Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d14285a7-2c32-3f04-a207-ae92e3eeeb89.roa
File: d14285a7-2c32-3f04-a207-ae92e3eeeb89.roa (raw, json)
Hash identifier: yYNSAFqPdQrq9VBY1h9RbU9oxxXC+s7aZbWgI68a1tc=
Subject key identifier: 97:9C:DB:E1:6B:9F:37:49:50:6C:B3:43:4A:8B:1C:84:47:5B:2C:E3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AF2BAB014FC225527EF52F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d14285a7-2c32-3f04-a207-ae92e3eeeb89.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 396550
IP address blocks: 192.81.185.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:ab:01:4f:c2:25:52:7e:f5:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=6a5fbfcc-5edc-4efd-98e1-5b3e7c6783b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b0:cf:33:f5:02:46:6d:8e:0d:43:1a:8d:e1:
de:31:dd:8c:3b:71:39:b7:f4:b9:d3:73:3b:a7:fa:
28:7b:77:51:28:3a:93:d0:c3:03:d1:fc:a9:34:c5:
2a:42:f5:d6:f0:a8:79:05:66:98:91:72:dd:c6:02:
a9:6b:66:50:7f:f1:ca:18:5b:d6:85:59:ce:ab:7f:
94:b3:7f:2c:d5:73:f4:50:4e:ae:10:a2:38:50:fd:
06:a8:c0:d7:3a:32:12:c9:c5:46:9e:53:45:29:58:
fc:a5:27:4d:1a:d9:85:40:24:47:22:76:08:e8:21:
35:20:78:7b:2e:67:7c:4f:51:91:a4:04:24:70:09:
b5:c9:e0:f6:d5:8f:39:ec:d9:77:3d:fb:cf:dc:7d:
53:6f:bd:84:ae:d0:c4:a1:74:c6:ad:ce:63:e6:9a:
9e:80:1b:e3:ce:62:e9:9b:12:78:85:93:d8:db:2c:
ab:52:51:34:f8:1f:0e:f1:7a:1e:df:64:fc:b6:40:
00:49:6e:3c:9f:77:5a:2c:92:23:27:b0:95:a7:96:
c0:c6:f3:03:b8:db:02:5c:f6:f3:fa:ee:b1:7c:9f:
19:c3:48:d9:ad:63:0a:d0:80:98:5b:48:f3:16:0c:
5f:c8:ba:31:79:13:f6:cc:e2:f4:ff:cc:96:40:e1:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9C:DB:E1:6B:9F:37:49:50:6C:B3:43:4A:8B:1C:84:47:5B:2C:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d14285a7-2c32-3f04-a207-ae92e3eeeb89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.185.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:76:cd:44:8f:01:c9:39:a0:32:3f:33:7b:0d:58:33:32:1f:
33:59:57:1a:e5:6a:dc:85:90:dc:f1:07:3c:30:03:46:b8:e3:
0b:14:4f:74:32:77:1a:41:5b:bb:f9:17:fc:bd:26:9f:a4:7c:
60:98:7f:b0:a6:dd:63:ef:90:e8:b2:74:ac:7a:1e:e7:a8:f8:
aa:57:a9:50:9c:1a:3a:b6:eb:ec:56:79:fd:c2:2b:54:47:cd:
a0:ac:fe:80:08:fc:39:99:6c:c5:7f:c4:9c:79:04:84:82:6d:
0c:e7:00:8e:e4:04:1c:ea:19:db:65:a9:57:4a:5e:61:9c:5d:
e2:2a:3d:aa:0e:28:c2:60:49:27:8a:a6:5b:61:f4:db:b8:a2:
9b:f3:ec:d1:70:71:0c:b8:d6:b0:57:5b:ac:66:1d:62:25:28:
2d:29:c5:78:e2:44:86:1a:62:16:99:f8:42:fc:a7:f9:37:b0:
59:52:ef:79:4e:d8:d4:70:2b:3a:aa:76:58:99:16:63:5a:ad:
5c:66:a1:b5:4f:55:71:38:7e:a3:d4:45:c6:b5:ca:b3:1f:78:
ac:cf:20:3f:ec:66:6f:ea:84:40:4b:e0:90:2a:60:30:b5:03:
68:bb:1d:ef:d3:39:3a:47:21:3e:6a:da:a5:0d:f6:ab:b7:2b:
0d:d3:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:20 2025 by rpki-client