Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5ee7c11-e9ee-3405-825a-7ac410cc7624.roa
File: c5ee7c11-e9ee-3405-825a-7ac410cc7624.roa (raw, json)
Hash identifier: Rr2eR29OhkqVPqBtitzQ1vIW2ZcxFW6r5wRA15y98ok=
Subject key identifier: 3E:E7:E1:80:02:24:FF:99:05:9F:8D:D2:39:92:36:8F:D3:9B:ED:A9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0ECC6A09BC1B92BD99820
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5ee7c11-e9ee-3405-825a-7ac410cc7624.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396590
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ec:c6:a0:9b:c1:b9:2b:d9:98:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=30a8a608-9023-4e6f-9338-9ccea01e5417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e6:2f:5d:c6:86:07:1e:8d:b3:d0:d8:1f:27:
c2:67:0f:a6:f5:70:ca:05:f8:1e:52:6e:fa:43:6b:
b6:39:11:00:f4:ae:10:47:55:3c:b0:04:ed:46:e7:
98:07:2f:1c:cc:45:21:9c:f0:93:93:21:74:c3:e0:
90:1f:97:2d:98:5e:3d:3a:bd:9f:77:4f:22:2d:86:
6e:21:b5:47:c5:76:4e:4f:48:44:fa:44:e6:d4:ca:
7c:74:d3:0e:ac:8d:99:39:ad:6e:40:10:ac:fb:d6:
e5:40:48:14:1f:62:1a:02:a7:36:fa:ab:8f:19:59:
31:2c:02:9b:5d:04:66:dc:42:a2:d5:bd:ae:67:a5:
cd:b9:15:f1:ca:18:4b:fb:13:71:84:51:87:09:63:
ad:8f:0d:d6:57:54:7b:ab:dc:eb:ad:b3:8b:16:90:
cc:73:5c:40:ee:5e:d7:8a:37:90:a6:06:4e:1f:8e:
59:bf:b1:e1:95:aa:7d:c7:e8:bf:12:2d:80:82:f4:
f4:e0:7a:30:2d:da:8c:5b:ef:73:bf:c4:1c:56:d2:
a6:22:6e:b0:b8:04:37:28:e6:2c:5f:11:32:9b:56:
a2:41:3a:9d:19:34:91:49:74:6d:26:7a:18:bd:87:
32:df:d8:9d:2f:28:38:09:37:38:e6:00:68:9b:63:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:E1:80:02:24:FF:99:05:9F:8D:D2:39:92:36:8F:D3:9B:ED:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5ee7c11-e9ee-3405-825a-7ac410cc7624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:cf:41:46:50:72:e2:34:e3:c5:56:c6:f3:0f:48:71:ac:11:
28:8d:f1:d6:b0:84:86:63:a4:cc:34:df:b9:c5:33:4a:67:3c:
a1:07:28:93:cc:df:7c:21:b4:42:2b:1c:80:04:b1:f2:d1:18:
2d:74:d1:06:c8:ce:9e:4d:42:d0:77:58:62:70:02:f2:c0:81:
8d:f7:f2:7f:a4:95:18:70:9d:96:3e:f2:d0:49:bc:b6:e4:10:
31:9b:47:67:01:08:b0:01:12:85:cd:88:d6:f0:d0:cd:1a:b2:
b8:3c:1e:34:bf:9b:90:68:c9:13:38:67:64:57:21:b9:ec:52:
18:62:56:f6:ea:44:f6:82:b0:33:95:03:64:c5:6b:40:53:19:
e7:73:d1:65:bb:0c:70:7c:8a:11:ad:2e:39:f9:69:52:67:61:
4a:3f:92:30:b1:0f:40:b8:be:1e:0f:88:9e:ed:10:47:29:7b:
06:52:f7:1e:29:1d:4a:b8:af:0b:79:2c:68:80:55:15:88:c1:
45:0b:22:97:a2:06:bd:c3:c6:77:22:86:bd:d8:ed:a1:c9:31:
4f:0f:e4:e2:11:3e:89:c1:eb:1c:e9:7f:e3:c7:20:09:f8:4f:
7b:f7:5d:83:ba:f2:39:eb:f6:60:d6:ea:cc:3b:66:ef:89:54:
b3:eb:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:56 2025 by rpki-client