Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9aa63ac1-037d-3ec0-bed0-509884cfb25e.roa
File: 9aa63ac1-037d-3ec0-bed0-509884cfb25e.roa (raw, json)
Hash identifier: nq53us5k3edDUKPMR2F9SkZIBFtV0F04XkWsVPK+ADo=
Subject key identifier: 83:2F:07:14:ED:31:BD:80:2E:C9:74:C7:3D:B1:B1:CB:41:67:79:74
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0F2F7BA3316A109F99190
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9aa63ac1-037d-3ec0-bed0-509884cfb25e.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396608
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f2:f7:ba:33:16:a1:09:f9:91:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=8124baa9-7720-45d7-b3bc-3c5915379c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:d7:4a:31:a9:88:6f:b6:9a:4d:b1:53:6b:
e6:83:b9:f0:ab:56:19:f6:df:4b:b2:9e:b5:bc:c0:
65:61:0b:b7:fc:ea:58:52:4e:05:fa:04:8f:b1:d8:
bb:f7:2b:bc:15:2a:db:40:7e:30:63:d2:42:d6:54:
08:8f:40:94:3d:e8:d2:d2:be:d7:a6:2d:07:76:ef:
13:11:a8:df:8b:15:5b:b5:76:70:8b:c0:af:df:2b:
54:1c:3e:c8:3d:03:47:b9:56:68:3c:24:c9:30:17:
b3:ce:32:9a:6d:fe:15:0d:00:2b:bf:c0:50:c1:13:
0a:24:c8:11:32:37:8b:06:5e:55:13:a3:02:92:3e:
54:ed:b9:83:d3:96:b0:1b:fc:f4:7c:e2:18:fa:3c:
9c:98:c2:29:88:87:e2:2a:94:50:e0:77:93:56:7f:
cc:ce:94:64:7b:fb:49:23:dc:89:27:28:7d:72:37:
62:e3:3e:86:9d:a6:9b:1a:1f:7f:d0:91:f9:8d:3c:
ac:21:4b:c1:d4:77:ab:23:67:0b:df:f0:f5:d4:93:
e6:64:98:0e:51:ab:9b:d0:52:dc:05:7c:19:e2:c0:
4c:c5:59:3b:c0:c2:68:fd:2d:e9:7f:43:2b:5f:a6:
9e:29:81:93:67:6a:2f:2e:78:56:c8:69:c4:41:5e:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2F:07:14:ED:31:BD:80:2E:C9:74:C7:3D:B1:B1:CB:41:67:79:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9aa63ac1-037d-3ec0-bed0-509884cfb25e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:85:6e:7b:47:71:26:08:5a:76:dd:d7:4d:9c:37:59:32:e9:
fc:c5:9f:84:ab:09:c6:b2:35:ea:97:d4:fb:36:73:95:7f:1e:
e5:d1:61:e1:13:08:52:8f:8e:3a:86:02:25:11:e3:44:8b:c0:
fa:9f:42:05:e7:22:fb:a0:ac:f8:6c:12:bd:b7:61:b4:64:91:
6a:53:42:ef:87:c6:77:14:a2:9e:63:ba:0a:b4:34:2b:e7:6c:
6f:7b:a9:29:cb:74:bb:6a:07:cc:be:fd:d0:fe:22:df:b0:31:
33:11:e7:a4:10:b4:f3:54:13:aa:b0:07:e9:43:c0:5b:32:d2:
3e:a0:92:02:ee:26:ba:be:9b:80:a7:57:32:c4:4b:93:a0:4f:
23:57:e3:31:63:2b:0e:4b:4b:1c:ce:27:3e:36:15:6d:75:a9:
f0:5d:ad:c4:21:88:db:b9:ab:f3:e4:43:25:86:15:c3:bd:1b:
75:3b:ad:67:c8:da:6b:ca:f2:45:cc:e3:1e:10:11:40:ed:a0:
d0:da:21:9d:cd:e5:ff:d8:59:90:e5:0a:e7:32:e7:07:59:d7:
05:86:63:72:f5:30:5e:e7:bb:3c:6e:5a:a5:ac:03:d3:e6:b2:
51:e5:58:d4:b0:4e:d9:2f:9c:86:90:c1:06:6c:67:fb:f6:53:
5b:f3:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:44 2025 by rpki-client