Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dab4eb7-41ea-3c9c-abb8-a3ca3cfa1bc4.roa
File: 5dab4eb7-41ea-3c9c-abb8-a3ca3cfa1bc4.roa (raw, json)
Hash identifier: YrQrqpo/mEyPkw4pYJzP/BF+TqlebCbNF9zaSSnIfFE=
Subject key identifier: 96:40:98:DF:75:BB:3F:57:EC:0A:57:A3:0C:2E:AC:A8:2B:8B:3F:9F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BBF811E1C66B73909AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dab4eb7-41ea-3c9c-abb8-a3ca3cfa1bc4.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396555
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bb:f8:11:e1:c6:6b:73:90:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=c6a3336f-b30e-4050-869b-45438033407a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2f:be:c6:16:58:ab:c5:3b:83:fc:c7:01:31:
e9:0d:78:c5:4a:d8:7b:a8:7f:dc:c8:24:e9:89:c1:
66:04:50:a2:be:b4:1e:37:06:4f:2f:86:e4:53:31:
7d:95:7c:2c:63:d2:e4:e7:95:25:55:f7:2e:19:36:
e1:6b:ed:af:28:ae:64:c3:83:91:b2:91:0a:83:5d:
40:06:58:b2:73:a1:2d:69:4e:68:72:77:b2:17:a4:
64:2f:1d:7b:ce:5e:d0:60:f4:ef:75:33:7f:be:31:
3b:10:dd:3d:58:4b:27:51:5a:f2:8c:46:a3:d4:29:
e4:8f:b8:2e:c4:1c:48:13:f0:91:3f:c4:8d:f2:9c:
24:89:23:4f:d9:3e:3f:f2:73:64:3a:1b:c2:11:c3:
36:48:34:db:a1:35:80:14:1c:8d:e7:8c:20:8f:af:
80:0c:5e:ef:93:4d:e2:49:c5:6f:e5:db:18:60:dd:
8c:00:03:a3:4f:ec:9f:9a:46:5a:01:e1:eb:86:a3:
a6:70:74:71:b2:35:40:58:c3:8e:98:e9:bf:49:45:
1a:bf:58:e5:dd:5c:c8:bc:43:8a:a9:4a:12:50:d3:
f4:cc:ee:ec:09:6c:e4:0e:95:93:9e:d6:25:2b:51:
68:eb:cd:49:26:3b:4a:73:6a:d5:26:0f:ff:ce:a4:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:40:98:DF:75:BB:3F:57:EC:0A:57:A3:0C:2E:AC:A8:2B:8B:3F:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dab4eb7-41ea-3c9c-abb8-a3ca3cfa1bc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:70:ac:81:cc:8d:69:ba:6d:63:65:90:f5:b3:30:ec:eb:8a:
fa:5a:f5:10:41:df:2a:3d:02:cb:f1:e2:99:92:7f:ef:79:72:
a3:3b:99:98:b0:0a:b8:8d:6e:bc:61:79:65:ab:41:8e:dd:36:
bb:96:83:5c:67:23:e6:e6:67:af:0d:9f:c4:b4:83:c4:42:66:
ee:5c:92:16:6f:3a:63:77:28:32:69:4e:ba:e5:7c:f2:55:1d:
a7:c3:b9:d5:af:07:aa:32:22:39:cd:58:ff:01:9c:21:2b:b6:
7a:79:79:e2:c4:a6:47:d7:ba:60:2b:4e:0e:a2:ba:f7:1d:9d:
9c:0f:68:3d:c1:50:fa:bd:4d:73:e1:6f:af:9d:0c:41:71:48:
a2:b6:c2:42:47:a8:13:98:55:f6:33:f0:db:e1:2a:43:ce:d1:
e5:f0:02:c1:54:3c:75:f1:38:aa:12:0a:39:30:f2:a3:72:ab:
b2:85:d0:f8:69:1c:dd:f6:82:51:96:8a:f7:be:f2:df:91:54:
c2:37:d7:e3:ea:45:0d:82:d2:a1:49:9b:7a:94:4d:f8:0a:0f:
72:db:15:24:39:8b:08:39:e7:b2:11:a0:ae:76:74:28:ac:83:
93:fc:7a:ca:ea:ac:8e:67:85:ce:d2:e8:b1:ee:6a:95:21:72:
42:19:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:53 2025 by rpki-client