Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa
File: 6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa (raw, json)
Hash identifier: FXv+yEXl3QpWUvKARLLQru9Ru+Hz55aEU36c03JU3Gw=
Subject key identifier: 60:EA:72:47:EB:80:B3:1D:5D:3B:9A:35:FD:6A:2F:5E:57:EB:9A:07
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BC62DDE5C5DB5C24D780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 397206
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bc:62:dd:e5:c5:db:5c:24:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=7990827c-4837-472c-b7ec-f26f4e10a182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:ac:43:d2:ef:83:fd:e4:3e:6b:49:43:9e:
43:b7:b9:8f:ca:1c:fb:69:5f:5e:26:c3:55:c1:9a:
3d:39:5d:80:ff:08:4c:0b:e1:62:2d:b6:6c:6d:44:
52:d9:2c:1b:8b:f1:af:07:0e:ac:e1:52:21:3a:0d:
e0:0a:bb:97:eb:85:3f:23:cc:f7:8e:12:7c:bd:d6:
65:c9:8e:86:34:3b:a6:ed:63:18:f4:57:81:d7:9a:
cc:f4:5e:03:aa:55:01:d8:0e:83:28:53:f8:db:01:
8e:40:48:d8:28:0d:84:18:43:21:a4:df:5a:02:2b:
21:ee:8a:1b:38:f8:6d:57:bf:07:0b:dd:8a:78:35:
35:f8:7f:a3:49:51:0c:b0:86:16:05:97:72:5d:26:
95:db:cd:02:d1:eb:64:1e:30:09:f2:74:fc:ee:02:
c0:52:24:c2:d5:cc:92:0b:29:44:dd:be:1e:16:cd:
21:42:9d:f1:17:e6:f4:0c:ea:a2:1b:9c:cc:5b:8f:
02:3d:62:da:0f:e5:a9:5c:32:92:7d:2f:5a:fd:31:
f0:9c:a5:70:5d:69:a3:57:f4:fc:18:ee:43:74:1c:
a2:bd:fd:cd:a3:90:9f:3a:55:4e:be:8c:9c:67:30:
71:f9:1d:2b:e5:5d:44:be:1d:d6:bf:32:fd:e2:1e:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EA:72:47:EB:80:B3:1D:5D:3B:9A:35:FD:6A:2F:5E:57:EB:9A:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd71fd7-f9ce-371f-a1fb-5bfbfd26e896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:ca:60:20:0d:96:13:8b:e2:b9:b1:29:27:9e:ea:2c:b4:bd:
ce:d9:9b:ef:2c:e5:42:6a:b1:b5:8d:da:08:16:8a:7e:73:93:
41:be:93:3a:8e:7e:ef:2f:c4:30:b7:c7:30:db:f6:cf:29:4c:
48:08:6e:ea:0c:ba:20:95:5d:a4:b0:55:a0:27:fd:5f:77:fc:
30:b7:9c:18:a5:81:8d:f5:54:6c:72:dc:66:2a:88:79:9d:c7:
58:bd:e1:b8:db:0f:20:ec:bc:bb:94:f7:b3:12:a0:e3:2a:5c:
e6:cc:da:57:89:d1:59:71:d8:89:a9:1f:d1:6d:89:99:fa:2e:
f3:ed:fa:2e:3a:e7:80:70:ef:6e:5a:07:1a:af:76:6e:cc:3f:
a1:25:2d:34:1c:1b:d9:d1:3a:fd:be:57:be:ae:83:04:88:e4:
3b:b0:42:39:5b:61:2c:81:4a:89:49:b8:44:28:91:08:b3:bc:
c2:5c:dd:9a:76:7b:69:0a:c6:80:d2:7a:f5:de:c3:7c:b2:03:
46:76:22:ce:eb:fc:ce:47:9a:29:aa:92:4e:1d:33:38:a9:32:
bb:c8:52:24:4f:5c:8a:8e:b2:3e:e3:76:bf:91:94:dd:f4:c8:
84:9b:24:6d:68:c3:da:16:ed:e4:f0:bf:b3:61:49:c7:39:8f:
21:2f:fa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:37 2025 by rpki-client