Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa
File: 7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa (raw, json)
Hash identifier: IKlNYPjOjHUiQ//M3mDYf6jA9+3rQXKfflnT7MRpZUo=
Subject key identifier: BE:98:6F:D2:1B:50:C0:8C:7A:F6:B6:09:37:A5:CD:80:93:74:C5:90
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BBA526621A556AE17680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 397199
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bb:a5:26:62:1a:55:6a:e1:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=f7dde869-ddc2-4a33-8694-de72c0fdac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:f6:23:bb:78:18:a5:85:7c:f9:a0:e0:7b:
bb:f7:30:21:3a:4b:26:c1:79:1d:c0:cc:df:68:8d:
ab:89:c4:b1:53:ba:dc:49:e4:f8:61:df:30:d7:7c:
8d:33:ca:12:b0:63:a2:47:22:3e:3b:4d:ba:75:41:
fe:69:3f:dc:37:cd:86:6e:af:1b:a1:87:6c:94:e6:
d7:b1:d0:d7:d9:11:a3:76:27:32:30:9a:d4:8b:fd:
12:fc:69:96:56:7e:66:aa:62:a1:33:b9:fb:ae:57:
8d:72:07:60:58:82:de:60:14:bc:b0:b6:35:be:cf:
80:70:12:e5:33:98:9b:ce:ae:8f:58:19:89:bc:89:
c9:23:89:ee:64:a9:e2:75:18:cd:45:dd:67:fd:7b:
0e:58:68:33:ea:26:bc:d9:2e:ec:7c:b4:ad:94:12:
b2:b1:1a:72:d6:3b:74:a1:f7:fe:38:c2:85:ad:3a:
09:41:68:7a:f6:65:80:1e:3a:2f:00:77:55:24:ed:
e1:03:f6:45:c1:3a:38:17:89:61:76:18:4f:10:d8:
75:cd:86:99:f7:66:2c:51:06:80:90:88:57:a2:8b:
73:23:70:ea:15:13:e5:9d:69:0b:5b:2b:ab:63:e3:
c3:2e:b6:ac:cb:ce:6e:c6:73:1b:6d:ce:59:f5:53:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:98:6F:D2:1B:50:C0:8C:7A:F6:B6:09:37:A5:CD:80:93:74:C5:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:c4:c4:95:6f:b9:92:34:34:c3:68:58:b4:fd:6e:f8:a1:a1:
1d:8d:e4:a6:c8:69:9a:b2:46:bb:23:ae:0f:7b:e2:74:ce:fe:
36:0e:0a:cd:25:ef:58:b2:58:83:ae:25:f4:e0:e2:aa:09:93:
90:4c:69:04:72:34:f6:7b:49:ed:23:f7:c0:27:ff:29:8d:9b:
a4:a8:c5:8a:89:cc:d2:2c:33:f3:58:07:6d:52:24:26:0c:45:
17:c6:ef:b5:41:b7:fa:b0:0f:4d:94:89:3e:97:48:de:51:ed:
70:e6:24:91:44:06:b1:e1:45:8b:0d:a2:d5:70:94:5a:a8:f5:
42:18:b6:31:64:b5:a6:7c:0b:0e:e6:ba:97:f8:f3:0e:ea:df:
61:2f:0b:09:41:6e:92:80:ad:4e:e6:9f:75:3b:02:54:f3:4d:
14:dc:8b:74:63:d6:e5:7b:79:17:6c:b3:11:0c:f5:2e:8b:74:
88:97:2c:ff:fd:a8:c5:78:f6:ea:d0:9d:b9:8c:94:81:0f:d8:
a0:bd:10:6a:d8:ee:1c:62:26:cc:50:de:3f:fb:a6:31:81:ad:
de:c7:3c:86:db:63:f0:62:05:a8:3a:dd:b6:5f:a5:d5:0a:e4:
0c:e8:47:08:8a:fb:70:ae:a5:ac:2b:6e:83:7c:bf:51:a5:88:
43:ff:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:19 2025 by rpki-client