Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf176a1d-6eae-3fe2-bb6d-02e245790a70.roa
File: cf176a1d-6eae-3fe2-bb6d-02e245790a70.roa (raw, json)
Hash identifier: jEWwkq+dWXK7yFOShBDteFKX/CnuoQT1Sw7BX19XZK0=
Subject key identifier: D1:EF:8C:18:AD:80:47:9A:C5:B6:24:D3:1D:52:EE:14:A4:64:0A:4A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F585FAD1C9222C1986D680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf176a1d-6eae-3fe2-bb6d-02e245790a70.roa
Signing time: Thu 23 Jan 2025 13:38:21 +0000
ROA not before: Thu 23 Jan 2025 13:38:21 +0000
ROA not after: Wed 23 Apr 2025 12:38:21 +0000
asID: 396608
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:85:fa:d1:c9:22:2c:19:86:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:21 2025 GMT
Not After : Apr 23 12:38:21 2025 GMT
Subject: CN=cb59011a-c9cd-4800-a337-0318fafa0c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:0a:0d:38:2e:f0:12:4c:e2:20:ec:a6:df:
94:73:11:15:e3:6c:c7:56:90:e2:e1:7d:5e:fd:88:
a0:c0:65:55:2b:61:ea:9d:9f:e2:18:10:33:4c:23:
1f:69:7a:a6:94:07:a3:13:40:74:7f:bb:2b:08:94:
7c:9b:96:b3:5a:1a:62:b1:88:0d:0b:5e:f9:b7:1b:
6b:eb:5c:55:a7:e2:c7:d6:9c:19:9b:1d:27:9f:87:
71:f3:3c:b0:42:29:e6:4c:8c:0c:91:fa:71:bc:32:
94:9c:e7:26:c3:39:f8:b1:d9:80:ad:8e:13:d5:18:
36:a0:91:f0:66:ce:03:cf:d5:1a:5e:dc:f7:21:3b:
aa:9d:a2:8d:7b:ec:00:da:57:be:1f:0e:da:90:3f:
cd:d5:db:5a:cc:40:70:7e:02:04:25:98:4d:ff:da:
03:e4:fc:0e:b5:97:9d:b3:9e:39:5d:76:81:4e:25:
37:33:b8:28:fc:ae:11:6e:42:13:eb:71:22:55:88:
b2:6f:03:f6:05:b1:fb:1b:b0:eb:30:48:1c:f5:b7:
d7:1b:77:da:2a:06:ae:b3:8e:d2:84:52:f4:75:c4:
e0:8b:5e:9d:65:e7:e6:1c:2c:50:9e:e6:7c:f0:ec:
0d:d4:2f:ef:40:e8:95:3d:eb:dc:5e:db:a3:89:21:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EF:8C:18:AD:80:47:9A:C5:B6:24:D3:1D:52:EE:14:A4:64:0A:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf176a1d-6eae-3fe2-bb6d-02e245790a70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:c8:b9:0b:d2:25:c1:50:11:7a:06:2a:fd:29:aa:ce:ab:d9:
8f:dc:7f:08:90:bc:8c:4a:95:ab:37:dd:9b:48:d8:38:26:ca:
54:bc:f2:94:57:ed:97:8b:79:6f:a7:92:d6:90:af:43:ab:4d:
65:32:05:0d:d8:dd:81:24:73:40:9c:55:e7:19:61:4b:5f:df:
9d:f7:ce:db:31:cb:c7:8b:59:54:d6:b5:78:db:bf:44:19:f3:
c8:b5:74:29:12:3e:d0:f1:79:29:73:86:c9:ab:7e:a9:6f:bb:
0f:86:68:39:dd:aa:64:a2:de:d7:a8:f6:7f:34:22:d7:be:85:
60:53:52:00:eb:3e:b9:6b:1a:70:00:bc:4c:03:66:54:6d:77:
f9:98:c5:cb:c8:5b:48:11:5e:5f:39:d4:d6:71:c3:eb:f2:2b:
2c:44:a2:3a:94:67:ff:5f:1c:f2:1f:39:1a:70:c4:3f:ef:2f:
8f:39:65:94:f2:be:45:6b:bc:d9:61:83:fa:5b:ee:82:d8:80:
bc:14:48:59:1f:17:c3:d9:4c:d0:25:11:d4:45:a7:8d:cb:81:
ad:cf:c0:b9:06:df:0e:b5:59:4d:0e:56:20:d9:49:60:90:a1:
9c:13:53:06:8a:dd:9d:e1:53:4f:6b:b4:10:4a:49:f0:a4:01:
e5:bd:85:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:46 2025 by rpki-client