Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad60cd64-d042-3497-b6e4-3c51ae7587e8.roa
File: ad60cd64-d042-3497-b6e4-3c51ae7587e8.roa (raw, json)
Hash identifier: MJmDeDd3+/JLKS5OWkIH7WyHbW/vUf7dGBtmyE9t/2Q=
Subject key identifier: 6A:58:C3:E7:69:0B:A4:33:42:98:17:AC:4B:4A:CD:3C:A4:3E:57:ED
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C39BFC5EFE100D25B380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad60cd64-d042-3497-b6e4-3c51ae7587e8.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396549
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c3:9b:fc:5e:fe:10:0d:25:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=f4dc2db6-60e6-46e9-9647-f22809ef91b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:70:7b:04:1c:4d:1d:b1:43:fc:dc:43:24:
13:4a:2d:15:e5:1a:17:4e:ec:78:04:65:cb:fd:95:
d6:ad:e7:6d:d2:3d:0d:67:ad:95:53:6c:0d:07:cb:
b7:62:24:fb:43:ee:9d:82:ef:be:b3:ce:bc:17:9e:
7f:0d:4d:1f:3b:fd:51:98:3a:45:87:e7:2b:28:67:
47:cc:87:2f:dd:f1:b7:81:4c:d6:ac:42:49:fe:5c:
b8:3b:8b:ed:0a:37:e1:88:cb:88:41:b4:a9:7c:52:
f1:92:1a:e9:71:1a:33:bd:83:3e:c1:ad:3b:a1:dc:
bd:5c:d1:89:8a:9a:42:16:c9:28:fa:fe:6f:90:50:
48:2d:61:e3:94:fa:38:d3:6b:2b:91:f8:63:f8:86:
8f:f7:08:25:2c:1b:99:dd:9a:c3:56:af:a8:6a:ec:
4f:61:fa:64:44:aa:5b:57:ba:d1:3a:64:5a:b8:10:
5f:d8:f5:e9:1e:fa:80:54:a9:87:e8:65:fa:bb:1e:
48:21:30:e7:77:90:9d:05:81:30:5b:9d:6f:c7:02:
e8:a5:ff:65:a9:bf:3b:82:eb:27:4d:a0:7e:db:8b:
57:b5:94:75:bb:dc:a0:e1:cc:5c:83:ef:0b:af:97:
dd:f0:6f:ce:e5:fe:35:11:47:95:e2:f9:8c:58:2b:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:58:C3:E7:69:0B:A4:33:42:98:17:AC:4B:4A:CD:3C:A4:3E:57:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad60cd64-d042-3497-b6e4-3c51ae7587e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:88:1d:e7:df:55:43:31:a5:b4:a3:c2:34:68:1e:44:c6:b8:
3b:fb:57:27:59:ea:b2:e5:29:2c:c6:bd:b8:bd:48:a3:13:3d:
9a:53:18:8a:13:e9:49:71:4c:3a:97:9d:2d:9c:7b:f6:73:db:
1e:b7:ac:b7:aa:f7:f8:ec:7e:c3:78:6f:73:28:69:3a:d5:9d:
74:e2:79:0f:2d:8d:c5:d6:95:7f:8a:8f:ea:3d:7c:5d:63:ce:
a4:57:33:a0:7e:88:34:51:b8:d1:23:b6:98:5d:c3:d1:36:5c:
58:00:a8:cf:14:2a:10:c7:95:9e:9a:11:36:23:84:c4:9a:23:
b5:0c:bb:1a:4e:38:37:01:f8:37:0e:9b:db:09:cb:17:62:cf:
1e:eb:73:17:8b:e1:64:2f:4a:d4:3a:24:98:a0:85:17:69:f2:
aa:02:9f:fe:31:44:b1:00:23:50:0c:bf:42:1f:cb:fa:7d:76:
30:5f:c1:75:8d:da:ac:0e:ed:46:78:0f:88:5f:47:0b:60:96:
dd:c5:4a:3e:78:7d:b2:6e:74:d3:80:ab:c6:b1:23:91:09:c6:
cf:5b:c3:56:64:4a:28:44:6f:0e:60:b9:86:91:ea:ef:06:2d:
43:63:c7:8e:2b:b1:de:07:9d:3f:72:37:28:6b:19:c8:da:d0:
9a:81:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:17:05 2025 by rpki-client