Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef0d798-ec26-3454-a114-40544d8e44fc.roa
File: 3ef0d798-ec26-3454-a114-40544d8e44fc.roa (raw, json)
Hash identifier: h+36Sb/E7SxIzow8m/QAoAZgHSkYTXzQPLJ4+C9ayBs=
Subject key identifier: 6A:AF:11:BA:92:D8:C8:17:04:E8:2C:79:B0:C5:89:30:68:06:FF:78
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0ED2722C9341122057D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef0d798-ec26-3454-a114-40544d8e44fc.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396596
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ed:27:22:c9:34:11:22:05:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=7bf299e3-b6cf-4f67-9a72-3ab502178991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:7b:31:9c:4c:38:fc:96:2c:c4:f8:d3:95:
3d:15:c0:41:30:ec:56:58:59:5f:fa:3e:48:91:db:
75:4a:dc:5b:75:24:59:bf:03:c4:e6:ff:04:72:b0:
2f:28:d6:bf:14:f4:97:e9:af:b9:03:1d:c2:03:68:
92:7b:4c:a4:ad:59:2b:60:da:45:19:8a:a4:fe:cb:
ef:8a:5d:a0:75:a5:77:99:6f:ad:fb:10:02:3c:58:
4d:30:62:0b:ab:00:e2:9c:74:ce:e8:11:76:a4:14:
11:f1:89:d0:b3:e3:53:6f:e2:90:16:72:91:ca:e3:
dd:2d:37:78:88:dc:70:e7:bb:07:31:fc:ba:4f:cb:
0a:f5:6f:0a:4f:8e:7e:57:bb:c1:66:32:dc:47:b4:
00:0c:6f:c9:c2:76:1c:e3:86:71:a7:7c:0e:fd:05:
34:dd:0f:9b:1c:ba:56:46:d6:cb:99:4c:8e:85:ca:
16:5f:63:36:da:45:16:20:44:86:59:36:c7:18:95:
9f:7b:a3:e2:de:6c:18:db:8d:7c:62:80:11:53:b4:
ba:bb:f9:78:b8:fd:9a:84:e0:8b:18:ce:e0:71:96:
19:b8:cc:45:55:76:c1:73:92:7b:6c:3c:b6:ae:01:
f1:21:58:d7:60:bf:45:60:2d:9a:61:d1:fe:a3:20:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AF:11:BA:92:D8:C8:17:04:E8:2C:79:B0:C5:89:30:68:06:FF:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef0d798-ec26-3454-a114-40544d8e44fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:2c:d7:05:41:7e:f2:68:89:09:d7:f1:ec:ec:0c:4e:f2:35:
19:6b:b6:bb:76:9e:b5:c5:cd:c0:bb:1d:e8:33:62:d5:5f:a9:
af:81:91:cb:27:c5:e8:08:4b:e4:d3:c6:75:5c:82:7b:73:d4:
64:a1:49:d1:2d:ff:1f:30:a5:83:f3:db:51:4b:6c:ca:f6:02:
c1:f7:43:e2:09:d7:97:d8:ac:6e:10:fb:6b:5c:8e:07:89:28:
31:b4:21:ac:61:36:0a:2f:05:61:8c:10:64:b2:b5:31:7b:66:
e7:64:71:3f:5e:1e:a0:d4:eb:0c:4b:0e:ae:4b:1f:56:ae:1d:
68:58:3b:f4:c4:01:40:06:45:eb:e1:30:ca:95:04:e1:fa:59:
d6:4d:5f:e9:9a:82:3f:9a:0d:3e:c3:1b:86:9a:07:c7:24:c8:
77:66:48:73:98:a0:b6:0e:f4:28:dd:91:eb:ed:81:1b:3d:20:
06:a8:b7:9e:c6:0c:35:b0:a9:64:d9:2b:0d:39:b3:ab:ba:3b:
45:8b:d6:66:01:9c:72:8f:fd:57:c6:1a:5a:6a:5e:57:ba:07:
6d:f4:24:7f:42:7e:42:37:34:f9:98:a8:7c:30:7a:eb:a4:35:
6a:f5:b4:69:a1:ab:4f:44:e8:d8:a1:6c:6d:25:d7:dd:a1:cf:
46:60:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:25 2025 by rpki-client