Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d81bf7c-bb89-36d2-9779-43e94b7a4c3f.roa
File: 9d81bf7c-bb89-36d2-9779-43e94b7a4c3f.roa (raw, json)
Hash identifier: kv6nOna4QD50WukfLu8hnEeDk2G5+sQ6giFarktfZLc=
Subject key identifier: 88:AF:5D:CE:83:8C:E3:A5:A7:61:07:2E:E8:61:5E:5F:D3:D1:F4:3C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BFBAD74C4CC9081E8F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d81bf7c-bb89-36d2-9779-43e94b7a4c3f.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396569
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bf:ba:d7:4c:4c:c9:08:1e:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=73f6ccce-43d2-4cfd-800e-fd82e45fe927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:ed:02:6a:f4:18:8b:2e:a3:6a:a6:5c:65:
71:3f:00:fe:cf:98:5d:22:e0:dc:1c:db:16:27:e5:
58:78:ff:5f:98:12:4b:10:bb:8d:c7:1c:a7:90:ff:
10:f5:f8:ce:35:f8:ba:8d:a8:bf:68:1d:ed:49:2a:
8a:a3:3b:2a:7b:0a:48:2f:09:d4:b5:01:88:16:9c:
1a:1e:c1:30:2e:c2:1f:93:36:57:0a:7e:a8:6e:02:
93:78:7c:90:b2:3e:2e:e6:65:a6:ab:37:ed:4a:1d:
51:3e:b9:bf:58:37:f5:64:c9:d0:af:b2:87:80:66:
1f:34:84:67:df:b5:27:d3:5e:d1:3d:ef:4a:2e:c7:
65:90:b7:44:a3:0f:8f:a2:a1:ab:32:5b:92:fd:25:
c1:dd:22:b9:d4:3b:e6:1d:6c:60:b1:17:8b:9c:aa:
7b:b3:c1:de:c5:6d:e3:3e:c7:46:34:e2:5c:66:12:
68:5e:e0:44:95:c1:a5:08:4b:df:f2:0b:bb:79:69:
fc:fc:9e:2a:eb:a4:3c:9b:7c:b9:71:0a:57:ad:54:
64:dc:2b:c0:89:71:d4:61:33:93:8e:a0:51:95:c5:
39:f3:60:37:c8:8e:e6:b7:ce:eb:15:6c:fb:05:47:
49:15:45:dd:48:fc:cd:bc:db:35:ce:d1:cd:dc:4f:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:5D:CE:83:8C:E3:A5:A7:61:07:2E:E8:61:5E:5F:D3:D1:F4:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d81bf7c-bb89-36d2-9779-43e94b7a4c3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c8:2d:ff:22:47:4c:6c:bc:b9:22:8e:83:27:c4:0c:83:3a:
f2:df:79:55:a8:6f:d9:16:77:aa:ab:53:14:88:86:ad:fd:75:
ec:58:8f:37:b7:e5:ae:c2:21:71:2e:99:eb:5a:2a:25:b4:88:
2a:76:9a:97:4f:b3:ac:04:1f:c9:9a:33:a5:1b:a0:a1:d2:ae:
47:3a:a7:b3:12:c9:5e:b7:99:64:9a:ee:21:27:03:2a:f7:c6:
ef:0d:93:78:a4:16:d3:1f:6c:10:8c:3e:36:e3:9e:02:32:a8:
d4:c6:4d:7d:30:5e:69:28:dc:68:27:76:98:c1:a9:7f:dc:4e:
5e:bb:14:b3:41:85:81:51:9e:f9:4e:cd:99:98:31:0f:7c:b2:
8d:cd:13:f2:92:98:68:cc:64:be:04:4e:e0:bf:ef:f4:b8:08:
a7:52:7a:66:fd:de:9d:14:e4:05:ed:07:c1:bf:3e:04:ec:36:
a4:56:97:a5:b1:c0:9b:a4:51:31:34:c9:31:9b:82:41:a7:af:
c0:f0:8b:79:c2:92:c1:bb:ad:74:52:49:97:17:79:a0:99:ce:
3c:23:7b:51:fa:f5:17:77:e1:38:6f:0d:d6:5d:65:80:1c:d6:
f2:2f:4f:7a:ad:a8:40:4a:41:05:58:69:a4:3f:42:59:9c:8c:
f9:68:b2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:32 2025 by rpki-client