Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbb6ef0c-7f4b-3121-a668-30aee7473763.roa
File: bbb6ef0c-7f4b-3121-a668-30aee7473763.roa (raw, json)
Hash identifier: ssEXVO8kC58d9+Wyzed8fBugWpNeGsOPT7TwewxwWSA=
Subject key identifier: DB:1E:35:B6:C1:7C:3A:AB:E7:8B:7F:F0:3B:C8:4A:21:50:66:F2:FD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830B9FA805F4019E37C7040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbb6ef0c-7f4b-3121-a668-30aee7473763.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 397197
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b9:fa:80:5f:40:19:e3:7c:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=1b418087-5b7a-497c-8b8d-76b07c828b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:78:37:fd:12:84:87:5a:22:fc:84:68:20:
9f:69:31:1d:ec:ac:fc:87:58:72:b0:25:58:3f:ec:
9b:81:aa:c9:ad:9a:e6:fc:3a:5a:36:8a:a4:6a:96:
71:ac:fa:4e:c7:e6:e5:5b:39:98:11:78:4a:80:1f:
4f:eb:e4:95:2b:54:29:e0:b7:c0:e0:71:15:08:79:
0e:aa:3f:19:d8:30:9a:70:62:3b:73:7f:08:1f:2c:
c7:ae:0b:d9:f5:e3:28:9c:30:a6:de:bc:a9:96:f2:
db:9c:b2:2e:6f:69:93:c9:ea:3a:b4:bf:81:ae:d5:
4b:88:e5:9a:b1:c9:ba:ec:b7:e5:d1:ba:40:0a:72:
23:94:a8:45:68:43:14:e6:56:96:71:a3:88:d5:de:
e5:c1:0e:d8:b9:2a:84:7d:76:63:5e:31:b8:3e:8d:
06:b1:83:af:20:b9:26:5d:e2:bc:1e:3d:77:d6:c4:
de:86:a3:96:8d:8c:9b:16:6d:25:ee:08:60:8d:a9:
00:b5:78:0f:1d:f8:8a:a7:e8:f2:4e:61:66:af:b5:
7f:fc:c1:25:33:67:63:3b:4c:7f:45:5f:23:62:aa:
e5:c1:43:c5:8e:29:7e:cc:82:72:9b:c3:0f:d4:06:
47:12:84:51:d2:5d:21:53:89:5b:ac:fe:2d:37:bb:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:35:B6:C1:7C:3A:AB:E7:8B:7F:F0:3B:C8:4A:21:50:66:F2:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbb6ef0c-7f4b-3121-a668-30aee7473763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:93:83:5b:2f:dc:a0:56:bc:af:59:9b:51:d6:be:b9:20:8b:
b9:73:c3:0c:79:fb:48:ea:61:61:9e:f7:cd:9e:a6:84:99:ae:
cd:a8:5c:78:93:00:6f:24:aa:7b:12:cb:70:04:f6:2d:3d:51:
ba:fb:0b:81:45:73:1c:ef:77:59:41:27:ee:0d:fc:5d:e7:41:
3f:2d:5d:a2:e7:f9:b6:47:01:17:f1:f7:e8:81:76:15:f5:44:
67:3a:3a:5a:32:7a:54:db:a1:6a:f7:1a:93:70:3a:3b:51:b3:
c8:0f:56:41:02:29:14:6c:91:0a:0a:2e:ea:83:f2:99:3a:ba:
52:81:68:e5:dc:7d:82:5b:18:c6:2b:3d:dd:3e:f8:d6:41:64:
31:3c:e2:a8:73:ab:9c:ea:7f:4c:f7:9d:9a:f2:ab:c0:c0:28:
d0:d0:42:21:3d:44:e8:6f:98:3b:0a:5d:bd:b2:03:2f:81:71:
95:b4:20:15:27:43:c0:c9:e9:91:f3:42:a2:ef:61:38:c8:91:
e4:ad:d2:1e:4b:37:8e:7f:5d:fb:00:cd:05:ac:75:ca:3b:c8:
75:de:9c:df:6a:97:f4:09:b9:bb:ed:ce:b1:1a:f6:21:54:5b:
53:d8:72:84:4b:fd:89:5e:a0:5c:d2:41:f5:df:d9:ef:c7:6b:
25:44:01:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:53 2025 by rpki-client