Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ae523e-413d-3de1-b8a2-602af3acc080.roa
File: 86ae523e-413d-3de1-b8a2-602af3acc080.roa (raw, json)
Hash identifier: ZDvyemy3AeXA4dwOUBhjRJH4A6kgUBrq4PtV4tncsDA=
Subject key identifier: 40:2F:7C:21:3D:7B:CF:C3:29:E4:3D:BD:E1:0B:EF:24:DB:36:7D:38
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BACB3ABD658122B35E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ae523e-413d-3de1-b8a2-602af3acc080.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396558
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ba:cb:3a:bd:65:81:22:b3:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=462cfb3b-cf9e-475e-8499-b9fa7bf5ae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:f0:cb:55:22:fd:ec:41:a3:0b:c6:a2:ea:
5c:16:a4:43:7e:6d:09:61:bc:76:86:c5:6c:ac:f1:
8d:26:ed:fe:4a:38:8f:7d:23:a9:ff:97:9b:98:c6:
4f:f7:52:5f:f4:8a:8f:1c:27:a2:c9:ef:5a:79:e1:
e7:7e:ea:50:c6:2c:bb:c7:ae:72:83:6e:b9:1d:4f:
bb:ac:dc:03:77:18:be:89:a2:16:34:b2:eb:53:1b:
da:95:0c:0c:fd:89:76:37:a7:ae:36:2d:a6:10:0c:
83:0b:e1:83:dc:d0:fe:c6:51:e0:6e:57:6b:28:0b:
c0:aa:06:7e:88:72:03:19:a0:95:4d:f2:a7:12:ec:
f8:99:22:1a:91:28:20:fc:52:57:6c:c8:f4:8f:68:
42:66:b2:11:3c:71:2f:fd:9c:73:79:ca:cd:41:b7:
3b:69:7d:c8:47:78:1c:b5:ea:b2:bf:e1:58:7e:9d:
a7:40:36:9b:ba:56:05:bf:05:3e:d8:fc:af:e1:95:
4c:a9:9e:2d:6c:1a:57:a8:e3:60:09:62:c8:5f:51:
86:b9:fd:3a:19:b1:56:a2:54:63:0c:ad:0f:c0:fe:
68:cd:ac:97:73:7d:60:3d:b1:41:a0:eb:e2:b6:97:
35:e1:23:a1:29:ab:1c:21:09:b6:31:ba:7e:93:62:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2F:7C:21:3D:7B:CF:C3:29:E4:3D:BD:E1:0B:EF:24:DB:36:7D:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ae523e-413d-3de1-b8a2-602af3acc080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:02:38:e3:bc:c5:a6:49:00:c0:f1:dc:24:9e:88:9d:2a:db:
cc:06:dd:48:61:55:0c:eb:b1:3d:b3:aa:fc:63:fd:d6:c0:a2:
b3:85:a4:f8:ac:0c:02:7c:98:91:9e:26:3e:b9:17:ad:9f:19:
22:85:d5:d7:e9:2a:c5:ae:b0:6a:5d:dc:9e:3e:2d:ee:1a:6f:
b2:c6:93:42:07:f7:a4:ef:18:5c:d8:a3:c4:a7:70:eb:f1:d6:
2a:a7:fc:88:f1:0c:c9:2d:a3:b2:4d:1d:b1:aa:c8:ae:8b:47:
ac:d9:78:fc:a1:9a:8d:c3:4a:32:38:a2:0d:29:a5:2e:63:13:
54:63:a0:02:a0:8d:f2:29:e1:4d:f8:43:fd:7e:66:4e:b5:f1:
10:f9:95:b5:d6:db:73:d8:45:4a:26:75:c5:4d:65:20:43:23:
05:ee:36:35:08:31:95:37:f3:7c:a7:65:67:7c:75:a8:6f:1b:
dc:bb:a7:5b:24:fc:12:bd:7a:2f:ea:3c:c8:62:fd:c8:7b:1e:
9b:ab:37:db:03:3a:b9:e5:5e:b7:f4:0c:ca:8d:42:bd:dd:ac:
fd:88:08:28:d7:f1:b7:81:c4:b3:84:a8:cf:71:fc:3e:ae:7f:
aa:cc:2d:3f:e1:6d:fc:5e:e0:11:45:8c:d2:cf:f4:6f:3b:3e:
2f:5f:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:58 2025 by rpki-client