Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a373a6-bf58-316a-892d-158def1e7db8.roa
File: d7a373a6-bf58-316a-892d-158def1e7db8.roa (raw, json)
Hash identifier: yH5wVuw9PG6JUeyqX2m308d16F7Kq6CEkayQ/aw6JJE=
Subject key identifier: 61:92:3B:52:4D:0B:17:E6:09:BC:64:7D:B2:77:40:AF:CD:A7:8B:A4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C731C5CCCA785B15C700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a373a6-bf58-316a-892d-158def1e7db8.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 397197
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c7:31:c5:cc:ca:78:5b:15:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=d6a7213c-9f30-49e3-9de3-cf8bcccacd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:70:c3:84:f0:78:dc:f0:77:6d:a0:61:38:
f0:ff:5b:6d:39:d0:55:c5:26:a1:38:b3:22:ac:d2:
27:5b:55:81:63:87:e1:0a:b5:9d:6e:a3:22:a7:9d:
5e:0d:99:f8:84:03:bd:9f:f7:e0:eb:e3:ff:ec:68:
c6:3e:e0:09:8d:97:f4:4d:2c:32:9a:e9:dd:41:14:
4a:67:de:36:2d:d6:e6:27:f3:8a:ea:b8:4f:0b:27:
5e:e3:da:9f:79:4b:60:e9:4c:61:64:5e:39:71:a3:
30:8d:6d:ae:ee:ba:1a:8e:51:9d:c2:6d:fe:29:ed:
86:82:f1:3a:54:fe:79:35:ed:b3:76:74:f7:2a:95:
e9:5c:d0:46:6a:40:ef:1b:5d:6d:c1:04:8c:af:8a:
d9:08:0d:12:c3:8f:43:05:be:f8:a0:ed:47:20:78:
fa:d6:8e:c1:1e:66:87:32:d0:e3:89:c1:cd:67:cd:
4d:0a:d5:90:6b:68:8a:7e:20:bf:c6:89:23:cd:85:
36:57:29:21:f0:31:df:7d:76:a0:fe:49:0e:d5:ed:
da:02:4d:9e:e6:be:a2:dc:f5:e0:50:60:b9:c0:97:
be:e6:c2:05:41:6f:d9:e8:9b:d8:d6:47:06:d2:4c:
43:fd:c0:df:99:70:49:93:ea:96:9a:63:91:14:de:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:3B:52:4D:0B:17:E6:09:BC:64:7D:B2:77:40:AF:CD:A7:8B:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a373a6-bf58-316a-892d-158def1e7db8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:11:81:f7:9e:a0:65:36:cf:61:2c:2c:57:d5:17:1a:fd:f5:
c4:5c:11:4f:2c:a0:60:2d:f8:ae:cc:4b:5b:94:eb:63:97:5c:
18:46:58:60:57:2f:38:e2:5d:20:36:d7:b3:12:fb:e9:52:54:
9e:09:c6:26:ab:58:69:2b:7c:e9:b8:bc:26:2d:8e:18:19:7a:
c8:8d:f0:99:30:9e:8e:d5:79:23:08:c9:89:a1:b2:b0:7e:e5:
bb:11:b3:af:8f:26:36:0a:ec:87:35:2a:81:b4:3a:88:52:76:
05:8e:7d:ec:c1:cf:e1:55:f0:65:ad:0f:ea:06:2b:a7:5b:52:
60:cd:f6:8b:36:97:00:e7:84:3a:44:22:ed:b8:9c:92:33:2c:
06:3a:3c:86:9a:ee:7e:38:c9:ad:03:33:58:bf:94:7c:a3:77:
78:38:12:3c:61:5d:03:a5:bb:3a:89:71:81:7c:74:f3:6f:66:
20:60:98:7d:9a:86:f2:75:88:37:02:79:58:0b:99:f7:4a:c7:
a4:cc:f5:99:30:d9:bb:57:cb:b0:20:6e:cf:a0:1f:84:02:34:
ef:08:69:83:57:0e:15:ae:9b:e0:7f:9a:b8:27:0e:af:33:06:
3c:d4:34:55:fc:f2:08:bb:22:ae:17:d5:0b:32:a6:e8:53:f2:
22:ee:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:33 2025 by rpki-client