Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5ba93ba-56ca-3e91-910a-5e005d6416b6.roa
File: a5ba93ba-56ca-3e91-910a-5e005d6416b6.roa (raw, json)
Hash identifier: mQwLZNtaGV8SbhtsxD1Yliiv79om+xJS3+qGeC9lftU=
Subject key identifier: 1A:E5:15:6C:51:36:7B:E6:3E:01:6A:BE:DB:88:4D:B8:4E:37:D0:64
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C5458A3E69DB687C9D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5ba93ba-56ca-3e91-910a-5e005d6416b6.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 397205
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c5:45:8a:3e:69:db:68:7c:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=ea4f1281-f4ba-433d-a01b-09a9591e7ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:12:d8:4c:ef:3f:a5:ff:76:97:b8:6d:b1:
82:3b:3b:5d:3b:f6:1c:2c:b1:37:20:12:ab:56:07:
c3:03:24:9f:44:1f:18:d8:a7:3b:49:0c:46:98:46:
08:3e:a5:fa:30:66:8b:0c:af:4b:f3:c5:30:65:c9:
6d:63:cc:f6:87:7b:d8:47:89:b6:8e:12:cd:e6:f3:
a4:d9:ac:80:96:60:b2:2e:4b:ae:3e:a1:23:80:ea:
aa:ba:0c:08:a2:95:31:9e:86:a7:52:84:9c:ef:b0:
ab:41:7f:ae:cc:e7:4b:2c:d2:09:1d:3d:80:99:92:
70:7f:51:47:12:b6:63:8f:f1:be:cc:6d:df:b7:7d:
90:9c:33:e6:a3:d7:46:84:f9:85:48:2b:7a:c0:42:
04:ec:58:03:2f:17:4a:3f:6c:b1:d9:29:91:3c:6d:
66:8d:40:ff:15:a3:6c:e3:30:23:4f:2c:89:e7:ac:
7a:d7:ff:59:58:4b:6d:c4:bf:12:f0:af:29:72:68:
cf:10:64:2a:76:4b:59:a0:f9:5d:f2:1b:f3:a3:97:
d9:0f:d1:e5:bc:39:c3:04:ba:90:2d:51:8c:a4:a2:
ab:0c:be:4a:f3:90:af:ff:1e:a3:d3:34:c2:7b:42:
43:1f:76:da:f3:ca:d1:cb:41:6a:bc:88:64:cf:07:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E5:15:6C:51:36:7B:E6:3E:01:6A:BE:DB:88:4D:B8:4E:37:D0:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5ba93ba-56ca-3e91-910a-5e005d6416b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:56:38:f0:2b:b9:0c:ad:bc:e2:a7:9c:f7:25:db:14:a6:e4:
95:97:a9:17:27:2e:dd:52:c4:4e:48:ff:9d:4f:5e:f9:c0:78:
36:4d:fe:8e:30:74:54:0a:9b:a4:9c:f9:a3:64:aa:66:49:97:
d2:a9:d9:93:37:f5:ac:19:fa:f9:61:56:c5:23:cd:5f:85:fa:
6b:6a:5f:b8:75:9e:0e:5f:7b:b0:19:48:b8:82:5a:20:bf:7c:
d8:b6:cd:06:56:52:db:fc:94:c2:02:28:34:79:9a:5b:25:16:
a4:fb:c4:a7:6c:bb:17:3b:1d:eb:89:81:70:17:3f:93:55:2a:
5d:c9:39:8a:cb:7b:ba:7b:9b:98:32:e3:7f:65:5d:2e:de:da:
d7:dd:f3:b3:35:d0:d3:b1:64:1f:fe:17:64:47:ec:04:c0:db:
4d:3d:be:be:ac:66:94:d6:4c:42:17:65:d8:38:c5:3c:eb:a0:
31:49:5c:f7:63:94:a9:e9:34:0c:44:24:55:76:19:8f:0b:c0:
55:9d:9c:fb:55:1b:47:df:bb:4c:87:f9:38:58:96:da:d4:06:
d2:ce:84:f2:68:6e:66:5c:5f:40:1c:88:5e:3c:dd:18:61:54:
80:f5:36:06:2d:5f:d2:e9:1f:19:f6:b6:77:20:9e:b8:bc:c5:
1b:20:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:07 2025 by rpki-client