Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa
File: 81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa (raw, json)
Hash identifier: KCc9quCVZjvERRKqMXvTHG8Yko4gq/1aDhCBtobtdSk=
Subject key identifier: 6A:1A:C8:FB:8B:EE:49:7C:0A:A6:DE:55:C6:09:77:95:4F:97:D8:1B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C405B3E6C61422569C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396560
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c4:05:b3:e6:c6:14:22:56:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=7403afa4-2b42-4ca3-9476-fa3e720f1059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9b:60:6f:6a:f5:71:ee:27:c0:05:86:cd:ed:
fa:ca:55:30:0c:af:99:f0:06:65:ab:e9:12:89:eb:
6a:36:c4:bf:c1:24:3a:b9:d4:d3:73:4d:dc:dc:e0:
3c:67:96:72:a9:e6:4e:dd:e7:d7:52:d1:10:0a:0c:
c3:20:2c:8c:59:14:04:d2:55:49:20:b6:95:c1:52:
20:8e:14:4a:1b:e3:df:4d:5c:31:2c:cb:5c:c9:72:
54:53:c9:04:1f:4c:e8:dd:f3:bc:48:9e:7e:2c:16:
e9:4a:4f:be:5a:6e:c6:33:9e:28:a5:09:07:dd:3b:
2d:1c:3f:86:7f:a6:3a:4f:9d:9f:40:21:60:3c:d4:
ca:f9:c8:fe:3b:fe:4d:fc:17:a6:8a:7f:be:7d:5a:
5b:43:b4:c5:21:bf:b5:53:36:22:6e:4f:06:8b:3d:
ca:37:e5:d0:9f:45:fb:02:5a:3f:f5:bd:92:60:91:
f7:94:9d:a0:75:a4:fb:dc:d0:16:4d:48:6d:79:11:
03:94:ad:ba:7f:2a:75:0b:85:d2:96:82:4f:68:bd:
f5:e5:0e:f0:b2:2e:fb:68:47:7b:d1:b4:b1:20:78:
5d:df:91:cc:c5:c5:c8:29:e8:80:f8:d9:eb:27:f2:
d1:eb:72:ec:03:a8:ac:1d:7d:ec:cb:b3:3b:17:f2:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1A:C8:FB:8B:EE:49:7C:0A:A6:DE:55:C6:09:77:95:4F:97:D8:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:c9:95:18:69:27:01:ba:42:11:f1:27:6c:bd:22:d1:3f:23:
7a:e2:08:79:70:41:8d:c3:9d:d2:a5:4b:c1:43:80:e7:4d:60:
ff:eb:d5:84:4d:32:4d:ef:14:73:ec:80:10:84:f6:ce:f2:cb:
69:a0:50:34:3f:7e:57:18:16:6a:71:26:c7:c6:af:c1:83:82:
df:33:73:38:3b:c7:4d:23:e3:d0:22:09:5f:79:09:11:c8:bf:
54:d5:e2:cb:58:87:03:fd:4c:69:e4:2c:99:8a:9a:97:cb:00:
d1:05:49:14:b7:33:5b:5d:06:c7:ee:4a:00:e2:c9:88:ca:49:
23:49:a8:02:bb:b8:18:36:51:6b:d6:18:26:75:f9:0f:86:80:
50:ee:46:43:f2:e0:11:5b:b6:63:3c:0f:20:01:b6:b7:8d:a5:
3f:02:5a:4b:38:a4:ba:53:c4:53:e0:d2:1e:d3:6d:65:19:34:
21:a8:35:fd:12:4d:2b:d9:58:2b:7b:c9:fc:97:34:12:7f:dd:
26:cd:01:88:9e:9a:fd:b2:e8:07:0c:69:6e:3d:ae:3b:07:97:
cf:4c:fe:d8:62:cd:e5:9c:3b:b2:28:64:b5:15:18:ee:9f:8a:
3b:93:34:05:00:2e:76:fc:b6:24:cc:76:b5:10:49:42:49:fa:
50:b0:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:18 2025 by rpki-client