:45:4b:af:b9:f2:fb:8e:b8:5b:c4:3b:dd:7e:
3f:30:81:42:9d:ea:e7:b1:ae:cc:32:19:9e:a1:19:36:30:1a:
b9:71:72:c5:ac:72:34:db:91:40:30:ca:5a:4c:fb:bb:6a:d4:
ae:9b:38:bf:b2:39:98:ec:26:5d:48:13:ec:a1:07:ad:4d:54:
73:20:d4:63:70:96:b0:89:99:d4:99:62:08:f5:2d:27:07:00:
c5:a0:67:61:1a:62:f6:f4:df:8a:53:f7:d5:3e:3b:f4:26:75:
f5:25:08:da:de:09:11:3f:16:ad:6a:4f:da:de:f1:67:99:24:
cd:3d:c5:38:12:55:8b:86:62:d3:bf:84:11:84:20:6f:b1:bf:
a7:0d:08:50:be:45:f6:d0:a1:68:01:94:bf:d9:71:39:23:b0:
8d:e4:39:52:ba:8a:90:7e:1f:5e:d1:6b:4a:5c:60:86:13:3d:
15:4e:78:79:e3:1a:cc:55:10:8e:20:56:78:03:ac:1a:73:01:
8c:66:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:15 2025 by rpki-client