Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b6d5135-0727-3efa-8616-65fa4dc74c68.roa
File: 4b6d5135-0727-3efa-8616-65fa4dc74c68.roa (raw, json)
Hash identifier: ijO0p84cvfReQKSbHVKgry/puwBhuobjBVFPkvpnjnM=
Subject key identifier: CD:3A:98:68:9F:A7:F0:93:5A:C5:12:EC:CB:02:85:6E:63:63:84:80
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0EF4BBE2238F914D48380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b6d5135-0727-3efa-8616-65fa4dc74c68.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 36618
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ef:4b:be:22:38:f9:14:d4:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=ca093bd5-5f69-4919-addb-ee18dc34fad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:f9:6b:ad:5f:68:06:fa:1f:f9:78:fb:94:
c8:14:b7:94:b6:99:9a:4e:e3:76:ec:a1:c6:9a:f0:
2c:2a:44:01:6c:31:72:9e:57:9d:2b:88:26:58:d2:
31:31:3e:75:5e:58:99:04:91:5b:d8:42:17:79:b1:
9a:a5:14:9a:f6:6f:3b:a3:f4:49:d4:f0:0a:9c:f9:
ef:f9:74:87:4c:d5:f7:7e:ba:42:7e:c9:62:23:08:
fa:f1:42:18:a4:31:d9:7f:ea:c2:2d:b2:86:7f:21:
4f:03:fd:22:ba:88:41:a8:86:a6:bc:ee:0f:97:f1:
62:19:26:e2:d8:f9:af:a3:e7:a7:4d:6d:da:be:ad:
68:cf:aa:ff:bb:89:0f:34:db:9b:9b:d8:2f:c5:1c:
d6:38:18:76:de:bc:69:6e:3e:a8:14:25:34:53:e8:
3b:58:aa:f4:aa:c2:20:40:92:b5:1a:b3:c5:ef:5a:
99:1a:cd:d8:ea:97:ce:72:97:12:1c:ba:11:3a:68:
6d:9c:28:03:dd:c4:46:70:a2:4c:66:50:9b:b4:11:
6b:65:a8:91:ca:c2:af:4d:5e:15:4e:17:7f:82:ba:
1e:4e:62:c5:f7:f0:dd:46:72:2c:c7:4f:0d:52:fb:
55:0c:ea:45:1d:1a:91:2e:dc:22:70:56:64:ad:a1:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:98:68:9F:A7:F0:93:5A:C5:12:EC:CB:02:85:6E:63:63:84:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b6d5135-0727-3efa-8616-65fa4dc74c68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:7d:27:6e:05:14:c3:9f:74:bc:36:4e:08:9b:c2:70:4d:6b:
fe:0d:2f:7f:63:04:eb:a7:eb:81:80:f7:48:6f:37:39:05:88:
13:16:3b:56:4e:a0:d3:c9:f4:45:a6:55:64:8c:0a:3e:7a:80:
b0:67:8c:78:52:67:e8:0e:d5:72:02:5b:80:03:ab:94:c4:90:
27:7d:a4:c6:17:68:52:a2:27:ee:26:e4:cc:82:f8:c6:60:de:
13:cd:ca:2d:40:9f:c4:5b:67:f9:a7:58:f9:6b:a5:33:f5:5a:
12:61:12:e2:96:46:6c:26:2e:3a:7a:51:cc:4b:35:cd:a1:30:
29:fa:8e:19:7d:53:b8:9d:f7:77:23:8d:13:89:8e:1b:f5:06:
bd:69:b6:d7:06:f3:18:d5:51:65:09:40:49:db:e7:39:54:c4:
b1:89:12:2e:d2:94:95:84:b3:44:a6:27:f4:3c:76:b9:b2:5d:
7f:9a:d7:d7:6a:b2:e6:b6:2f:93:46:77:89:cc:5f:13:f0:df:
72:86:3c:25:5c:d6:b8:50:3c:ae:6e:3e:2a:e5:e5:5f:b5:44:
e3:b3:56:20:cc:80:d2:f2:79:f8:4c:2b:07:a4:62:ed:eb:77:
20:78:8c:ec:d5:ec:a9:c5:bd:7e:a3:ef:6b:d2:c9:c8:df:eb:
f4:ed:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:15 2025 by rpki-client