Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa
File: b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa (raw, json)
Hash identifier: PyCLLxKZ5RvrNHQZ3wUOgc7yC4OFzbt3LLl7I/FvTQo=
Subject key identifier: F8:CD:40:3C:55:65:27:81:35:23:B9:DC:D9:BA:01:A4:A2:A5:47:9E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0EBEC30D5C6A8C74AFF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396566
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:eb:ec:30:d5:c6:a8:c7:4a:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=36a3712e-94d9-4c21-bada-0e45b3ff1751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:d9:4d:0e:24:24:52:d7:be:87:4b:42:96:
8f:4b:4f:12:84:93:55:0f:1d:cd:13:8d:a0:0a:82:
f1:73:f1:32:92:63:49:60:ed:38:bb:76:82:2f:9b:
85:03:c7:23:59:c7:74:6d:c2:ca:ab:fa:84:4c:30:
66:7b:86:68:b1:23:77:f0:4d:35:fd:26:7f:e2:9a:
e8:bb:fe:2a:77:85:fb:4f:85:b7:a6:41:bf:55:a3:
48:d0:f2:b0:b4:1f:fd:55:56:33:a7:bc:3a:d7:bb:
10:8f:df:d0:ac:13:5d:d7:89:8b:b2:f7:41:46:14:
7b:1e:94:c7:7a:98:d3:c6:1a:cc:d5:79:ed:7c:86:
be:d0:8e:0a:98:c2:39:03:eb:6f:ac:07:42:d8:31:
bc:ac:c5:a7:20:a6:cf:ba:4a:65:8e:6e:1a:8d:0c:
ea:ea:39:e2:5f:a2:ce:6d:57:2f:2f:b3:39:0e:8e:
69:a7:60:56:a0:aa:c1:4f:8c:07:90:f9:1b:0c:33:
4a:6c:f7:8e:fc:d8:c5:f4:83:5b:fc:9e:02:d0:b9:
32:79:a1:04:a5:39:a6:07:5d:61:4e:34:93:bb:a8:
86:01:81:43:d3:be:8b:7c:35:25:97:fc:d0:4e:78:
d6:77:43:ab:a0:9a:f6:a5:a8:5d:10:dc:26:c5:e8:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:40:3C:55:65:27:81:35:23:B9:DC:D9:BA:01:A4:A2:A5:47:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e0:b8:1c:b6:26:82:0e:75:25:7b:08:6b:d3:f0:7c:8e:23:
53:f8:45:cd:a0:b6:40:49:1e:20:19:46:fa:25:db:9e:9b:18:
9e:af:44:96:3e:ab:09:bf:ea:34:a7:91:24:62:0c:58:da:36:
13:ab:d9:19:a3:55:c1:7f:49:45:34:6d:f0:53:70:0e:11:db:
4b:48:5c:e4:7c:43:ba:61:54:73:b4:21:dc:76:da:31:45:17:
e7:cb:86:2f:be:ac:fc:47:56:a7:a1:1b:eb:b8:5a:16:bc:a6:
55:e7:64:af:cd:db:32:65:71:d8:17:65:a2:ae:29:07:78:16:
e2:f5:19:42:64:39:16:85:c3:3b:f0:22:28:38:eb:49:66:8a:
f1:2a:eb:71:28:81:bd:63:bc:d8:55:c0:f0:68:3e:08:88:cb:
5b:3c:ab:a1:5a:dd:2e:bd:6b:03:fe:fc:eb:b4:9c:fb:fc:66:
4b:9c:08:43:f8:36:b5:4a:95:6c:77:80:36:aa:b5:c7:ec:76:
f2:bf:2c:a8:95:07:c9:63:00:5b:4d:c4:6b:1a:71:d8:27:6a:
f1:8b:36:6c:1d:48:66:0a:75:af:76:b1:fc:73:a1:a1:81:cd:
57:07:9a:50:8a:29:03:af:6e:4a:7d:79:de:b6:ac:98:84:ea:
3b:59:0d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:20 2025 by rpki-client