Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa
File: b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa (raw, json)
Hash identifier: ZhFMTqXzfpG3tHkiLarWLjghaByPjR0koTmLi1pYbcs=
Subject key identifier: F9:72:53:80:8C:96:2F:9E:83:E5:57:BC:AA:04:CE:7C:47:83:C7:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BFE7D3237F024954F020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396604
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bf:e7:d3:23:7f:02:49:54:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=380a0a77-41a0-461d-80a2-3e1959c63b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:96:e6:1d:f8:69:ec:bb:e2:de:1e:c8:19:
df:c0:a9:81:89:1d:95:b3:db:3b:41:81:fe:bb:45:
93:ba:de:84:3c:98:7d:65:38:b8:00:9a:cc:9a:48:
ab:95:d2:88:06:1a:43:90:aa:82:36:f0:6b:8d:da:
a0:ca:4e:b3:fb:5d:e6:19:57:48:e2:08:bf:02:0d:
05:5d:71:27:5f:13:4f:46:47:e2:96:03:bd:a8:9c:
10:cf:f8:38:ff:cc:2e:a7:71:75:24:48:46:93:64:
fd:a2:fc:3a:2f:a2:ec:be:eb:5e:a2:e7:07:38:96:
1c:df:2c:0e:ea:27:e5:06:4a:27:fe:96:4b:78:ef:
c8:f4:97:9f:e7:53:69:3f:c6:9f:30:30:49:f1:e5:
c9:ea:15:f9:cd:29:da:c0:9a:ff:c9:62:ee:93:d9:
97:9a:18:81:29:84:4e:34:9c:2d:8e:94:5c:4e:19:
9f:54:7e:8f:84:67:62:f6:42:8c:14:a9:c9:c5:63:
06:a1:9a:43:85:30:f7:da:2f:76:21:60:a2:17:ce:
76:6e:e0:d4:34:75:32:2b:a8:63:6d:c8:46:1f:5b:
0a:9d:aa:c2:91:ef:1d:3f:43:de:33:f1:e7:9a:f0:
4d:ee:e8:21:e7:77:34:2a:fa:d4:aa:4f:e9:eb:c2:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:72:53:80:8C:96:2F:9E:83:E5:57:BC:AA:04:CE:7C:47:83:C7:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1bacd7c-d946-3b6f-a95c-5a913b033afe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:5a:31:0e:da:e2:3f:e6:f0:c6:37:29:58:e0:61:2e:19:94:
18:9d:29:95:22:e0:e5:af:92:78:dc:a8:4d:98:1d:1c:5d:27:
b5:2d:65:7d:d7:e6:6a:e0:2c:10:96:aa:8d:7f:65:69:02:54:
bc:55:5b:d3:ae:b0:a4:97:97:85:8f:a9:15:9b:05:ba:3f:c5:
20:b8:e1:06:04:48:07:f9:da:8a:52:8e:2b:71:eb:56:91:ea:
db:25:2e:ee:05:40:af:e6:3a:35:6a:f2:2a:73:11:d8:f2:81:
45:c1:1c:90:eb:60:c7:c3:fc:23:68:9f:b0:3a:2b:18:62:fd:
fa:dc:82:f6:7e:bc:c3:9d:5d:99:b6:cf:c4:a7:b3:78:e7:c3:
5f:12:3d:22:d4:4e:b8:f7:65:57:1c:e5:bc:a2:a9:b0:cb:24:
e3:e4:96:09:01:6c:20:7d:fc:d9:a8:97:c7:fc:3a:45:54:9a:
35:2a:8c:8f:46:b7:3d:af:38:93:5e:49:f1:15:bf:c0:53:a0:
a5:82:f2:5f:fc:b5:60:72:0b:af:26:19:4a:d3:2b:82:2e:7b:
0b:a6:af:67:49:dd:37:00:2a:6d:a2:92:3d:81:e8:8f:27:80:
bc:5f:99:9d:b1:1e:81:43:10:93:ea:89:3d:2e:33:0d:8f:1f:
a6:e1:0d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:40 2025 by rpki-client