Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2cb45aa-7ce4-34ef-bb18-6055d0f58738.roa
File: c2cb45aa-7ce4-34ef-bb18-6055d0f58738.roa (raw, json)
Hash identifier: to3FIbP1fJpqx61l+vCiokBWLeXAWB/KW8R+3LCeLIk=
Subject key identifier: F9:17:B9:2B:25:C7:A4:90:61:B8:FD:5E:C5:6D:FD:04:16:91:F8:96
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0F19DE4722980290FFB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2cb45aa-7ce4-34ef-bb18-6055d0f58738.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 10515
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f1:9d:e4:72:29:80:29:0f:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=982ef656-09e8-4a6f-a23d-e77dff7a2100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:75:ee:3d:b9:5c:ca:78:c5:a9:b2:7a:22:
2d:5d:fa:74:00:e8:49:d7:c3:a2:8d:d2:7e:57:31:
0b:ac:2e:2a:b7:cd:2d:26:41:6e:89:42:17:46:f7:
f9:36:af:f2:15:1a:a4:8a:b1:75:64:05:8b:db:96:
e4:65:1a:52:71:d4:ce:26:6b:31:86:18:d0:bf:84:
b9:1e:b8:fd:fb:b5:c8:c1:c9:53:0e:a5:a7:f5:bd:
69:e3:71:68:a1:7c:aa:c8:70:4f:52:be:d4:20:7b:
d3:f9:13:56:b3:46:56:c4:e8:d5:29:59:17:0a:dc:
e1:ee:f1:ac:86:ad:a7:2c:df:4f:01:8b:9a:8a:37:
4b:15:2c:5b:31:5a:d1:0b:53:22:c4:45:64:1b:1c:
f3:63:0f:bd:7d:cc:75:5a:33:bf:e1:ec:6b:97:3b:
7d:3e:c5:25:e2:16:bf:e1:48:3f:d6:b1:71:2c:6a:
9f:c0:bd:cc:8a:c1:9a:8c:7e:3e:b8:6e:6e:0b:e7:
02:1a:a3:c1:a2:87:0b:d0:8d:84:70:f2:a0:85:11:
3f:91:cc:40:ca:a3:c3:2b:5f:34:e7:f4:66:c6:15:
cc:85:75:69:02:c9:f2:55:08:16:6f:f1:bc:b6:bb:
a5:6c:2e:f8:89:b9:19:8c:98:51:da:36:2b:7f:6a:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:B9:2B:25:C7:A4:90:61:B8:FD:5E:C5:6D:FD:04:16:91:F8:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2cb45aa-7ce4-34ef-bb18-6055d0f58738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:6e:e6:18:aa:82:b4:f4:0e:ec:f6:53:2f:ac:6e:cb:84:f8:
c9:e7:3a:20:b4:6b:12:c3:ed:31:ab:d3:53:15:f7:14:7f:ca:
a6:22:d7:65:bd:ca:1a:0b:eb:8f:82:2e:54:b4:9b:81:65:3c:
36:99:43:e6:60:4b:81:b2:2c:76:74:26:ab:04:0b:28:37:c9:
97:e8:8d:02:ff:f0:dd:94:c3:72:99:91:1b:bb:b4:18:ae:03:
3d:c0:82:69:23:af:7d:f1:aa:d5:17:ab:a7:42:1f:9c:20:29:
9e:b2:9c:25:9d:a6:76:9a:27:93:17:9a:78:7e:cc:ba:76:68:
67:2e:3f:8a:2a:e5:e7:55:3b:49:2b:be:22:c3:af:50:a0:b7:
85:2a:22:25:0f:a5:dc:06:90:ba:cb:ac:a5:cc:a7:42:e5:97:
44:5d:d1:13:da:43:3f:f1:1c:e6:7a:2c:a2:85:a5:3b:be:ba:
e0:d7:7b:b5:54:5c:ce:bd:3d:74:a1:8e:ef:1e:c0:e9:74:86:
da:88:a6:ae:92:fa:e3:c8:73:33:fb:ab:6f:b8:d2:ed:fb:0d:
ad:e9:3f:08:a7:41:4d:39:4d:94:94:41:9c:bc:b4:99:b6:40:
3d:00:e8:71:40:5a:2a:89:94:cd:5f:eb:e4:7e:d9:3f:98:55:
ad:3c:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:24 2025 by rpki-client