Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa
File: 631fa7a2-42d1-3539-b100-e323154e899a.roa (raw, json)
Hash identifier: Ly05kMX8l3xkNOfreYeW3kVRG/W7DfDM4h6LGLel/iQ=
Subject key identifier: 0C:32:9E:4D:AB:FD:A6:AB:CF:70:66:19:D2:C5:7F:E1:ED:DD:B1:86
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0EE1493D50B66ECB60580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396546
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ee:14:93:d5:0b:66:ec:b6:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=122ba65d-71a8-4792-a3de-03691d4b3b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cc:b3:c9:9a:59:33:fc:cb:f8:60:74:77:55:
ba:03:21:81:8f:1d:e0:a5:2c:ae:41:41:5c:bd:a8:
95:df:2a:9c:61:a8:48:d2:57:4a:88:7e:ac:0e:a3:
0a:f4:4d:d1:15:68:55:53:d7:2d:84:05:b2:23:0f:
11:c9:1a:ec:33:f7:eb:29:95:67:e4:43:49:50:08:
45:95:34:5f:70:67:eb:95:55:68:52:51:06:fa:8c:
8e:fa:02:21:df:72:b7:41:53:fd:26:5c:7f:03:25:
a6:bd:64:cc:08:33:88:72:fd:f6:97:70:c3:a7:18:
83:90:4f:7e:a9:06:1d:77:dc:4c:89:fc:e6:39:9b:
e7:66:3a:ab:cf:f1:5c:56:96:77:05:63:44:b6:55:
dc:09:dd:94:92:34:39:09:75:e9:6f:e6:b1:58:ea:
29:a4:fd:fa:01:01:73:90:df:46:41:69:7e:8e:61:
8f:b7:3a:7e:07:71:76:b7:17:d4:ed:2d:8f:9f:cb:
3e:cc:6c:46:26:be:85:c9:1d:52:e4:10:46:d7:34:
53:83:03:32:0a:80:d9:ad:5e:53:5f:8a:13:3f:80:
29:ff:74:f0:ed:1a:5b:fe:4e:23:fa:f6:5e:34:30:
be:17:3e:f7:65:69:78:9e:c0:cc:1e:72:bb:8f:b5:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:32:9E:4D:AB:FD:A6:AB:CF:70:66:19:D2:C5:7F:E1:ED:DD:B1:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:ce:bb:88:88:4b:48:1c:ef:f8:7f:4e:92:4e:e1:fc:6b:77:
70:c2:bf:20:c4:13:03:1c:a6:99:cf:5f:9e:e0:1a:b1:7d:da:
03:a0:ac:99:90:bd:6d:03:50:0d:15:7c:ba:1d:3f:54:8c:56:
8e:40:de:6e:2d:63:39:3a:65:5a:30:9e:f0:65:ba:15:08:75:
10:99:78:d2:30:63:d0:0b:0f:38:a4:e1:f4:b0:92:80:c7:e7:
05:91:c2:fa:0e:4a:21:5b:04:9c:c2:fa:2d:e7:4d:92:40:71:
d9:4f:da:61:07:b1:61:c3:9e:e5:4c:fe:ab:7f:a4:3c:57:9a:
3c:ce:19:84:8a:30:5e:27:43:79:52:a6:03:1d:a1:8a:f9:7b:
0e:86:52:28:fc:70:c2:cc:79:72:d1:74:a3:0c:9a:f6:9e:b4:
4d:99:40:df:0d:4f:96:04:7f:5e:d6:8b:4f:7e:18:35:de:ce:
3d:5b:57:3b:37:40:62:8b:40:eb:5c:a3:35:2c:11:cd:f4:00:
00:26:98:49:77:bc:0c:82:1e:27:45:29:21:f4:f0:e1:37:90:
40:da:b0:c3:02:36:27:50:57:a1:98:fe:5c:32:33:eb:19:8e:
7d:7b:eb:e5:9b:2a:e2:e2:cc:d7:97:b4:49:c2:0c:53:0a:13:
8d:c3:de:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:16 2025 by rpki-client