Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94eb899b-a540-3df7-96b9-cd5605d855ee.roa
File: 94eb899b-a540-3df7-96b9-cd5605d855ee.roa (raw, json)
Hash identifier: XRpQgUhRNXGlDsb9xFOSCN3yM8lihavay+Ryhrtwl0I=
Subject key identifier: 40:0F:50:FD:15:70:B0:0E:4F:AA:98:AB:3E:FF:CC:A5:3C:17:2A:AD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0EEC20D84DB1D4FF9F800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94eb899b-a540-3df7-96b9-cd5605d855ee.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396571
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ee:c2:0d:84:db:1d:4f:f9:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=33c6e8b9-77e8-44a0-b856-d10c5cc63088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:07:39:a4:a3:29:22:20:a3:0b:15:28:a0:ac:
83:cf:03:b5:f5:28:bb:49:c2:a3:82:36:4f:dd:40:
6a:01:94:8d:b8:6f:12:e8:fd:77:20:89:46:39:40:
54:5a:de:ff:5a:3e:dd:66:3f:2a:07:66:20:33:81:
f5:57:81:2a:69:61:ff:4f:ab:39:12:be:ec:43:37:
3c:a6:e6:c4:6e:7d:61:e2:60:9e:5e:b9:73:0b:08:
05:ac:f8:f0:f2:4c:74:61:ab:49:1e:82:36:a0:81:
b1:63:99:37:e0:b8:41:d9:33:cf:ab:28:e8:a9:d3:
a8:ad:64:f4:82:17:84:f9:23:0a:ff:e1:b7:c3:93:
fa:00:26:de:ad:dd:9d:d5:62:50:4c:2a:b2:94:e4:
21:d8:33:e8:06:1e:1f:d3:a6:b5:d4:6a:92:83:a9:
c3:0f:a5:9a:43:0f:a2:28:fe:58:65:a6:14:0a:e1:
b6:d7:8d:81:bf:ce:36:3b:52:46:37:2a:8a:24:12:
59:c6:45:f2:45:7c:f6:1a:1a:41:90:6e:ab:a7:88:
17:ab:c4:6e:a0:3d:5b:e5:81:48:e2:79:47:ee:0a:
d4:f2:9a:fb:f9:f9:50:68:09:26:5a:20:8c:58:e2:
f5:d8:75:57:2e:3b:81:d8:fe:75:ed:ea:f4:b1:d5:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:50:FD:15:70:B0:0E:4F:AA:98:AB:3E:FF:CC:A5:3C:17:2A:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94eb899b-a540-3df7-96b9-cd5605d855ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:ef:3b:e4:62:3b:32:81:cf:65:d4:48:82:b8:41:a6:61:ca:
d3:27:57:07:39:d0:e4:ce:c9:33:6d:e5:53:c2:91:83:39:03:
1d:55:27:d4:1c:e2:71:f6:be:93:8a:bb:94:9e:01:0f:6f:c8:
32:ef:88:fb:49:d1:87:cc:3c:fa:64:9d:6a:e3:5d:4d:c6:24:
4a:dd:fb:29:bb:ff:f0:77:fc:e0:c4:79:54:32:2d:00:f1:3c:
90:35:f0:f9:f7:35:7c:b4:6e:22:b2:88:f4:0e:44:c2:52:93:
b4:3d:1e:25:16:ff:0f:87:4a:d1:4d:3c:94:87:9e:60:7a:be:
28:cd:17:5a:77:fc:a0:bc:f2:d0:2d:66:7d:36:b6:01:ee:27:
a9:70:78:ce:c2:34:a2:33:1a:69:42:85:c0:28:6d:e3:5a:09:
6c:97:9d:72:0a:fe:88:4f:39:03:08:f6:84:46:b5:3a:11:c9:
c3:35:77:bd:87:f7:14:2b:18:d7:dc:15:ed:68:5b:32:df:c8:
21:56:f5:b2:dd:64:5a:5d:fa:24:26:6b:97:75:6b:94:ba:fa:
b6:82:a5:8d:7d:bc:b0:23:75:83:c4:bc:e6:93:4f:b3:d8:17:
4c:75:01:36:16:fd:b3:e7:f0:ed:43:be:5d:94:a5:01:79:75:
e4:54:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:21 2025 by rpki-client