Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/890799cc-82c4-3bc1-b2a7-3c000558b639.roa
File: 890799cc-82c4-3bc1-b2a7-3c000558b639.roa (raw, json)
Hash identifier: alXQmu12CHO9ci7ENz3jnjKsAAoC3AH89U00ErBZpBA=
Subject key identifier: 76:4B:1F:94:31:20:89:85:15:E6:94:E0:CE:DA:DD:44:E9:5F:39:89
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0ECF39DA67F39249D0340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/890799cc-82c4-3bc1-b2a7-3c000558b639.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 36619
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ec:f3:9d:a6:7f:39:24:9d:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=36a644ca-ab3e-4566-84d4-8e4e4b4348cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:9b:20:7d:05:cc:8b:d4:96:53:3f:3f:28:
35:4f:13:b5:5e:48:ce:cf:c6:1f:84:93:7b:5a:d9:
d1:e3:d1:6b:44:2e:4b:19:95:2b:de:4d:09:21:6b:
51:82:aa:6c:18:08:cb:66:ab:99:6c:f8:bc:38:00:
89:80:a3:8a:8e:e0:e0:c7:31:67:c5:34:aa:95:c0:
ad:31:03:42:82:a6:e1:ed:72:06:37:aa:35:e8:db:
7a:be:c0:25:fc:cd:a0:14:bc:69:bf:86:c2:b0:f1:
aa:88:86:ea:bd:33:eb:6c:6a:3b:85:7a:63:a4:76:
58:c6:00:b6:4b:cd:dd:e2:b3:65:99:ac:8b:5c:54:
10:cd:86:56:54:f2:a7:e0:7a:37:ff:ac:a7:65:82:
6d:d6:7c:fc:29:97:64:4d:1d:c1:d9:18:e5:6e:09:
63:16:c1:cd:db:86:e6:fb:47:2f:56:4f:51:af:4c:
33:24:ec:c7:4d:c3:80:d6:31:e6:81:bc:9a:51:7e:
7e:aa:e3:7c:ac:e1:cf:7c:c1:70:a8:7a:ed:62:94:
c9:8e:94:0e:b9:8f:d5:83:11:27:56:d3:6f:72:9b:
c3:ae:af:b4:36:a8:78:58:1a:c8:01:c7:ba:f9:1a:
b5:e0:a9:97:fd:cb:3b:f5:77:ba:28:7f:9f:d5:8d:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4B:1F:94:31:20:89:85:15:E6:94:E0:CE:DA:DD:44:E9:5F:39:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/890799cc-82c4-3bc1-b2a7-3c000558b639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:2a:9b:17:72:d4:f3:da:6c:b9:35:a6:17:9f:18:05:34:52:
47:36:96:15:9b:ef:5d:ec:8a:06:e3:12:d6:9a:7f:05:d8:6f:
04:71:fc:d4:37:c0:5c:e6:42:93:3c:64:9f:12:c0:44:62:ab:
b9:b1:66:53:8c:39:a0:15:fd:1c:6a:57:44:84:7c:99:17:1e:
a7:a7:b5:0e:fc:9d:04:23:ef:c1:2c:19:25:c5:72:8f:24:54:
30:77:fe:99:1b:cb:d9:90:a6:4b:e4:93:94:71:77:2c:7c:dc:
8c:08:a9:a0:50:65:fa:11:6c:b3:5f:22:29:a3:53:ee:41:d4:
4b:fd:ee:68:15:75:be:d8:ec:c0:82:c0:b4:22:fd:f0:65:2e:
92:ee:32:57:85:87:97:a6:b3:ed:a3:80:e4:13:db:2f:48:f1:
40:6c:f1:2d:15:96:2a:b3:2a:db:0e:be:dd:17:6e:51:1f:20:
3a:21:68:31:f2:10:af:74:0a:ae:90:56:c0:4d:f5:37:d2:94:
d1:76:4c:ba:30:ae:53:cc:f6:85:80:c1:72:bc:8e:8c:71:5e:
51:e4:a1:00:fc:f4:b9:f6:fd:dc:27:0f:c3:da:75:5c:bd:4b:
27:65:9c:d7:8c:90:35:b7:69:8a:2e:08:2d:72:80:08:9d:83:
d6:ea:15:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:39 2025 by rpki-client