Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be035ec1-30f3-3dbe-9d86-56d26a71ddd2.roa
File: be035ec1-30f3-3dbe-9d86-56d26a71ddd2.roa (raw, json)
Hash identifier: U4w5wVPzY7AseOeebEBo5G0zr44D4qeiY/6J4JwEEw4=
Subject key identifier: DE:E9:93:F0:54:84:34:61:18:F0:BE:0F:95:D0:BF:92:EE:F8:4B:B4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C55541B785D502717200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be035ec1-30f3-3dbe-9d86-56d26a71ddd2.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396559
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c5:55:41:b7:85:d5:02:71:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=790e72da-4436-47ce-9e7d-b35ca9cef6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:b0:a4:dd:26:40:b3:5f:84:65:fb:db:07:
29:12:ab:58:fa:6a:5e:94:df:e5:0a:a1:9f:41:af:
46:68:b3:b8:1d:0a:04:f7:ac:a3:f4:77:61:69:6d:
bc:eb:53:89:cd:88:77:f5:00:1b:f4:a3:fb:64:46:
3c:35:f1:80:a6:cc:e3:fd:aa:44:c3:b7:ed:3a:dc:
ce:e6:f2:91:ba:b5:ee:5c:ad:66:de:e3:ce:2f:65:
da:d4:1a:7e:6a:73:dd:26:6b:ff:0b:2b:f1:2d:25:
60:40:9e:db:a8:b9:99:3a:ba:89:78:ee:ac:a7:ab:
aa:57:83:22:7a:c1:87:c8:f5:40:8a:93:e1:f9:a3:
ce:43:20:2a:af:89:51:d4:23:e8:19:e4:42:f2:67:
80:6f:2e:1b:f3:60:f9:ea:e3:30:45:48:a5:92:1a:
b9:1b:01:25:b5:20:b8:ce:15:96:8f:be:b1:7f:f1:
92:7b:cf:c2:db:a2:bc:4f:fd:be:2a:72:63:cc:a0:
ad:1a:3a:63:a0:a9:7d:cc:99:2b:d8:d7:e7:06:53:
6b:d9:bd:d4:2b:0a:ae:f2:1f:58:63:39:ec:3f:55:
c3:0d:21:f7:79:3d:6a:b1:e1:6f:89:73:8c:49:77:
47:7d:2d:36:19:69:78:6b:53:35:20:26:46:4d:59:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E9:93:F0:54:84:34:61:18:F0:BE:0F:95:D0:BF:92:EE:F8:4B:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be035ec1-30f3-3dbe-9d86-56d26a71ddd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:cd:3e:a0:c4:1b:05:bd:9f:2a:92:71:12:7f:57:70:db:4e:
02:d1:32:69:7a:5b:58:e8:48:50:32:3b:ec:6d:d1:d7:80:a7:
b6:d3:63:9d:53:64:37:40:6f:03:df:b5:5b:e1:17:ff:98:19:
ec:3f:98:ee:bd:72:8e:bf:9a:2c:99:3f:c6:00:b3:c8:ae:aa:
56:45:b4:eb:ef:6e:bb:d2:b1:ae:81:29:23:da:58:8c:eb:07:
cd:05:bb:89:e6:f9:48:61:7c:5b:8f:c2:fc:53:1a:25:16:32:
68:41:5b:44:c3:b3:48:6f:00:2b:20:55:43:fb:4d:d1:a8:98:
93:8d:41:51:85:30:e9:68:e2:81:87:85:9e:0e:9d:53:66:18:
17:54:26:fa:fb:30:52:a9:4a:ac:b7:93:f0:93:43:31:fa:06:
51:39:f5:d7:80:52:c0:f1:9d:be:e7:fc:66:0b:7d:1a:90:7d:
fe:b9:2d:82:d1:74:b6:99:a6:10:b7:81:b0:62:37:6b:40:d1:
cd:4e:f2:b3:49:7e:2e:8f:e8:9e:2c:8b:5d:b9:24:bf:1a:ed:
82:cb:b6:5b:3d:ba:1e:26:55:68:48:80:ba:da:99:27:82:81:
70:3c:26:d2:fd:06:5e:b7:d6:16:1c:31:74:e1:3e:82:57:20:
5f:f1:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:41 2025 by rpki-client