Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b23ea7f-4e90-393f-be13-bb683e21ab71.roa
File: 4b23ea7f-4e90-393f-be13-bb683e21ab71.roa (raw, json)
Hash identifier: M9sbeHjZnhgkFa+aOSWC3WNI18Uy0hc3oTBJwRB7tek=
Subject key identifier: 1C:8D:48:20:93:7B:2E:FB:61:D1:BC:DC:F7:4E:0B:BC:5F:B5:72:77
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848CB089F55B5058B8CEFFFB777
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b23ea7f-4e90-393f-be13-bb683e21ab71.roa
Signing time: Thu 06 Feb 2025 13:33:21 +0000
ROA not before: Thu 06 Feb 2025 13:33:21 +0000
ROA not after: Wed 07 May 2025 12:33:21 +0000
asID: 396827
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:08:9f:55:b5:05:8b:8c:ef:ff:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 6 13:33:21 2025 GMT
Not After : May 7 12:33:21 2025 GMT
Subject: CN=db24642a-ddc6-4e6f-96dd-1b73e71faa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:b9:b0:6b:30:03:3a:cf:a9:f9:e9:c1:eb:
d0:43:99:a1:07:2b:e2:24:9c:b1:73:bd:31:9d:91:
25:18:1f:7c:5c:63:37:15:35:99:aa:52:1a:5e:2a:
6f:98:69:d5:f4:96:15:b2:cd:ef:e7:39:f3:c3:eb:
d8:64:d4:f8:08:e4:60:bd:98:20:01:22:94:2c:86:
a7:ec:d2:f4:e7:ae:de:88:dc:6c:c4:50:34:35:fb:
7b:ae:49:9a:59:26:5d:49:bb:28:e8:38:35:c3:4b:
e2:7a:77:60:0b:a7:19:12:b8:30:3a:af:de:95:fc:
91:67:0d:30:88:bf:19:73:e7:4e:14:a4:bd:71:e5:
f0:73:ff:e0:43:1b:3b:0f:f7:12:f7:5d:ec:02:21:
0c:b7:ad:c7:dc:b6:38:dc:73:53:76:42:98:5d:d7:
6c:e5:c4:7a:bf:74:39:42:e7:f6:2e:c2:1d:bc:a5:
67:08:6d:5b:ad:b7:15:53:32:4b:d0:68:92:8d:47:
1c:34:6a:82:a5:43:fa:02:7c:1b:af:21:ca:0a:1b:
a8:a4:fa:c2:d7:65:5d:c8:9b:ae:ad:9e:05:bf:ec:
81:de:4c:45:24:1f:03:d3:78:69:f0:b5:f0:f1:be:
a4:c9:00:3c:ee:40:02:6b:d5:7b:0a:ef:e0:23:e3:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8D:48:20:93:7B:2E:FB:61:D1:BC:DC:F7:4E:0B:BC:5F:B5:72:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b23ea7f-4e90-393f-be13-bb683e21ab71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:be:f0:f3:10:3c:b4:e0:2a:68:25:96:9c:3a:a6:76:80:ee:
84:5d:5a:b3:68:84:4e:35:ef:89:8a:bb:fb:ae:9c:c9:00:24:
5e:71:d6:85:fb:3c:f0:9b:79:a1:9e:35:a6:60:9f:f6:86:0d:
89:f4:73:76:b0:be:98:7a:ad:e1:4c:80:29:d5:23:ed:70:07:
b3:3f:27:76:d4:8a:e9:06:6a:ea:03:c4:d7:af:ad:1e:73:16:
24:a5:5b:43:fe:00:c5:38:3c:b5:53:2e:ea:b4:2b:15:fd:ed:
b6:4f:f0:7b:6d:a4:46:e5:f0:c3:e3:f2:3e:90:52:ad:c1:b2:
84:2b:ad:e8:a0:9a:e9:5e:4a:27:cc:ea:95:5b:45:1f:d1:67:
c7:47:53:5e:7b:05:5b:e0:96:2d:85:28:da:05:6c:66:ba:58:
23:74:10:16:ac:8d:e3:11:8a:f6:d3:58:61:d9:d2:d1:c6:4e:
f9:52:70:fe:62:d8:ed:b7:93:f1:18:09:0c:23:b8:a8:86:d0:
a4:0d:f2:21:22:68:21:55:72:ab:0d:7f:df:d9:e4:15:44:a5:
9f:60:db:9a:33:8a:c1:da:70:81:c4:e2:fc:8d:81:36:9b:a4:
77:c4:6d:fe:bf:b4:e3:04:84:6d:31:26:31:2e:a2:b1:9d:f4:
e4:c0:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:55 2025 by rpki-client