Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0facfd3-4ff9-333d-a203-8ce85a26b238.roa
File: b0facfd3-4ff9-333d-a203-8ce85a26b238.roa (raw, json)
Hash identifier: sP6K9Xw3qkXEVM9Cs/XTbf+YG75dqOMf5KuGWzihvf8=
Subject key identifier: CA:A7:0A:35:A7:98:B6:4C:AC:C4:1D:75:FA:2D:4F:83:21:96:04:39
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C17B28730FF888C62240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0facfd3-4ff9-333d-a203-8ce85a26b238.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396605
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c1:7b:28:73:0f:f8:88:c6:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=9a4ccdb2-5e95-4346-b16b-1fee6949594f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:d5:81:95:7f:cb:79:93:d6:5e:a5:0c:89:
64:8e:40:d6:9b:d7:3d:d5:a7:c3:be:85:7e:85:bd:
13:b1:00:33:69:0a:e2:67:be:f3:7a:fd:64:19:5d:
80:99:bc:97:59:64:d5:d2:11:ca:02:93:1f:dd:2e:
a9:ca:78:4c:8b:8b:fd:9f:2f:53:b6:36:02:e2:bb:
96:1c:f2:37:d2:e6:cf:29:79:05:5a:41:15:96:c6:
1b:95:be:09:8d:59:bb:75:b7:bd:91:ec:d9:f4:56:
65:f9:5e:ad:30:92:a7:1a:6b:38:1a:0f:00:67:03:
f0:e3:6f:d0:a6:35:31:fe:a3:3a:aa:62:c8:73:ab:
59:cc:7e:a6:fa:00:56:73:5d:e7:8e:0c:8c:5a:95:
28:9b:46:ac:80:45:6e:49:ea:cc:11:64:77:26:2e:
c4:09:b8:07:2b:35:89:31:91:27:e7:6f:57:e0:11:
fe:fc:bf:d9:96:1a:92:86:29:d7:e6:7b:b0:6e:7e:
d4:29:0a:49:b0:e5:00:19:4c:6d:22:61:f8:30:5a:
9b:ed:9d:fa:26:22:81:77:77:3e:1d:d1:0e:b8:f7:
fa:26:45:c4:a0:96:71:00:fe:c4:7b:19:5c:bf:68:
d1:12:2d:10:74:c8:4d:54:3e:cc:e2:68:f1:c2:b0:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A7:0A:35:A7:98:B6:4C:AC:C4:1D:75:FA:2D:4F:83:21:96:04:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0facfd3-4ff9-333d-a203-8ce85a26b238.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:ec:5f:0d:2b:84:d0:0d:2b:c7:2a:fb:e2:cf:6c:f3:cd:9d:
35:ac:1e:bf:ea:36:4c:d6:0a:20:4c:e3:e8:c1:7d:c1:2e:54:
e7:b7:c6:7d:99:98:18:80:c6:c3:98:e6:08:99:56:98:34:06:
6e:ce:d0:be:21:29:6a:f0:37:5d:63:b4:97:04:d5:2c:d5:54:
d4:3f:5c:79:f3:8a:30:80:42:ea:c5:a6:39:f2:09:85:66:0c:
6a:7c:c6:db:97:b3:af:b4:ae:2a:b6:70:ac:c4:59:dd:d2:9d:
69:e2:04:6c:90:b9:8e:cc:b4:2b:4c:f0:6c:5e:5a:39:cd:fe:
87:a0:d2:6d:f6:dc:88:bf:6d:f7:37:ce:1e:43:40:b1:77:f3:
a2:19:3a:f8:1e:00:1a:83:12:8c:49:96:bb:18:a3:cd:20:f0:
4c:5e:1b:57:33:8a:8c:3c:c2:e4:9e:79:ab:a5:1e:99:d7:ed:
33:b3:96:63:9d:8d:84:c2:3f:fe:4b:4c:63:1c:c5:25:08:58:
3e:07:f1:b2:58:15:78:7d:d6:c3:64:c1:5b:c5:f6:62:36:f6:
39:bc:38:16:82:2b:6b:2a:87:72:eb:b2:cb:a1:d2:f2:7b:f9:
cd:84:75:fe:0d:b6:9f:1d:9f:ee:6c:66:99:26:31:57:cb:e5:
e8:db:0a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:08 2025 by rpki-client