Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5c7b0ca-6aa5-342c-9575-b35b1c869492.roa
File: a5c7b0ca-6aa5-342c-9575-b35b1c869492.roa (raw, json)
Hash identifier: 1otRx7YkmHV0fKVj2jgxlz7xsszl5inwpoVIpp0nXwI=
Subject key identifier: 36:2C:7F:F1:17:05:09:AA:F3:CE:4E:8E:E2:61:28:9C:EB:4E:34:25
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848CB08A329DDA0CE04574DCB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5c7b0ca-6aa5-342c-9575-b35b1c869492.roa
Signing time: Thu 06 Feb 2025 13:33:23 +0000
ROA not before: Thu 06 Feb 2025 13:33:23 +0000
ROA not after: Wed 07 May 2025 12:33:23 +0000
asID: 396616
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:08:a3:29:dd:a0:ce:04:57:4d:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 6 13:33:23 2025 GMT
Not After : May 7 12:33:23 2025 GMT
Subject: CN=ce39fc0a-cfe8-46e7-a095-b3e93d19fe31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:2e:fd:b1:8c:4d:85:01:4e:52:1b:2f:bd:
35:fe:d2:88:1e:6c:d5:b0:95:f7:40:e3:df:89:35:
e3:5a:b4:a3:ec:4e:81:33:fa:0c:76:00:a0:bc:b2:
ab:d6:5d:52:41:7f:81:ca:70:5b:3d:33:a4:15:de:
4c:39:7d:d5:f3:1d:a6:0c:7f:2c:0e:aa:fb:78:71:
81:94:c0:8b:9e:4e:03:22:63:a9:aa:2f:42:c5:72:
44:ae:cc:30:c0:f8:f6:5c:76:e2:f5:7a:58:12:50:
34:a6:09:fe:44:25:ee:e8:0b:7a:a7:38:a4:36:85:
b3:86:a5:f7:24:40:02:90:5c:70:ab:1a:df:9d:18:
77:30:80:51:f5:05:b5:f9:f4:2b:a0:18:76:a6:91:
bd:9e:2c:05:6c:f8:d0:c9:ec:d0:01:b6:bb:6f:11:
45:1d:81:af:a3:db:32:1f:ef:42:7e:bd:a4:da:97:
a1:27:23:a7:90:fc:3c:97:cd:e9:41:25:16:69:e4:
20:37:f5:51:60:25:5c:4a:5d:cc:3d:bf:85:32:07:
08:8c:e4:ae:a2:3d:fd:fd:b9:87:23:c2:93:7c:fc:
07:ce:f3:91:02:28:ea:5f:12:26:7c:24:c6:77:3a:
be:51:2f:1b:5f:89:1a:71:14:69:ee:35:85:af:60:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2C:7F:F1:17:05:09:AA:F3:CE:4E:8E:E2:61:28:9C:EB:4E:34:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5c7b0ca-6aa5-342c-9575-b35b1c869492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:5e:66:48:97:9e:12:30:a7:bb:7b:44:30:9d:3a:6e:89:1a:
f0:9a:c6:03:24:1f:b5:50:a4:86:e0:ee:c4:fa:fa:28:37:d2:
62:15:db:45:c3:47:e4:b8:b7:35:ab:31:f1:e5:52:1e:88:ea:
03:31:30:c6:e1:16:99:be:7e:97:28:a5:ad:88:77:6e:e1:09:
86:38:77:85:8a:73:22:dd:c8:98:af:32:bf:8f:8b:d3:50:7c:
ed:5b:a0:71:73:3a:5d:24:b7:98:8c:e5:bd:64:d3:84:9c:43:
a4:04:48:75:80:4a:b9:88:2f:26:50:31:f0:77:5c:b8:43:88:
04:11:d8:9e:e5:00:d3:b1:3a:76:ed:70:0a:60:4b:0e:65:b9:
0c:b1:f6:4e:d5:3b:dd:ed:6f:cb:d3:77:b3:43:ce:64:ca:6c:
25:dc:6b:97:ff:6f:59:09:d0:5d:e5:d4:f9:c4:d6:48:46:0a:
9c:29:ae:f4:23:78:aa:47:f5:ec:79:36:78:af:fa:c2:7d:35:
f6:dd:d8:91:52:9e:f9:cf:74:0d:e4:fc:6d:4e:3b:29:83:0f:
09:53:b3:7f:23:5e:14:cd:40:fa:f1:0a:85:2a:52:93:00:d8:
44:f4:22:93:11:27:3d:62:3b:c7:ae:51:21:9d:01:41:e3:52:
6d:65:d2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:26 2025 by rpki-client