Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e2c55bb-7535-38ff-ae02-361e32003124.roa
File: 5e2c55bb-7535-38ff-ae02-361e32003124.roa (raw, json)
Hash identifier: lwMbUcB4F+sZv6XphCBzsnUj/bm8zIp61CtCs0wUqK0=
Subject key identifier: F1:15:20:CC:C9:B3:A1:B1:BE:8F:CF:54:B5:BD:EC:90:1A:E6:C8:2F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F5915AF486B92F2E1DCC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e2c55bb-7535-38ff-ae02-361e32003124.roa
Signing time: Thu 23 Jan 2025 13:38:26 +0000
ROA not before: Thu 23 Jan 2025 13:38:26 +0000
ROA not after: Wed 23 Apr 2025 12:38:26 +0000
asID: 396558
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:91:5a:f4:86:b9:2f:2e:1d:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:26 2025 GMT
Not After : Apr 23 12:38:26 2025 GMT
Subject: CN=b7542ff2-cf31-4cda-93ad-71511a2b84d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:f0:c2:f1:ab:dc:27:33:cb:9b:a2:c2:50:
df:5d:f8:33:fa:09:13:15:6f:a4:6b:d3:be:75:20:
55:35:56:b3:44:7a:69:66:cb:fc:22:4e:b8:22:a3:
6b:f1:b7:a2:09:fc:90:1d:03:6b:a4:d8:aa:37:ed:
3c:e4:e4:2f:f2:4e:1e:b5:db:82:34:50:8c:d8:57:
f5:12:8d:06:c4:27:7f:e2:64:56:e4:d1:a1:0f:ca:
d9:64:8c:97:b8:9d:40:18:54:a1:73:63:44:57:11:
63:51:51:d4:37:9d:f0:15:2e:72:db:56:3a:1d:c5:
82:b7:36:98:61:89:9b:05:ed:60:c5:63:9c:0c:63:
03:e8:a8:b9:5d:55:60:93:95:0d:fb:b5:6b:bc:37:
bd:63:6d:71:26:60:df:b5:11:5b:30:fa:aa:f3:47:
1e:24:c1:3c:0b:f4:85:95:70:14:99:a9:c1:d0:b2:
b4:84:af:22:12:ca:d5:93:f7:8d:98:3e:3f:96:52:
d8:6a:2b:93:2d:25:67:fd:fa:50:31:09:46:79:d7:
3e:d4:36:cf:9f:e4:65:fb:47:8b:33:ca:5b:2a:1d:
c2:7c:05:53:03:47:af:37:c3:96:fa:53:05:ab:30:
79:0c:89:f2:27:db:fb:8a:32:8a:e8:d0:b6:c4:b1:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:20:CC:C9:B3:A1:B1:BE:8F:CF:54:B5:BD:EC:90:1A:E6:C8:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e2c55bb-7535-38ff-ae02-361e32003124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:0b:da:76:6f:7d:31:36:d1:c8:f4:24:64:6f:76:30:26:c0:
d7:31:82:ab:56:b7:d3:eb:32:70:0f:b6:bc:c4:63:3e:dc:51:
7f:ce:91:1e:89:ca:f7:8b:10:11:53:69:ab:16:aa:e0:10:12:
b4:4a:d0:4a:b7:dc:6e:49:3c:a0:56:c6:c0:c1:93:74:89:fc:
2c:b9:ff:6e:d3:7a:74:63:af:df:f5:4a:1d:4d:dc:4f:83:b6:
84:48:61:ae:58:af:0b:2c:c5:7f:9a:0e:82:6d:8f:80:c6:c6:
fb:c5:cf:6b:52:14:15:a6:10:bc:ce:38:e1:53:ba:e9:dc:fd:
4a:1f:0b:c7:33:4f:27:63:10:54:36:57:70:e0:0b:d6:68:b4:
72:c4:07:fa:cf:88:d6:ed:a9:2a:3c:a0:b2:6e:26:b2:aa:12:
04:20:18:7a:57:21:f4:bc:3b:f9:b1:73:9e:15:6b:a6:cf:bd:
b3:be:90:c2:d9:81:99:dd:d4:93:b5:98:da:2d:92:77:ad:c1:
80:84:04:5b:b3:a2:73:df:5b:de:1f:29:10:11:c3:4b:92:b6:
27:43:4c:78:83:53:97:56:f2:bf:e8:c0:27:76:96:b4:d2:61:
c9:de:d5:37:9f:f8:e3:d3:34:92:4e:c5:3e:73:76:4d:a7:d6:
a8:7d:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:05 2025 by rpki-client