Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3ccd0c-29a1-3e77-9ddf-f812180997f1.roa
File: aa3ccd0c-29a1-3e77-9ddf-f812180997f1.roa (raw, json)
Hash identifier: DhboWWLyOsII9SG689+j7wL19sW0lHzkyDjYVMv5dFc=
Subject key identifier: D4:85:86:86:A2:F1:4A:DF:AA:68:D9:5E:5F:A0:B8:B8:BC:D8:B8:5F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F5899C85B6513FF9A1AF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3ccd0c-29a1-3e77-9ddf-f812180997f1.roa
Signing time: Thu 23 Jan 2025 13:38:23 +0000
ROA not before: Thu 23 Jan 2025 13:38:23 +0000
ROA not after: Wed 23 Apr 2025 12:38:23 +0000
asID: 396566
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:89:9c:85:b6:51:3f:f9:a1:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:23 2025 GMT
Not After : Apr 23 12:38:23 2025 GMT
Subject: CN=831dbd69-6ab8-456c-8b23-a7be7dcef0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:59:62:f7:da:02:d7:e0:1d:4d:f9:67:d1:
63:56:eb:bc:f3:9c:03:d7:4b:94:90:cb:ce:0c:e9:
a4:cd:e3:74:0d:e3:37:bd:d9:31:01:09:e0:8f:c0:
7b:5d:1c:a4:e0:cd:03:ec:ec:18:c8:c7:7b:36:f5:
c7:95:21:20:82:be:dc:b8:a3:68:69:cc:e1:08:92:
b8:09:be:39:40:5e:0b:73:20:3b:84:32:18:f1:04:
74:53:5e:7b:9f:22:1e:81:4b:a4:fc:d0:f9:2e:ad:
95:57:e8:5d:91:82:32:55:aa:8e:c8:8c:9c:ff:0a:
8a:09:3e:e9:78:0a:85:57:ec:f0:5b:0c:2a:9b:cb:
66:03:fa:65:d8:7a:13:c4:95:2d:1e:ed:ac:bb:b4:
52:27:fe:46:54:3b:99:ca:a8:2e:60:f2:e2:25:02:
98:18:4d:2c:07:42:ef:cb:48:ea:b1:51:6b:e4:52:
ad:e9:43:b1:23:59:b8:6c:d0:13:0e:d5:42:6c:f0:
6c:70:13:72:f1:ee:17:b4:ed:be:e4:4e:93:7f:ed:
a9:56:84:5b:a7:fa:09:b6:26:4c:3a:d3:8e:94:9a:
4e:73:6b:ba:00:c0:f3:9a:01:ff:02:5c:9e:02:86:
f4:bb:c2:a3:f8:5c:90:79:17:ac:00:82:db:22:45:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:86:86:A2:F1:4A:DF:AA:68:D9:5E:5F:A0:B8:B8:BC:D8:B8:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3ccd0c-29a1-3e77-9ddf-f812180997f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:e4:80:bc:84:a7:d3:e5:44:b0:06:b4:b3:94:9b:23:46:64:
64:98:e7:30:5b:9a:ef:70:f0:83:5b:87:75:a0:44:81:b7:87:
67:66:42:cf:89:0f:0d:86:67:29:18:d0:89:75:9f:22:97:65:
34:3e:41:05:78:d1:26:61:d8:bd:f6:bc:1a:1c:94:60:af:bc:
77:97:28:7c:a5:f6:50:0c:10:4b:6b:22:32:c8:56:fa:f6:0b:
60:8f:81:3b:e7:a8:ea:c0:dd:b0:b9:f7:7d:cf:c6:4c:d2:1e:
0a:3f:97:ef:6d:5a:1d:64:f2:79:77:d1:31:f3:b9:05:93:4a:
f7:6a:ac:8f:3b:19:83:38:72:62:b9:36:4b:1c:92:ea:36:1f:
3f:4c:40:3b:82:8e:4f:8e:3c:32:8c:59:da:50:96:27:11:82:
8b:9e:d1:8b:a1:ce:66:67:57:d8:69:ae:8d:b4:fe:12:45:24:
f1:b6:e2:9a:60:f8:5f:f4:09:bb:95:a2:8d:b7:9e:fc:20:c4:
ad:26:2c:e3:0a:29:c3:5c:13:46:61:f5:89:a0:c1:7f:68:95:
f4:4c:17:b6:cf:7f:b2:ee:dc:b1:e2:18:91:eb:8f:a5:0f:5e:
98:5b:57:83:63:f0:2c:d3:20:50:6a:de:a3:0f:a5:b4:0e:bb:
db:58:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:28 2025 by rpki-client