Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768c821a-c68f-3be7-b357-f3ae515d2dd0.roa
File: 768c821a-c68f-3be7-b357-f3ae515d2dd0.roa (raw, json)
Hash identifier: yc5FuLJT65DWo9DDc2koo4Yjk/SL40VWLodLwwQzhvk=
Subject key identifier: 80:90:87:43:D9:EE:DD:C8:CD:C4:C6:0E:8F:C8:56:9D:F2:7B:97:6E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848CB08A0489ECE31DB7816F280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768c821a-c68f-3be7-b357-f3ae515d2dd0.roa
Signing time: Thu 06 Feb 2025 13:33:22 +0000
ROA not before: Thu 06 Feb 2025 13:33:22 +0000
ROA not after: Wed 07 May 2025 12:33:22 +0000
asID: 396584
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:08:a0:48:9e:ce:31:db:78:16:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 6 13:33:22 2025 GMT
Not After : May 7 12:33:22 2025 GMT
Subject: CN=35825504-ed69-4268-9670-233cbfb645b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:23:1c:78:1a:b2:bd:00:59:2a:42:86:be:
6f:6f:f2:1d:e7:03:08:5c:a4:ba:fd:2b:3e:26:aa:
45:0b:50:c3:f0:c6:ba:92:94:2c:9e:9f:36:48:91:
83:22:90:ed:be:cf:a1:ed:05:c4:b2:d4:e7:19:b3:
35:02:3e:e0:d5:01:5b:76:d1:53:e9:70:fd:e1:ec:
15:70:ee:df:45:c9:d2:5b:67:36:c9:3a:9f:16:d0:
77:08:75:64:40:24:1b:ff:4b:98:cb:17:a1:fc:40:
11:75:14:81:35:bc:72:80:97:39:cc:7f:71:74:c9:
97:76:71:99:ce:b1:6f:ec:b8:98:4c:b9:34:0b:f5:
36:0b:df:ff:db:25:05:d5:84:bf:d5:6f:4a:29:25:
e5:29:7a:fd:bf:65:4f:73:4a:23:68:63:44:c1:24:
34:1b:e5:cc:92:76:e6:55:0e:a8:1a:eb:93:38:af:
28:cf:a3:73:a6:75:b8:35:52:89:b1:36:1e:78:84:
6c:02:c8:08:3d:78:bc:48:5e:70:ed:eb:82:50:8f:
9e:ab:3d:41:64:a0:e4:1f:55:db:2a:f2:5e:62:cf:
bf:23:bc:3b:dd:01:15:6d:52:34:72:91:9d:e8:fb:
71:7f:85:3e:f4:03:fb:01:2c:c1:a5:00:32:42:f8:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:90:87:43:D9:EE:DD:C8:CD:C4:C6:0E:8F:C8:56:9D:F2:7B:97:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768c821a-c68f-3be7-b357-f3ae515d2dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:1d:05:92:92:72:b2:3d:e6:c5:4d:cd:9a:39:97:a4:09:9e:
55:27:86:8e:7c:a2:e2:c5:4f:97:f3:6a:89:39:3e:50:03:57:
66:fe:83:81:74:4b:83:47:c6:ad:44:2f:47:56:f2:73:3b:40:
1c:9c:13:69:bb:42:2c:b4:f6:db:b0:4b:4e:f6:f1:a8:b6:9e:
86:dd:f6:25:05:1d:b2:98:5c:fb:68:eb:e9:ec:3b:94:83:8d:
76:69:b0:2c:0c:e0:f0:65:3d:6a:55:25:e8:21:bd:4e:c8:51:
08:59:fb:37:e4:28:df:2c:45:32:a5:77:60:74:bc:6b:8f:3d:
b2:c4:19:26:47:b5:fe:03:b1:6c:6f:15:6b:3b:10:53:b9:41:
07:e2:3f:ef:60:5e:d6:b6:10:ee:23:a7:9a:34:13:ab:42:98:
ca:d7:ed:d2:a6:ef:63:b5:03:79:b3:b3:7a:a1:d1:47:ef:75:
72:d7:d9:b5:91:7b:f1:48:f6:95:6a:1d:c4:b5:7e:d6:64:d5:
9a:d1:7c:17:53:09:f7:fb:b7:3c:e5:5f:68:18:d1:ae:86:63:
a3:b3:da:a2:00:64:70:89:f7:cc:ff:ba:83:86:57:25:4f:b3:
43:75:5d:69:08:ad:03:1e:0c:97:57:e3:42:21:b1:5b:58:2d:
c4:20:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:16 2025 by rpki-client