Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8de5fd1-351b-357a-81c3-4442408b1a9c.roa
File: b8de5fd1-351b-357a-81c3-4442408b1a9c.roa (raw, json)
Hash identifier: OdEQJZZm+mL4ccX4ZNkudfwZG/q3PyABkelnVNyy2No=
Subject key identifier: B7:AC:EB:F6:AE:30:EF:70:2D:15:7C:B5:CB:2C:F4:19:3B:3F:3E:1D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848CB08A2978169B2BC24B9EC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8de5fd1-351b-357a-81c3-4442408b1a9c.roa
Signing time: Thu 06 Feb 2025 13:33:23 +0000
ROA not before: Thu 06 Feb 2025 13:33:23 +0000
ROA not after: Wed 07 May 2025 12:33:23 +0000
asID: 36624
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:08:a2:97:81:69:b2:bc:24:b9:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 6 13:33:23 2025 GMT
Not After : May 7 12:33:23 2025 GMT
Subject: CN=669dcb6e-a0e7-4570-a2e6-748ca67a71a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:a8:22:42:be:61:ff:40:fa:3f:8e:00:12:
35:9e:bb:02:f9:38:40:82:0f:d4:7e:8a:70:46:7d:
2f:aa:fe:b2:c8:02:86:a7:b4:5c:f3:20:2c:ec:aa:
52:92:9a:96:55:2b:ec:66:bf:79:12:39:01:8d:dc:
fc:e7:a1:70:f8:be:37:c9:54:e9:8c:a0:27:bf:e9:
96:c5:9b:ed:f6:b6:fd:dc:9b:86:da:ae:a6:74:19:
c5:db:fa:f5:5d:f9:f9:43:4a:dd:d9:4e:b1:60:46:
2c:52:ae:b8:48:86:e9:ab:15:53:b7:66:14:4f:93:
af:3a:12:03:07:1f:7d:b1:2b:58:ee:d6:cf:43:9e:
ad:94:3c:39:21:68:fb:e3:0a:ec:3d:42:66:1b:e3:
a4:82:7e:f5:ba:2c:e3:27:98:8b:7c:27:59:33:94:
4a:7e:82:f9:09:2a:62:50:e0:20:9e:b4:71:44:20:
ed:a6:52:6d:2f:a2:1d:17:3f:a5:94:63:b9:48:89:
6a:aa:71:bb:0e:ce:be:d8:09:39:02:b9:6b:93:a7:
4b:1b:c8:25:c2:ef:2a:ae:b6:ce:ad:95:5c:93:32:
ab:d5:bf:ee:34:8b:70:ec:14:48:9d:d1:4b:5b:ef:
3d:78:cf:cc:54:78:a4:0d:72:53:1b:15:b1:e4:e4:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AC:EB:F6:AE:30:EF:70:2D:15:7C:B5:CB:2C:F4:19:3B:3F:3E:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8de5fd1-351b-357a-81c3-4442408b1a9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:d9:93:41:fb:85:a9:03:be:be:36:ce:a7:c7:41:29:2c:86:
c3:2f:4e:30:35:2a:ff:0c:ff:eb:b2:09:00:06:27:cd:23:e5:
a5:dd:d2:fd:22:43:cd:c8:ab:27:11:8e:f9:bb:71:1d:de:e2:
e9:ad:17:17:0c:e0:55:4e:f5:20:76:23:9d:16:4e:a4:5c:79:
b1:90:2b:43:4f:c5:98:5b:f3:77:11:2c:da:9f:7f:55:39:83:
17:31:40:da:1b:02:e8:e1:ff:2d:ab:79:b3:2e:6a:eb:5f:8a:
9a:69:02:98:63:0e:65:04:c2:31:57:14:88:86:06:33:f8:35:
67:84:e6:6d:25:a0:c2:e7:91:bf:3a:02:48:20:6a:3e:ea:f3:
29:24:fc:6f:46:8c:92:1b:e7:8e:fd:3e:12:dd:ba:d4:44:1d:
26:13:17:af:fe:94:31:27:fa:e8:40:a5:cf:19:a5:b5:a9:c5:
bb:ff:e0:97:58:23:89:3a:cf:2f:55:da:35:cb:5c:a8:eb:3b:
7f:9b:f8:fc:57:f7:9d:79:7e:fa:af:63:0f:28:0c:c1:92:a8:
ff:56:6d:9b:68:9a:85:42:f5:a9:03:fb:1f:d1:9b:e5:1f:ad:
48:f8:7b:1d:8f:ce:3c:fc:92:1c:60:f5:fb:69:85:a3:a3:7a:
79:97:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:13 2025 by rpki-client